Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
File:                     CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json)
Hash identifier:          E9ZPVZOYmRPh6PMVkbePtRE628/oYp/ND/bmyZ4+K7E=
Subject key identifier:   E6:17:51:95:95:B2:D7:99:2F:36:1F:3A:FF:CB:F6:26:C5:01:FE:A5
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Certificate issuer:       /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial:       198E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
Manifest number:          197A
Signing time:             Wed 20 May 2026 16:24:44 +0000
Manifest this update:     Wed 20 May 2026 16:24:43 +0000
Manifest next update:     Wed 27 May 2026 16:24:43 +0000
Files and hashes:         1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: HUZzzHWGt91IJEYRO4TuSR5sKmIS3MSmCFl5Jt41wdE=)
                          2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: FF3AIYHnenSUuGagUXAW6Yxw88+RVwJAWvdOH/bQVLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
                          rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6542 (0x198e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
        Validity
            Not Before: May 20 16:24:43 2026 GMT
            Not After : May 27 16:24:43 2026 GMT
        Subject: CN=6a0de04b-34ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:b5:46:98:7f:d6:0e:5b:a5:dd:92:3e:87:
                    57:80:f4:63:a5:93:84:81:67:a8:20:a8:cf:5c:41:
                    e7:4b:6d:eb:41:8f:1d:67:a5:68:e2:2f:10:74:b0:
                    5f:d3:00:bc:96:f1:f8:28:d4:c9:50:b5:e1:10:ce:
                    ff:68:7c:9f:6b:b5:b5:6e:f8:c9:23:be:06:fa:12:
                    5b:d9:15:e5:48:79:16:86:a3:61:9b:ba:91:b0:f2:
                    bd:c5:dd:ff:7a:2d:26:17:6f:8c:10:42:80:54:38:
                    78:24:8d:77:3d:a6:c6:1a:66:08:b4:e4:a8:b6:55:
                    24:c4:0a:fc:11:56:e0:cc:49:38:ec:3b:66:e8:7c:
                    f1:2f:20:aa:e1:2a:cb:9b:2d:1b:0c:35:5a:71:dd:
                    de:56:c4:b3:39:c3:ef:74:10:17:11:9b:f2:8d:2f:
                    ee:00:0c:cd:a3:d8:57:7e:f3:df:26:40:be:f3:6c:
                    21:df:25:25:a4:38:20:26:40:b8:62:5f:cc:bc:49:
                    4d:e4:65:89:5a:f5:8c:b5:62:55:64:54:05:8e:f9:
                    1d:f7:ef:d7:c1:e0:f5:87:50:05:97:01:ff:c9:04:
                    37:08:ac:53:99:64:aa:dc:c0:78:83:0a:1f:60:03:
                    2d:f4:7b:a6:c0:52:6f:3b:bc:dd:92:7c:35:7b:e5:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:17:51:95:95:B2:D7:99:2F:36:1F:3A:FF:CB:F6:26:C5:01:FE:A5
            X509v3 Authority Key Identifier:
                keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f3:9c:75:f3:a7:62:ee:08:5d:5b:ec:94:ac:d4:cf:57:51:
         c6:9a:79:4d:3e:cd:76:02:cc:bc:51:34:c7:36:48:7c:18:da:
         40:86:3e:6e:94:fd:35:50:8c:2b:ba:90:da:59:2f:77:f0:a1:
         78:0e:4a:0c:ad:9a:1f:28:f2:6a:df:e6:ee:c0:0d:cb:d6:d0:
         c1:87:7f:65:9c:ed:03:ff:30:b6:1c:ce:3f:05:c8:23:45:9f:
         38:67:da:2e:fc:c9:24:b9:41:cf:79:3a:53:be:5b:25:56:a8:
         bc:a7:e3:ef:1a:00:72:a1:a2:52:2e:80:0a:78:11:aa:5a:a8:
         b1:d3:4a:b1:0e:3a:c8:a8:fc:da:bb:b6:91:b3:10:15:b3:09:
         7e:29:c7:c1:5e:6b:c5:c1:52:01:dd:68:18:f0:97:5b:b4:a8:
         b0:db:b4:84:5b:08:1b:fc:3d:bb:62:c8:a8:71:15:8a:2a:30:
         8d:b5:f8:ad:25:91:5f:d1:28:c5:cc:9e:a2:69:1e:cf:62:9c:
         ad:9d:0c:bb:e4:0b:d2:b6:88:40:76:36:a6:8f:0b:50:51:ab:
         2c:b5:d9:c7:ab:5a:05:e1:23:41:0b:54:21:64:99:ce:7d:77:
         97:c9:85:49:fe:b9:c5:70:47:0b:99:7e:ef:05:b2:7e:0e:2b:
         c0:83:e0:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZBRkQxMTAvBgNVBAUTKDBBNDIyQTYzOTdEOEVCNkNCMzU3NzUyOTdDRUI1NUE1
RTE4RkUxRTIwHhcNMjYwNTIwMTYyNDQzWhcNMjYwNTI3MTYyNDQzWjAYMRYwFAYD
VQQDEw02YTBkZTA0Yi0zNGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApve1Rph/1g5bpd2SPodXgPRjpZOEgWeoIKjPXEHnS23rQY8dZ6Vo4i8QdLBf
0wC8lvH4KNTJULXhEM7/aHyfa7W1bvjJI74G+hJb2RXlSHkWhqNhm7qRsPK9xd3/
ei0mF2+MEEKAVDh4JI13PabGGmYItOSotlUkxAr8EVbgzEk47Dtm6HzxLyCq4SrL
my0bDDVacd3eVsSzOcPvdBAXEZvyjS/uAAzNo9hXfvPfJkC+82wh3yUlpDggJkC4
Yl/MvElN5GWJWvWMtWJVZFQFjvkd9+/XweD1h1AFlwH/yQQ3CKxTmWSq3MB4gwof
YAMt9HumwFJvO7zdknw1e+X08QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOYXUZWV
steZLzYfOv/L9ibFAf6lMB8GA1UdIwQYMBaAFApCKmOX2Otss1d1KXzrVaXhj+Hi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkFGRC81QkIyMjMwQTky
RjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYyeXpWM1VwZk90VnBlR1A0
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NrSXFZNWZZNjJ5elYzVXBmT3RWcGVHUDRlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkFGRC81QkIyMjMwQTkyRjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYy
eXpWM1VwZk90VnBlR1A0ZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhvOcdfOnYu4IXVvslKzUz1dRxpp5TT7NdgLMvFE0xzZIfBjaQIY+bpT9NVCM
K7qQ2lkvd/CheA5KDK2aHyjyat/m7sANy9bQwYd/ZZztA/8wthzOPwXII0WfOGfa
LvzJJLlBz3k6U75bJVaovKfj7xoAcqGiUi6ACngRqlqosdNKsQ46yKj82ru2kbMQ
FbMJfinHwV5rxcFSAd1oGPCXW7SosNu0hFsIG/w9u2LIqHEViiowjbX4rSWRX9Eo
xcyeomkez2KcrZ0Mu+QL0raIQHY2po8LUFGrLLXZx6taBeEjQQtUIWSZzn13l8mF
Sf65xXBHC5l+7wWyfg4rwIPgJQ==
-----END CERTIFICATE-----
Generated at Thu May 21 17:10:04 2026 by rpki-client