Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
File:                     Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft (raw, json)
Hash identifier:          zoQaVfTx7gBLgiIA7NWrzpf/EsQg1ucu46p0XTtaPJE=
Subject key identifier:   DD:B9:1C:83:CB:5A:DF:9A:C1:0D:64:5B:E7:B2:7F:57:85:DF:25:9F
Authority key identifier: 46:0F:6A:FE:69:CF:A8:9C:CF:D6:01:0F:E2:BA:4F:9E:21:F7:BE:73
Certificate issuer:       /CN=A91CCE09/serialNumber=460F6AFE69CFA89CCFD6010FE2BA4F9E21F7BE73
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
Manifest number:          0D
Signing time:             Wed 11 Mar 2026 07:54:31 +0000
Manifest this update:     Wed 11 Mar 2026 07:54:30 +0000
Manifest next update:     Wed 18 Mar 2026 07:54:30 +0000
Files and hashes:         1: Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl (hash: 9rlmWPPhJyASrxn643uzZUpACERqkh69gnDJOEdZF0k=)
                          2: 5396275C112A11F1ADC700F81B3D8C67.roa (hash: wxsoV6n9bNMMjGcsLAWPPKxBCyMgY8xWZ0QUFwcjolY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl
                          rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 07:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCE09, serialNumber=460F6AFE69CFA89CCFD6010FE2BA4F9E21F7BE73
        Validity
            Not Before: Mar 11 07:54:30 2026 GMT
            Not After : Mar 18 07:54:30 2026 GMT
        Subject: CN=69b11fb7-af5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:cd:86:8f:15:9c:75:c3:9b:81:f0:fe:b5:
                    d5:b4:c0:4d:ff:20:47:68:98:17:01:9d:a1:ae:45:
                    38:a8:b6:bc:98:5a:22:ed:f9:f4:b6:9f:29:5a:c0:
                    cb:ce:a3:d8:1e:ef:80:06:78:00:51:f7:f5:cc:86:
                    d9:7f:26:71:cf:be:05:04:0e:63:1a:88:65:fc:04:
                    ff:f8:4b:d1:bb:bd:69:98:32:3b:24:45:a5:f9:8d:
                    59:f4:d4:a6:6a:70:21:c9:a5:f0:84:cf:7e:a6:48:
                    fc:87:4a:eb:3b:b3:e3:68:d1:07:11:ce:58:5c:ae:
                    bb:ae:12:3e:cc:36:04:74:2f:f1:f9:a5:5f:8d:b4:
                    5e:e2:bc:4d:36:ed:df:b7:d8:64:a0:54:5d:f2:c8:
                    91:6d:74:c2:dc:0d:8b:23:d1:60:70:06:da:c7:48:
                    38:67:85:d2:01:23:4b:65:18:15:9b:15:40:e3:39:
                    93:b4:5d:35:bf:2a:9e:b3:e3:51:5f:20:c3:21:e5:
                    e5:01:2a:58:2e:2b:59:c9:4f:db:31:95:54:ec:ab:
                    73:13:b6:95:c5:b0:a0:9d:4a:c4:d8:ec:5e:2e:30:
                    ff:fd:11:7a:25:7b:74:34:ae:07:ca:d6:4e:88:82:
                    79:63:bb:c4:41:7c:1a:71:08:55:1d:38:37:c5:3a:
                    45:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B9:1C:83:CB:5A:DF:9A:C1:0D:64:5B:E7:B2:7F:57:85:DF:25:9F
            X509v3 Authority Key Identifier:
                keyid:46:0F:6A:FE:69:CF:A8:9C:CF:D6:01:0F:E2:BA:4F:9E:21:F7:BE:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:38:b3:0b:62:d0:e1:ba:7e:a6:3d:fe:1b:f6:83:4e:15:4c:
         c6:c8:f1:a2:ab:0b:93:2e:34:da:a1:54:ef:b6:9b:34:a1:a6:
         d7:56:53:cc:ab:c0:65:90:8b:b9:d4:c3:d4:d6:f8:97:3c:43:
         31:7f:12:04:3e:f6:b9:47:8f:94:16:12:02:a2:63:b9:05:2c:
         30:4b:94:06:4a:b3:20:e8:b7:11:00:72:91:2b:d4:38:33:3f:
         90:2e:99:f9:a9:5c:81:f1:21:76:57:34:c2:5c:ea:e4:ee:17:
         64:dc:2f:93:39:56:da:50:2b:b2:b9:6f:c8:ac:cd:2c:49:85:
         f5:c2:12:cb:6a:ac:ce:9e:d0:e2:d7:f4:7a:69:00:f5:6b:6f:
         37:bd:6a:a2:24:17:17:3a:c9:ab:c6:63:2c:80:b4:58:95:a8:
         d5:46:f0:1d:67:64:01:bc:84:74:9c:7a:18:dd:86:ce:07:70:
         8e:34:f1:90:49:ea:9f:98:26:b9:8d:b1:ac:cc:92:af:c3:19:
         96:db:c5:39:33:22:06:bf:f8:79:c8:e7:52:f4:13:cb:d1:44:
         e9:59:cf:42:5f:ea:e7:93:4a:fa:87:03:12:15:43:64:4a:50:
         d2:9b:24:e0:5a:04:fe:46:3e:9c:7f:5f:04:47:1d:9c:b4:07:
         4e:f9:73:2a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
Q0UwOTExMC8GA1UEBRMoNDYwRjZBRkU2OUNGQTg5Q0NGRDYwMTBGRTJCQTRGOUUy
MUY3QkU3MzAeFw0yNjAzMTEwNzU0MzBaFw0yNjAzMTgwNzU0MzBaMBgxFjAUBgNV
BAMTDTY5YjExZmI3LWFmNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC31s2GjxWcdcObgfD+tdW0wE3/IEdomBcBnaGuRTiotryYWiLt+fS2nylawMvO
o9ge74AGeABR9/XMhtl/JnHPvgUEDmMaiGX8BP/4S9G7vWmYMjskRaX5jVn01KZq
cCHJpfCEz36mSPyHSus7s+No0QcRzlhcrruuEj7MNgR0L/H5pV+NtF7ivE027d+3
2GSgVF3yyJFtdMLcDYsj0WBwBtrHSDhnhdIBI0tlGBWbFUDjOZO0XTW/Kp6z41Ff
IMMh5eUBKlguK1nJT9sxlVTsq3MTtpXFsKCdSsTY7F4uMP/9EXole3Q0rgfK1k6I
gnlju8RBfBpxCFUdODfFOkXvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3bkcg8ta
35rBDWRb57J/V4XfJZ8wHwYDVR0jBBgwFoAURg9q/mnPqJzP1gEP4rpPniH3vnMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDRTA5LzQ5MjhCMTBBMTEy
OTExRjFCNjRCRjhCQzFCM0Q4QzY3L1JnOXFfbW5QcUp6UDFnRVA0cnBQbmlIM3Zu
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUmc5cV9tblBxSnpQMWdFUDRycFBuaUgzdm5NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
RTA5LzQ5MjhCMTBBMTEyOTExRjFCNjRCRjhCQzFCM0Q4QzY3L1JnOXFfbW5QcUp6
UDFnRVA0cnBQbmlIM3ZuTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB8OLMLYtDhun6mPf4b9oNOFUzGyPGiqwuTLjTaoVTvtps0oabXVlPMq8BlkIu5
1MPU1viXPEMxfxIEPva5R4+UFhIComO5BSwwS5QGSrMg6LcRAHKRK9Q4Mz+QLpn5
qVyB8SF2VzTCXOrk7hdk3C+TOVbaUCuyuW/IrM0sSYX1whLLaqzOntDi1/R6aQD1
a283vWqiJBcXOsmrxmMsgLRYlajVRvAdZ2QBvIR0nHoY3YbOB3CONPGQSeqfmCa5
jbGszJKvwxmW28U5MyIGv/h5yOdS9BPL0UTpWc9CX+rnk0r6hwMSFUNkSlDSmyTg
WgT+Rj6cf18ERx2ctAdO+XMq
-----END CERTIFICATE-----
Generated at Fri Mar 13 00:16:45 2026 by rpki-client