Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft
File:                     CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json)
Hash identifier:          zTKShf1tW//4u8bAhIN5QKnAP+zSYjEYYgJUjFffr8Q=
Subject key identifier:   18:9A:1B:8B:AC:2E:D4:47:2D:60:F4:33:A4:25:D6:CE:CA:F9:40:58
Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD
Certificate issuer:       /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft
Manifest number:          0122
Signing time:             Sun 05 Apr 2026 05:06:14 +0000
Manifest this update:     Sun 05 Apr 2026 05:06:13 +0000
Manifest next update:     Sun 12 Apr 2026 05:06:13 +0000
Files and hashes:         1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: qbuLD2u5Y1eemkO79PUdvxsi+W9zrQkOTaFWNrz7VXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl
                          rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD
        Validity
            Not Before: Apr  5 05:06:13 2026 GMT
            Not After : Apr 12 05:06:13 2026 GMT
        Subject: CN=69d1edc6-d9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ea:9c:c4:6c:b5:02:df:65:79:d1:39:0d:d1:
                    eb:31:bb:d9:36:4c:1a:a7:28:cb:f5:1c:57:14:f4:
                    74:82:7b:31:6a:7e:60:92:a7:52:fe:c8:0c:bd:07:
                    de:25:9e:2d:52:38:db:17:c3:56:0d:d8:ef:09:25:
                    53:cf:bb:49:a5:eb:3c:73:80:10:2e:8a:86:4d:9f:
                    25:42:1a:93:0a:91:1e:1d:67:6b:b9:fc:c6:59:1f:
                    01:5c:88:74:53:ad:ec:8c:34:37:7b:42:9d:0a:49:
                    62:9d:6f:ee:e5:fe:bb:1a:31:77:d4:a4:54:83:5a:
                    b4:77:a7:d9:dc:80:2a:f2:21:27:a8:30:2a:a8:ab:
                    d8:68:e0:3e:3b:14:14:03:da:d2:ec:f8:e8:3a:c3:
                    3a:dd:2f:0f:ef:44:ff:f9:d1:a3:4e:30:90:5f:64:
                    ce:5b:3d:d8:fc:1a:57:e5:bf:35:6a:e5:c5:17:cd:
                    08:f8:23:56:b5:ad:39:7c:70:d6:eb:9b:90:b5:eb:
                    c6:ed:fd:09:fa:65:02:d8:f5:40:2f:16:46:16:d5:
                    51:87:67:8d:77:09:95:83:31:fe:e1:94:94:cc:1b:
                    83:cf:81:ca:32:98:05:a4:d8:98:ca:83:48:66:39:
                    19:ac:f0:c0:df:07:dd:27:b0:48:f3:3d:cf:79:33:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9A:1B:8B:AC:2E:D4:47:2D:60:F4:33:A4:25:D6:CE:CA:F9:40:58
            X509v3 Authority Key Identifier:
                keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:14:f4:18:0b:fb:d0:14:f6:79:47:cc:3c:c7:c2:23:14:c3:
         42:2d:77:11:7e:c5:25:0a:15:47:39:30:db:86:78:b3:b2:9e:
         4f:27:1f:f9:c4:44:34:1b:d8:4f:fc:e7:a1:bf:9b:18:5a:7c:
         3c:f6:39:c1:aa:3d:96:00:1b:87:42:52:6e:4b:b9:30:ef:91:
         f6:10:a2:c9:41:c4:2a:a7:46:1e:94:ad:6d:f8:27:88:ee:5b:
         85:bf:27:ae:28:86:4a:5e:e8:0d:26:da:80:29:7b:dd:49:47:
         ed:ab:8a:8d:8c:75:c1:74:d3:9c:dd:de:50:49:16:b4:d8:1d:
         eb:25:d9:fc:1c:30:dd:ea:bf:5b:be:74:77:89:5f:48:f8:21:
         5d:4f:cf:df:f3:c9:10:4d:3f:b8:eb:40:1f:ee:94:41:1f:c1:
         87:22:f7:01:c6:a3:99:bb:fb:86:d4:21:cd:85:7a:86:98:e6:
         d4:f4:28:72:08:c9:3f:06:aa:15:b0:1b:f5:46:e1:42:a7:8b:
         1c:23:31:e6:f4:58:e1:9e:da:cd:14:89:20:d4:6e:f9:ec:f3:
         84:0f:df:f9:6c:d5:2f:54:12:ca:11:ce:03:d9:62:51:00:07:
         46:f0:f1:e4:38:31:d1:16:c3:dd:d4:67:c7:7f:e4:b2:85:b3:
         41:c4:a5:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc3QjkxMTAvBgNVBAUTKDBBMDg4QTE5QkJEQjYxREVEMTkxNkM4NjBBQjJCOEJF
RTE4NkVEQ0QwHhcNMjYwNDA1MDUwNjEzWhcNMjYwNDEyMDUwNjEzWjAYMRYwFAYD
VQQDEw02OWQxZWRjNi1kOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5uqcxGy1At9ledE5DdHrMbvZNkwapyjL9RxXFPR0gnsxan5gkqdS/sgMvQfe
JZ4tUjjbF8NWDdjvCSVTz7tJpes8c4AQLoqGTZ8lQhqTCpEeHWdrufzGWR8BXIh0
U63sjDQ3e0KdCklinW/u5f67GjF31KRUg1q0d6fZ3IAq8iEnqDAqqKvYaOA+OxQU
A9rS7PjoOsM63S8P70T/+dGjTjCQX2TOWz3Y/BpX5b81auXFF80I+CNWta05fHDW
65uQtevG7f0J+mUC2PVALxZGFtVRh2eNdwmVgzH+4ZSUzBuDz4HKMpgFpNiYyoNI
ZjkZrPDA3wfdJ7BI8z3PeTMX8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBiaG4us
LtRHLWD0M6Ql1s7K+UBYMB8GA1UdIwQYMBaAFAoIihm722He0ZFshgqyuL7hhu3N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EQjUxN0IwODc1
QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2YllkN1JrV3lHQ3JLNHZ1R0c3
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NnaUtHYnZiWWQ3UmtXeUdDcks0dnVHRzdjMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzdCOS9EQjUxN0IwODc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2Yllk
N1JrV3lHQ3JLNHZ1R0c3YzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOBT0GAv70BT2eUfMPMfCIxTDQi13EX7FJQoVRzkw24Z4s7KeTycf+cRENBvY
T/znob+bGFp8PPY5wao9lgAbh0JSbku5MO+R9hCiyUHEKqdGHpStbfgniO5bhb8n
riiGSl7oDSbagCl73UlH7auKjYx1wXTTnN3eUEkWtNgd6yXZ/Bww3eq/W750d4lf
SPghXU/P3/PJEE0/uOtAH+6UQR/BhyL3Acajmbv7htQhzYV6hpjm1PQocgjJPwaq
FbAb9UbhQqeLHCMx5vRY4Z7azRSJINRu+ezzhA/f+WzVL1QSyhHOA9liUQAHRvDx
5Dgx0RbD3dRnx3/ksoWzQcSl0Q==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:32 2026 by rpki-client