Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
File:                     bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json)
Hash identifier:          6+Fndwnflo0WQ/ER5BTukBHl6RQDhhqBFd3LYkV/Mak=
Subject key identifier:   5A:F4:E8:77:46:00:B4:67:22:49:62:1F:A9:2B:4F:E7:FA:C4:0E:C4
Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A
Certificate issuer:       /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A
Certificate serial:       1252
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
Manifest number:          1247
Signing time:             Thu 16 Apr 2026 17:02:52 +0000
Manifest this update:     Thu 16 Apr 2026 17:02:51 +0000
Manifest next update:     Thu 23 Apr 2026 17:02:51 +0000
Files and hashes:         1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: 8adovMFSGH/4L+JrQXN7F6y0aJZmWVDmnoiOjTiqGfU=)
                          2: DB056F0C688011F09D2C9A15C4F9AE02.roa (hash: 1FdqXdOFWWUo+KdLUHGDbep6dZHGEbAaO0icxl7Y07Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl
                          rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4690 (0x1252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A
        Validity
            Not Before: Apr 16 17:02:51 2026 GMT
            Not After : Apr 23 17:02:51 2026 GMT
        Subject: CN=69e1163c-dda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:80:60:24:3c:f3:03:28:e1:ed:50:0f:46:
                    ea:03:9f:75:09:b2:54:00:2d:e5:88:4d:67:0a:03:
                    e9:b7:7a:8d:4d:46:3b:72:ab:0b:d7:36:a2:2d:bb:
                    4d:b8:0a:f1:df:b5:a5:82:48:f5:be:c2:81:df:63:
                    06:7f:f0:90:c0:c9:0a:5b:62:20:2a:18:36:89:0f:
                    77:bb:67:b4:7f:85:25:5b:48:29:e9:44:2a:63:3e:
                    19:32:41:95:c6:52:4e:ed:87:31:b5:f6:d5:6e:65:
                    5b:22:40:00:18:af:e4:b2:1d:5f:f7:ee:e4:74:40:
                    be:29:03:b0:ee:c0:89:9b:0e:65:79:6f:a9:86:4a:
                    c0:82:90:36:6b:0d:20:44:0b:c4:cd:ba:66:7b:68:
                    5f:e2:a2:44:bc:3b:c7:9f:f3:0b:e7:87:7f:93:b6:
                    3a:4d:17:17:b0:f9:91:6c:4e:45:13:10:35:40:d6:
                    fd:a2:ce:5d:06:b6:fc:34:8a:d0:67:a4:03:cc:47:
                    38:29:02:f9:34:86:07:f0:aa:13:83:84:40:5f:2f:
                    bf:b9:7d:f6:f7:92:f8:f1:f9:52:fa:9a:e4:5c:1c:
                    0f:00:52:93:33:95:3c:8f:ac:9b:61:a5:2d:fd:dc:
                    b9:e5:46:b1:6b:a8:a8:1d:27:89:fe:32:74:2c:5e:
                    be:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F4:E8:77:46:00:B4:67:22:49:62:1F:A9:2B:4F:E7:FA:C4:0E:C4
            X509v3 Authority Key Identifier:
                keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:9d:07:55:08:62:85:9b:ca:6b:22:01:d5:d7:8b:0d:e2:bb:
         e9:b3:54:e2:e8:ac:d2:27:d7:cc:94:69:b3:61:a9:f6:23:31:
         71:fc:68:e9:1d:7d:81:4d:fe:e1:7f:cc:29:bf:37:16:d1:8f:
         9a:e8:ed:86:3d:be:46:eb:db:64:d2:7e:38:f0:53:27:08:73:
         6a:8b:50:a6:aa:b5:28:e5:1f:2b:30:5b:5d:a8:a2:b0:32:0f:
         69:04:e7:22:66:ae:2d:75:a9:22:2e:58:2b:78:ef:b8:72:0b:
         87:b2:3e:bc:c0:43:d0:94:b7:9c:7d:d2:35:0a:dc:26:6e:9c:
         fb:b0:ee:44:fe:e7:0e:d2:ab:7b:c5:08:bd:17:42:73:66:d5:
         a3:02:20:51:e4:eb:d6:4e:95:bc:6e:68:a2:2f:f3:d3:de:8b:
         6d:f4:33:1f:62:f8:59:d8:80:e0:cb:09:27:7f:65:e9:65:3b:
         cf:d6:16:b4:e4:e1:ad:38:50:39:50:37:4e:9f:9a:c2:20:f3:
         d8:9f:db:c3:75:7d:b9:3a:92:d8:7f:ff:7d:9b:8f:38:f4:e1:
         0a:c0:47:85:46:da:be:9e:3e:89:2e:aa:4c:49:f6:94:b3:83:
         e6:7e:0d:93:76:99:70:5b:0d:b6:7c:11:ed:00:ad:9b:e8:d7:
         b3:fb:fe:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICElIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy
RTZDOUQ1MUEwHhcNMjYwNDE2MTcwMjUxWhcNMjYwNDIzMTcwMjUxWjAYMRYwFAYD
VQQDEw02OWUxMTYzYy1kZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0WyAYCQ88wMo4e1QD0bqA591CbJUAC3liE1nCgPpt3qNTUY7cqsL1zaiLbtN
uArx37Wlgkj1vsKB32MGf/CQwMkKW2IgKhg2iQ93u2e0f4UlW0gp6UQqYz4ZMkGV
xlJO7YcxtfbVbmVbIkAAGK/ksh1f9+7kdEC+KQOw7sCJmw5leW+phkrAgpA2aw0g
RAvEzbpme2hf4qJEvDvHn/ML54d/k7Y6TRcXsPmRbE5FExA1QNb9os5dBrb8NIrQ
Z6QDzEc4KQL5NIYH8KoTg4RAXy+/uX3295L48flS+prkXBwPAFKTM5U8j6ybYaUt
/dy55Uaxa6ioHSeJ/jJ0LF6+vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFr06HdG
ALRnIkliH6krT+f6xA7EMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4
RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox
Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC
N2FmQU8xTnExX1V1YkoxUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoJ0HVQhihZvKayIB1deLDeK76bNU4uis0ifXzJRps2Gp9iMxcfxo6R19gU3+
4X/MKb83FtGPmujthj2+RuvbZNJ+OPBTJwhzaotQpqq1KOUfKzBbXaiisDIPaQTn
ImauLXWpIi5YK3jvuHILh7I+vMBD0JS3nH3SNQrcJm6c+7DuRP7nDtKre8UIvRdC
c2bVowIgUeTr1k6VvG5ooi/z096LbfQzH2L4WdiA4MsJJ39l6WU7z9YWtOThrThQ
OVA3Tp+awiDz2J/bw3V9uTqS2H//fZuPOPThCsBHhUbavp4+iS6qTEn2lLOD5n4N
k3aZcFsNtnwR7QCtm+jXs/v+gg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:46:46 2026 by rpki-client