Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
File:                     9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json)
Hash identifier:          YnnOWueiCiv/oFcfTBbBIgDx8jnFDLIF9AHExV9gpmI=
Subject key identifier:   D5:D8:2C:CF:2F:C2:4D:EF:39:37:2C:70:6A:FE:64:57:A0:73:12:29
Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
Certificate issuer:       /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
Manifest number:          0127
Signing time:             Mon 01 Jun 2026 06:52:40 +0000
Manifest this update:     Mon 01 Jun 2026 06:52:39 +0000
Manifest next update:     Mon 08 Jun 2026 06:52:39 +0000
Files and hashes:         1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: K5aBlEYFZZCnUwM1y5O83Th/Oa9CJ3D32lKXpS+rcT4=)
                          2: D1D03D026AB211F0976F001AC4F9AE02.roa (hash: 5Lek0/TY1VnVxY+8seA94qWb37v69wiqgc1rAck09Kw=)
                          3: D0E4A1946AB211F0976F001AC4F9AE02.roa (hash: Nl4kN6jm52cuyAkdi4em+9Vsp1W9ZdwhxrwVDXbPRaA=)
                          4: D0680FF86AB211F0976F001AC4F9AE02.roa (hash: xvCQat8cEUCOVzKUZe2Y4zreB9P77CYReFAzizbnP0s=)
                          5: 974ADC40B6FD11F0BEBA196FC4F9AE02.roa (hash: eSNXNT3NWZ6GsZhGHaO1BXwN0Y2Sx0KnClUlxO8jfHM=)
                          6: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: /HIHLpwd0S664HfhvVwLMbh80nHNNDuDIVOHq1h+TQ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
                          rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
        Validity
            Not Before: Jun  1 06:52:39 2026 GMT
            Not After : Jun  8 06:52:39 2026 GMT
        Subject: CN=6a1d2c38-0013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b4:b2:2d:ea:da:3a:d3:0a:e9:7a:ed:35:8f:
                    f5:15:7b:27:a1:de:58:a0:d5:5f:4b:61:72:86:30:
                    30:80:ba:33:ac:e1:48:15:38:b0:db:f6:fe:ee:0e:
                    c6:53:4a:99:a8:77:4d:90:a1:fa:95:2f:3b:0c:ba:
                    bd:f7:f9:aa:44:87:8d:98:91:2b:7a:b3:6d:22:06:
                    00:bb:3a:13:20:5b:3b:9c:d6:96:39:81:30:f7:28:
                    99:8a:24:86:39:b6:dc:98:92:76:96:64:1f:76:3c:
                    1f:df:2c:05:77:7c:9d:f2:b3:fe:94:b4:6a:d1:44:
                    0a:22:c5:4c:0a:38:93:36:65:d1:2f:b5:c1:f7:7f:
                    af:55:52:c6:d6:72:13:67:41:d9:23:72:b2:a4:4e:
                    9c:bd:36:e1:0d:53:aa:41:35:26:cd:43:b6:9e:e3:
                    80:62:e0:0c:e5:71:38:b3:bd:be:46:9d:8e:78:97:
                    35:8f:56:55:f0:99:85:3e:78:b8:f6:c1:ae:f9:71:
                    d1:0d:15:d6:ac:c9:53:ca:af:2b:f2:1e:66:97:c2:
                    67:56:e6:0a:31:4c:4f:f4:5e:f6:bf:17:bb:c9:f3:
                    ed:e5:0b:26:49:fe:4c:f4:96:88:46:73:50:2c:2a:
                    cd:58:9a:c2:b0:ed:64:c8:94:89:db:c1:89:c6:44:
                    5a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D8:2C:CF:2F:C2:4D:EF:39:37:2C:70:6A:FE:64:57:A0:73:12:29
            X509v3 Authority Key Identifier:
                keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:56:4f:5d:01:d6:a8:34:4a:58:2e:fd:d5:4c:15:12:c1:9e:
         f7:60:29:c5:33:70:73:88:70:dd:13:0b:da:3f:cf:03:48:7e:
         77:a1:bf:ea:bf:c4:51:65:5c:0c:d7:a4:e2:fb:83:84:2f:a4:
         7f:82:3e:0c:fb:c3:6d:31:bf:21:c6:0d:b7:de:93:23:9f:fd:
         00:ea:b1:ea:f9:8a:4c:c7:46:41:d9:22:57:a0:d2:de:1f:82:
         81:1a:eb:b0:56:c0:cf:52:ad:62:c1:63:1f:87:4a:41:88:92:
         5d:90:4b:64:81:a5:8c:e1:3d:17:22:e9:66:20:f5:3f:f5:f8:
         b7:a2:42:8b:4e:e7:7f:3a:c1:09:88:8a:29:74:c6:ed:34:12:
         4d:a4:0a:c9:26:b5:4d:65:b8:c4:8e:00:9e:3b:31:23:f4:c1:
         f9:c8:02:27:71:15:dd:02:43:05:9b:84:06:a1:cb:d2:e8:74:
         d8:73:b4:1a:b7:59:c7:43:a9:99:8a:f5:1c:c5:6b:3a:44:62:
         3b:b7:06:93:c2:eb:d0:02:de:40:0f:b6:f6:85:84:46:bf:46:
         c9:c3:0f:7f:1a:b1:2a:96:f4:c5:34:3f:cf:4e:33:ef:46:55:
         50:e6:d1:d9:6d:a2:d3:6d:3f:e5:05:b8:22:93:9e:37:3c:7a:
         b2:d7:b1:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg1RTkxMTAvBgNVBAUTKEY2OThCNUI0N0EwNkQ1MzA3REVDNjA4OTY5MDYzMDc0
QjY4RkY1Q0EwHhcNMjYwNjAxMDY1MjM5WhcNMjYwNjA4MDY1MjM5WjAYMRYwFAYD
VQQDEw02YTFkMmMzOC0wMDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAirSyLeraOtMK6XrtNY/1FXsnod5YoNVfS2FyhjAwgLozrOFIFTiw2/b+7g7G
U0qZqHdNkKH6lS87DLq99/mqRIeNmJErerNtIgYAuzoTIFs7nNaWOYEw9yiZiiSG
ObbcmJJ2lmQfdjwf3ywFd3yd8rP+lLRq0UQKIsVMCjiTNmXRL7XB93+vVVLG1nIT
Z0HZI3KypE6cvTbhDVOqQTUmzUO2nuOAYuAM5XE4s72+Rp2OeJc1j1ZV8JmFPni4
9sGu+XHRDRXWrMlTyq8r8h5ml8JnVuYKMUxP9F72vxe7yfPt5QsmSf5M9JaIRnNQ
LCrNWJrCsO1kyJSJ28GJxkRa7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNXYLM8v
wk3vOTcscGr+ZFegcxIpMB8GA1UdIwQYMBaAFPaYtbR6BtUwfexgiWkGMHS2j/XK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DOTI4MDQzQUQx
NzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFUQjk3R0NKYVFZd2RMYVA5
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDljby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODVFOS9DOTI4MDQzQUQxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFU
Qjk3R0NKYVFZd2RMYVA5Y28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp1ZPXQHWqDRKWC791UwVEsGe92ApxTNwc4hw3RML2j/PA0h+d6G/6r/EUWVc
DNek4vuDhC+kf4I+DPvDbTG/IcYNt96TI5/9AOqx6vmKTMdGQdkiV6DS3h+CgRrr
sFbAz1KtYsFjH4dKQYiSXZBLZIGljOE9FyLpZiD1P/X4t6JCi07nfzrBCYiKKXTG
7TQSTaQKySa1TWW4xI4AnjsxI/TB+cgCJ3EV3QJDBZuEBqHL0uh02HO0GrdZx0Op
mYr1HMVrOkRiO7cGk8Lr0ALeQA+29oWERr9GycMPfxqxKpb0xTQ/z04z70ZVUObR
2W2i020/5QW4IpOeNzx6stextA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:38 2026 by rpki-client