Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
File:                     Te4INvoPfuksLmpsGYAW3oz4vxY.mft (raw, json)
Hash identifier:          i9NU0Z0qOnwYrjDa9GJ52XSa1iPfg4sqtLN61aXJciM=
Subject key identifier:   F9:07:DF:7E:B1:01:75:C1:DE:AE:8B:A5:63:4A:CF:BC:51:E3:82:80
Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16
Certificate issuer:       /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
Certificate serial:       0235
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
Manifest number:          0224
Signing time:             Sun 05 Apr 2026 02:26:36 +0000
Manifest this update:     Sun 05 Apr 2026 02:26:36 +0000
Manifest next update:     Sun 12 Apr 2026 02:26:36 +0000
Files and hashes:         1: Te4INvoPfuksLmpsGYAW3oz4vxY.crl (hash: 5sH6DMV8yD07P2nzmps6mOd2lR3k8Cm706kDK3NvY1U=)
                          2: 9BC1D2907EDF11EE86C6A27BC4F9AE02.roa (hash: /sW7La6h9x+hyUPvzqNyMJ8vxN6nXJwOe40nIYe1WC0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl
                          rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16
        Validity
            Not Before: Apr  5 02:26:36 2026 GMT
            Not After : Apr 12 02:26:36 2026 GMT
        Subject: CN=69d1c85c-f31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:02:7f:17:16:99:9b:90:95:a5:38:a2:4e:
                    7b:b6:8f:53:a2:ae:55:14:a1:91:b3:cf:02:12:66:
                    20:ad:d8:09:9d:97:aa:ea:8b:31:e7:39:54:08:ea:
                    42:13:78:71:7a:21:b3:82:7b:bb:c0:91:f6:ed:71:
                    2b:15:17:99:17:90:b6:af:71:3f:cd:69:bd:ef:04:
                    14:17:f1:c7:af:03:39:e9:90:b7:6a:22:10:e8:af:
                    36:31:0a:a9:ae:30:20:c4:e4:95:f1:fc:27:b0:d5:
                    26:9e:69:bf:38:f5:c3:af:60:1d:64:f3:43:f9:41:
                    c1:8e:2a:ec:56:d8:e7:37:da:64:f4:de:13:5a:2f:
                    9d:64:1c:c5:21:a8:ad:0d:17:ea:b4:53:7a:9a:98:
                    b3:f5:1e:65:76:1b:e7:34:48:06:0b:a1:00:9f:01:
                    ef:3a:47:28:aa:1a:db:c8:ee:43:50:59:a7:65:5f:
                    a7:af:32:0c:d9:04:df:04:5e:21:7a:e1:7d:13:73:
                    62:5f:7f:bd:6b:10:8d:28:e2:21:ab:95:43:9a:05:
                    b4:e8:69:24:3a:bf:97:9d:76:06:08:c9:16:19:9a:
                    43:8c:20:98:87:21:86:87:3c:ca:93:d8:5d:6f:0e:
                    70:90:b2:86:c6:cd:07:a0:71:79:ba:5b:f7:14:92:
                    d9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:07:DF:7E:B1:01:75:C1:DE:AE:8B:A5:63:4A:CF:BC:51:E3:82:80
            X509v3 Authority Key Identifier:
                keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:02:62:4f:99:3f:b5:33:d2:ab:25:a0:80:d1:88:24:27:b8:
         a6:e7:0c:64:84:8c:dd:af:d9:38:f9:c9:a0:e3:0c:1b:0c:77:
         13:7f:ee:c4:00:18:3d:9a:3b:27:9d:78:62:af:ee:7c:de:eb:
         ab:92:5e:8e:9a:16:7f:70:75:00:3d:a3:9c:ad:b3:61:c1:55:
         d7:16:58:81:f6:e5:1a:a4:dd:4d:12:90:4a:e9:ed:29:d6:7a:
         d5:d6:61:97:db:73:f3:a5:f8:10:51:a8:06:8b:d8:b7:c4:f0:
         86:4b:37:ca:ed:3a:ec:3b:61:97:e4:a0:12:3e:6f:a5:e6:8d:
         27:0b:26:5c:f8:3a:7a:41:90:80:22:b8:f0:b5:d4:27:3a:55:
         38:f1:b8:9c:d8:e1:a2:b7:1c:69:34:1f:2b:33:62:a8:a3:c4:
         fd:20:eb:81:43:e1:ac:74:03:f8:4d:ed:8a:06:c0:91:d0:bd:
         2a:98:62:b1:ce:fc:aa:ee:0d:8f:e2:45:da:2c:8a:cb:7d:e4:
         4d:d2:e0:13:c2:9f:34:80:bf:3f:82:c3:d0:77:85:0c:32:cf:
         3d:d1:72:73:fa:07:d5:0a:a8:36:47:39:7d:45:d4:ef:0c:4a:
         26:58:bf:9e:ad:d4:b9:2d:2e:1f:f8:d2:0c:9e:61:2c:d3:a2:
         59:d5:5f:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF
OENGOEJGMTYwHhcNMjYwNDA1MDIyNjM2WhcNMjYwNDEyMDIyNjM2WjAYMRYwFAYD
VQQDEw02OWQxYzg1Yy1mMzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo5kCfxcWmZuQlaU4ok57to9Toq5VFKGRs88CEmYgrdgJnZeq6osx5zlUCOpC
E3hxeiGzgnu7wJH27XErFReZF5C2r3E/zWm97wQUF/HHrwM56ZC3aiIQ6K82MQqp
rjAgxOSV8fwnsNUmnmm/OPXDr2AdZPND+UHBjirsVtjnN9pk9N4TWi+dZBzFIait
DRfqtFN6mpiz9R5ldhvnNEgGC6EAnwHvOkcoqhrbyO5DUFmnZV+nrzIM2QTfBF4h
euF9E3NiX3+9axCNKOIhq5VDmgW06GkkOr+XnXYGCMkWGZpDjCCYhyGGhzzKk9hd
bw5wkLKGxs0HoHF5ulv3FJLZwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkH336x
AXXB3q6LpWNKz7xR44KAMB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1
NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2
eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MUQzQy8xMjcxNTdGMjA1NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1
a3NMbXBzR1lBVzNvejR2eFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANQJiT5k/tTPSqyWggNGIJCe4pucMZISM3a/ZOPnJoOMMGwx3E3/uxAAYPZo7
J514Yq/ufN7rq5JejpoWf3B1AD2jnK2zYcFV1xZYgfblGqTdTRKQSuntKdZ61dZh
l9tz86X4EFGoBovYt8Twhks3yu067Dthl+SgEj5vpeaNJwsmXPg6ekGQgCK48LXU
JzpVOPG4nNjhorccaTQfKzNiqKPE/SDrgUPhrHQD+E3tigbAkdC9Kphisc78qu4N
j+JF2iyKy33kTdLgE8KfNIC/P4LD0HeFDDLPPdFyc/oH1QqoNkc5fUXU7wxKJli/
nq3UuS0uH/jSDJ5hLNOiWdVfJQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:21:10 2026 by rpki-client