Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File:                     iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier:          nTqN1qhw5Oo9cHHBU9lnYJsD4PaWycgopBqQ3rEWTyY=
Subject key identifier:   6C:6F:EF:BB:3F:86:69:32:5B:51:02:AA:83:2B:DC:4C:6E:1C:6F:C3
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer:       /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial:       1047
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number:          102B
Signing time:             Wed 20 May 2026 17:26:16 +0000
Manifest this update:     Wed 20 May 2026 17:26:16 +0000
Manifest next update:     Wed 27 May 2026 17:26:16 +0000
Files and hashes:         1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: FCVTw59jXAWp6Upl5jXbDromMdx+zps4bjaCFLghajw=)
                          2: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: JR72/EZy5aRrSFB9vWQMg1q1NBXm5hj69ANbCPmEu98=)
                          3: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: Ri/V1vsZYZSf3Iiz5nBojjsApKtj70HrLpdneU/NrfM=)
                          4: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: XvZz5Qg4UuABOAvZL3TrqvqvGORz9Mmy5LeD7IN22s0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
                          rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4167 (0x1047)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
        Validity
            Not Before: May 20 17:26:16 2026 GMT
            Not After : May 27 17:26:16 2026 GMT
        Subject: CN=6a0deeb8-a9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5d:e5:a8:58:af:10:c4:ac:fb:e6:1b:02:02:
                    2e:c6:a6:f6:a9:af:38:35:38:d1:1a:87:22:09:09:
                    89:04:0b:31:e5:6a:dc:37:31:bc:8c:9c:29:92:e2:
                    25:bf:2a:72:a1:69:0e:e2:ad:1d:6b:0c:6e:81:23:
                    8a:47:50:3c:0f:25:a2:11:63:04:93:ac:7f:9d:8b:
                    ae:15:42:4e:e4:e2:a3:c1:f2:a5:33:8d:96:91:a9:
                    12:63:09:9b:2e:6e:f5:80:f1:74:a6:3b:dd:f8:cf:
                    ad:b3:2b:51:62:1f:cf:a2:dd:24:47:ce:5b:ad:30:
                    32:77:3f:08:73:73:8f:b9:f7:7e:cc:1c:f9:bf:80:
                    b6:b3:aa:53:b9:ee:97:7c:71:c9:43:d8:c9:0b:20:
                    3b:83:6b:e9:1a:50:62:66:c7:33:b3:b0:9a:83:1a:
                    4a:87:91:06:5e:89:61:33:de:05:be:40:cb:a8:8c:
                    52:ef:17:72:76:1e:3e:f2:1b:5f:6d:d2:db:9a:61:
                    ef:5a:09:66:7f:6a:58:bc:ec:5e:52:3a:8a:43:e2:
                    cb:88:c4:2a:08:b6:c0:5f:f9:55:74:38:a9:95:04:
                    ca:c9:ff:ef:56:98:6b:a7:15:11:3c:67:03:e3:e2:
                    07:4e:87:04:fb:f7:de:67:6d:22:31:ff:d8:b7:d6:
                    c5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6F:EF:BB:3F:86:69:32:5B:51:02:AA:83:2B:DC:4C:6E:1C:6F:C3
            X509v3 Authority Key Identifier:
                keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c6:61:e7:de:59:90:0a:b0:9a:36:e0:29:e1:b0:15:b2:05:
         36:58:ac:c1:66:e1:52:25:37:b5:df:02:81:a4:ec:a7:73:2e:
         04:85:2f:d9:3e:2f:fa:b3:87:61:37:9e:22:78:9a:93:63:e9:
         97:ae:1d:16:04:28:b4:58:67:1c:dd:41:26:c0:45:ae:4d:81:
         b0:b8:85:d3:58:5a:d7:83:8e:d9:72:f8:ba:d0:0a:d4:ee:f9:
         bf:dc:67:55:8e:d9:5f:cf:15:7d:89:b2:c1:24:c8:d0:f0:18:
         a5:17:a3:64:f7:89:a9:dc:01:e0:a1:65:74:4f:6d:31:b4:d2:
         3a:d4:e5:42:fe:d7:2a:05:8f:aa:94:03:71:f0:b9:df:29:8f:
         50:7b:6d:63:b8:7e:fb:65:ef:16:89:ca:43:91:b7:1c:3b:11:
         bf:f7:00:f0:a0:68:fa:f1:53:a6:82:6e:3d:27:db:9a:54:fb:
         de:dc:a8:90:c3:c5:55:9a:49:2c:3e:94:62:9c:ae:77:c6:96:
         f9:f8:96:ef:11:26:96:b1:70:48:9c:cc:cd:8d:07:7f:35:59:
         a7:fc:15:fc:fa:7c:d0:4b:38:af:c3:7e:61:11:52:f0:a4:02:
         ce:16:7d:bb:d5:aa:0d:1a:51:5a:0f:b2:48:aa:3d:81:33:7a:
         82:9a:e2:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDRUIxMTAvBgNVBAUTKDg5NURBNjhCQUQ4QTdGOUQzMTc4ODU2QzdCNjJFOUMx
Njg4QjJCNzMwHhcNMjYwNTIwMTcyNjE2WhcNMjYwNTI3MTcyNjE2WjAYMRYwFAYD
VQQDEw02YTBkZWViOC1hOWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0l3lqFivEMSs++YbAgIuxqb2qa84NTjRGociCQmJBAsx5WrcNzG8jJwpkuIl
vypyoWkO4q0dawxugSOKR1A8DyWiEWMEk6x/nYuuFUJO5OKjwfKlM42WkakSYwmb
Lm71gPF0pjvd+M+tsytRYh/Pot0kR85brTAydz8Ic3OPufd+zBz5v4C2s6pTue6X
fHHJQ9jJCyA7g2vpGlBiZsczs7CagxpKh5EGXolhM94FvkDLqIxS7xdydh4+8htf
bdLbmmHvWglmf2pYvOxeUjqKQ+LLiMQqCLbAX/lVdDiplQTKyf/vVphrpxURPGcD
4+IHTocE+/feZ20iMf/Yt9bFiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxv77s/
hmkyW1ECqoMr3ExuHG/DMB8GA1UdIwQYMBaAFIldpoutin+dMXiFbHti6cFoiytz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNFQi83REE1ODNFNDY1
NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1MHhlSVZzZTJMcHdXaUxL
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lWMm1pNjJLZjUweGVJVnNlMkxwd1dpTEszTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUNFQi83REE1ODNFNDY1NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1
MHhlSVZzZTJMcHdXaUxLM00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb8Zh595ZkAqwmjbgKeGwFbIFNliswWbhUiU3td8CgaTsp3MuBIUv2T4v+rOH
YTeeIniak2Ppl64dFgQotFhnHN1BJsBFrk2BsLiF01ha14OO2XL4utAK1O75v9xn
VY7ZX88VfYmywSTI0PAYpRejZPeJqdwB4KFldE9tMbTSOtTlQv7XKgWPqpQDcfC5
3ymPUHttY7h++2XvFonKQ5G3HDsRv/cA8KBo+vFTpoJuPSfbmlT73tyokMPFVZpJ
LD6UYpyud8aW+fiW7xEmlrFwSJzMzY0HfzVZp/wV/Pp80Es4r8N+YRFS8KQCzhZ9
u9WqDRpRWg+ySKo9gTN6gpriZg==
-----END CERTIFICATE-----
Generated at Thu May 21 15:25:01 2026 by rpki-client