Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
File:                     zPWB9MM8pEQeGAfjlsXv51-oLdA.mft (raw, json)
Hash identifier:          cO+YT+0hCwqNHtYhYJZuDROnirCCEYd1pbU2ebOIUTw=
Subject key identifier:   C2:F0:1C:9B:2C:5D:22:17:3C:7A:2B:6A:BB:72:A2:26:6C:85:B9:09
Authority key identifier: CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0
Certificate issuer:       /CN=A9111A27/serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0
Certificate serial:       0AE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
Manifest number:          0AD7
Signing time:             Thu 16 Apr 2026 19:21:09 +0000
Manifest this update:     Thu 16 Apr 2026 19:21:08 +0000
Manifest next update:     Thu 23 Apr 2026 19:21:08 +0000
Files and hashes:         1: zPWB9MM8pEQeGAfjlsXv51-oLdA.crl (hash: qSbrP3SX1K7Eea0DaHEFJGf1tgQLoNJGQbHLy1NFDn4=)
                          2: EECBCEBE6E3511EABDE26D73C4F9AE02.roa (hash: r1pD0Q+gqTEwuW8+FxM3DxEOTWIuAGXXddrFG01zuI0=)
                          3: 4A644958BA0311F084B11F0DC4F9AE02.roa (hash: jYg6q/W/0HVfh05DuMfHV7pRX1CgQotQsytTOYFkR4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl
                          rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2790 (0xae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111A27, serialNumber=CCF581F4C33CA4441E1807E396C5EFE75FA82DD0
        Validity
            Not Before: Apr 16 19:21:08 2026 GMT
            Not After : Apr 23 19:21:08 2026 GMT
        Subject: CN=69e136a4-5e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1c:3a:b2:c5:52:a8:40:bf:27:9d:48:1c:fa:
                    82:7e:ae:9e:47:8f:66:4b:f2:ea:57:5f:ca:0f:ee:
                    42:77:3d:82:0c:9a:c9:2d:61:66:3d:85:c5:f7:5e:
                    c6:9b:79:a2:b4:ff:64:e6:00:ea:e4:a4:8a:c5:f1:
                    25:8a:2a:25:f2:52:f1:69:ae:ec:d5:6b:48:8e:5c:
                    94:24:d7:1b:ba:da:6d:ec:91:59:be:e2:1b:c6:8e:
                    7a:22:ab:41:89:5e:5f:45:06:e3:00:7d:30:45:92:
                    55:eb:18:d8:8c:26:1c:c5:02:05:ba:f4:11:6b:60:
                    7d:3d:eb:38:77:e1:4c:d3:0c:10:f3:3d:5d:52:73:
                    a6:d9:0b:2f:74:35:d6:c1:ba:c6:f6:f2:3c:d7:52:
                    23:88:37:c9:35:b4:aa:0e:d2:6a:de:6d:5f:a3:cc:
                    a3:50:3a:d1:e3:d8:60:11:74:ac:bd:0e:21:cf:36:
                    80:59:bf:83:a3:1d:99:68:d9:dc:75:7b:c4:fe:18:
                    1c:b3:b7:ea:eb:29:c0:f7:90:1a:66:9e:3f:7e:f3:
                    ad:74:ae:74:5e:e6:b1:ac:3c:d7:09:22:3a:da:bf:
                    41:1b:b2:ca:e8:dd:ac:da:4e:fd:e7:32:a1:b8:69:
                    33:54:03:82:42:f6:d4:4d:b2:06:b6:73:30:28:0f:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F0:1C:9B:2C:5D:22:17:3C:7A:2B:6A:BB:72:A2:26:6C:85:B9:09
            X509v3 Authority Key Identifier:
                keyid:CC:F5:81:F4:C3:3C:A4:44:1E:18:07:E3:96:C5:EF:E7:5F:A8:2D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPWB9MM8pEQeGAfjlsXv51-oLdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A27/662518BE6E3411EA841D426EC4F9AE02/zPWB9MM8pEQeGAfjlsXv51-oLdA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:bf:01:2d:93:c8:23:00:da:ef:65:5d:e1:9b:55:31:4a:4b:
         c0:e5:bd:59:5e:df:87:db:ba:b2:8a:70:a8:9f:4a:0e:40:4b:
         5f:c8:cf:d5:16:8a:0c:49:f1:1e:5d:c8:97:9b:e1:3b:b9:4a:
         cd:0b:23:44:d7:4e:f3:53:4b:c1:e6:1d:5b:d1:92:a9:ce:1d:
         09:3c:f7:37:7d:e0:ff:a0:6c:03:8a:84:5b:60:64:65:23:86:
         a8:d4:33:20:42:79:dd:e7:61:30:f4:d8:57:6c:33:6d:49:b3:
         cc:4e:8e:fa:01:87:ab:bc:ae:ab:dd:49:c6:b4:a9:c6:05:86:
         e4:c4:8e:72:e5:d9:e4:c4:9d:d8:d3:27:ca:20:81:88:1c:7e:
         d8:61:7b:bf:3e:e5:06:93:b0:51:f6:35:60:b6:55:55:4c:36:
         69:f4:60:70:0b:76:b7:5a:81:7c:f0:3b:39:ad:76:8c:d6:00:
         10:20:42:47:ee:bf:1c:41:d6:f3:44:9d:ba:ae:70:da:00:be:
         5d:eb:a3:c1:f4:52:91:5f:78:58:a4:fa:9d:22:1a:5a:fb:77:
         50:97:e6:b9:d1:ad:64:f2:d3:9a:00:20:46:03:b7:2f:82:72:
         6f:14:dc:59:cc:8f:b9:1b:e8:c3:05:19:19:98:94:d5:57:73:
         4c:4f:1b:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFBMjcxMTAvBgNVBAUTKENDRjU4MUY0QzMzQ0E0NDQxRTE4MDdFMzk2QzVFRkU3
NUZBODJERDAwHhcNMjYwNDE2MTkyMTA4WhcNMjYwNDIzMTkyMTA4WjAYMRYwFAYD
VQQDEw02OWUxMzZhNC01ZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1hw6ssVSqEC/J51IHPqCfq6eR49mS/LqV1/KD+5Cdz2CDJrJLWFmPYXF917G
m3mitP9k5gDq5KSKxfEliiol8lLxaa7s1WtIjlyUJNcbutpt7JFZvuIbxo56IqtB
iV5fRQbjAH0wRZJV6xjYjCYcxQIFuvQRa2B9Pes4d+FM0wwQ8z1dUnOm2QsvdDXW
wbrG9vI811IjiDfJNbSqDtJq3m1fo8yjUDrR49hgEXSsvQ4hzzaAWb+Dox2ZaNnc
dXvE/hgcs7fq6ynA95AaZp4/fvOtdK50XuaxrDzXCSI62r9BG7LK6N2s2k795zKh
uGkzVAOCQvbUTbIGtnMwKA8gkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLwHJss
XSIXPHorartyoiZshbkJMB8GA1UdIwQYMBaAFMz1gfTDPKREHhgH45bF7+dfqC3Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUEyNy82NjI1MThCRTZF
MzQxMUVBODQxRDQyNkVDNEY5QUUwMi96UFdCOU1NOHBFUWVHQWZqbHNYdjUxLW9M
ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pQV0I5TU04cEVRZUdBZmpsc1h2NTEtb0xkQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUEyNy82NjI1MThCRTZFMzQxMUVBODQxRDQyNkVDNEY5QUUwMi96UFdCOU1NOHBF
UWVHQWZqbHNYdjUxLW9MZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq78BLZPIIwDa72Vd4ZtVMUpLwOW9WV7fh9u6sopwqJ9KDkBLX8jP1RaKDEnx
Hl3Il5vhO7lKzQsjRNdO81NLweYdW9GSqc4dCTz3N33g/6BsA4qEW2BkZSOGqNQz
IEJ53edhMPTYV2wzbUmzzE6O+gGHq7yuq91JxrSpxgWG5MSOcuXZ5MSd2NMnyiCB
iBx+2GF7vz7lBpOwUfY1YLZVVUw2afRgcAt2t1qBfPA7Oa12jNYAECBCR+6/HEHW
80Sduq5w2gC+XeujwfRSkV94WKT6nSIaWvt3UJfmudGtZPLTmgAgRgO3L4JybxTc
WcyPuRvowwUZGZiU1VdzTE8bqw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:29 2026 by rpki-client