Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
File:                     ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json)
Hash identifier:          1QIO92jpUEQv8Nm2XSDIWubK6afRm53ZRgMQkPjE6j0=
Subject key identifier:   40:90:D6:2C:57:0C:95:57:BB:61:D3:3D:A2:A8:AC:AF:E0:B0:2B:42
Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A
Certificate issuer:       /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
Certificate serial:       1028
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
Manifest number:          1009
Signing time:             Sat 18 Apr 2026 17:23:52 +0000
Manifest this update:     Sat 18 Apr 2026 17:23:51 +0000
Manifest next update:     Sat 25 Apr 2026 17:23:51 +0000
Files and hashes:         1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: 6yLo12ZaW7FZzRdMpwRD4My++s//9rqhYHYgdUtbBts=)
                          2: B0604836C95A11F0930CD216C4F9AE02.roa (hash: EnZs3mTC0q1qED5zDn4PS3o4858HJMq03DhNGu6sIpU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl
                          rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 17:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4136 (0x1028)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
        Validity
            Not Before: Apr 18 17:23:51 2026 GMT
            Not After : Apr 25 17:23:51 2026 GMT
        Subject: CN=69e3be28-6da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:cf:29:45:60:e0:2b:f4:fa:16:f8:8e:8e:
                    bd:cb:97:54:63:fe:16:51:01:c6:36:2c:96:f6:49:
                    6e:d7:34:ee:cc:c9:22:fc:bc:90:ad:3c:fe:d3:1c:
                    f5:a4:26:7a:8c:1a:38:58:23:22:30:89:08:5f:44:
                    36:fc:18:86:99:95:9f:3a:50:06:c0:4a:ca:29:25:
                    e8:ce:d7:7f:4e:a8:83:6c:27:2a:51:6c:61:cd:ef:
                    f8:4c:cc:70:6b:8a:ca:30:13:9a:7e:6c:6b:93:c6:
                    84:f9:5b:18:44:18:67:5b:17:2c:91:e1:10:c6:c2:
                    e1:74:77:13:9c:32:cc:b1:a2:ee:8b:57:a0:4b:9b:
                    cd:ff:55:46:d0:62:f1:f1:e7:d1:04:2f:d4:4d:e8:
                    ba:67:99:49:7d:8b:4d:b1:19:ca:39:e9:7d:e3:81:
                    de:67:80:db:7a:41:76:57:c5:a7:9a:74:ae:d8:32:
                    56:e8:8a:26:98:8b:88:e6:98:85:bd:19:41:29:d8:
                    81:b5:2e:ea:5a:89:40:b3:07:57:21:82:ed:bd:a6:
                    8a:01:97:9a:73:88:46:a9:1c:8b:0f:27:ca:9e:f7:
                    f0:80:d1:4b:8f:50:a4:9d:a1:a5:6e:3b:bf:34:24:
                    b1:67:de:70:2b:b8:b7:0f:ce:f4:0e:0e:9e:d2:31:
                    c0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:90:D6:2C:57:0C:95:57:BB:61:D3:3D:A2:A8:AC:AF:E0:B0:2B:42
            X509v3 Authority Key Identifier:
                keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:1c:d4:7c:49:37:0f:fa:66:75:bc:93:34:c9:8e:4e:cf:84:
         28:7a:7d:ad:45:bb:5b:28:c6:7b:15:37:3d:93:72:5d:d4:5c:
         93:f6:d6:1f:a2:e3:4c:4c:36:0c:2d:19:fa:3c:db:c6:45:28:
         a9:bf:4f:5f:a7:12:a2:fe:d6:5b:6b:74:98:7a:da:e6:2e:bd:
         3e:a9:de:5e:8a:13:d4:77:dd:b1:45:21:5a:ba:60:e7:eb:28:
         b6:12:c3:65:9a:49:48:99:db:4e:c7:4f:51:65:e1:47:ac:06:
         39:d0:2c:28:22:52:d6:9e:1b:a0:78:8c:ad:c4:36:f6:b9:42:
         52:40:a8:f2:29:9d:fa:a9:cb:c8:a0:d1:2f:35:39:27:76:ec:
         f2:5a:83:c9:83:dc:98:b0:7e:9e:d5:fc:bf:46:48:42:3d:71:
         86:ab:7a:d3:ab:d1:8e:f6:20:79:9f:5e:16:11:95:5f:f3:85:
         2e:9c:db:25:94:a8:a9:d1:e0:94:7c:2e:8f:1c:ce:cb:bb:06:
         fe:26:69:de:50:c9:8d:5d:00:37:71:8f:34:72:37:b2:f0:41:
         c1:51:95:96:4e:2a:6e:09:76:2b:1b:c6:90:ee:f3:5d:e5:c5:
         30:e5:03:dc:d8:ab:f4:b4:7e:5d:1c:1a:f4:10:e4:c2:d4:95:
         99:5c:41:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICECgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1
MkJCODg5OUEwHhcNMjYwNDE4MTcyMzUxWhcNMjYwNDI1MTcyMzUxWjAYMRYwFAYD
VQQDEw02OWUzYmUyOC02ZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyvfPKUVg4Cv0+hb4jo69y5dUY/4WUQHGNiyW9klu1zTuzMki/LyQrTz+0xz1
pCZ6jBo4WCMiMIkIX0Q2/BiGmZWfOlAGwErKKSXoztd/TqiDbCcqUWxhze/4TMxw
a4rKMBOafmxrk8aE+VsYRBhnWxcskeEQxsLhdHcTnDLMsaLui1egS5vN/1VG0GLx
8efRBC/UTei6Z5lJfYtNsRnKOel944HeZ4DbekF2V8WnmnSu2DJW6IommIuI5piF
vRlBKdiBtS7qWolAswdXIYLtvaaKAZeac4hGqRyLDyfKnvfwgNFLj1CknaGlbju/
NCSxZ95wK7i3D870Dg6e0jHAmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECQ1ixX
DJVXu2HTPaKorK/gsCtCMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw
OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUJERi9FNzBFMEE5ODcwOTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThH
Z1paTmhZLVJST0JTdTRpWm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcxzUfEk3D/pmdbyTNMmOTs+EKHp9rUW7WyjGexU3PZNyXdRck/bWH6LjTEw2
DC0Z+jzbxkUoqb9PX6cSov7WW2t0mHra5i69PqneXooT1HfdsUUhWrpg5+sothLD
ZZpJSJnbTsdPUWXhR6wGOdAsKCJS1p4boHiMrcQ29rlCUkCo8imd+qnLyKDRLzU5
J3bs8lqDyYPcmLB+ntX8v0ZIQj1xhqt606vRjvYgeZ9eFhGVX/OFLpzbJZSoqdHg
lHwujxzOy7sG/iZp3lDJjV0AN3GPNHI3svBBwVGVlk4qbgl2KxvGkO7zXeXFMOUD
3Nir9LR+XRwa9BDkwtSVmVxBkw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 02:22:36 2026 by rpki-client