Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
File:                     cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json)
Hash identifier:          sHVBTRyL6jM45kqCflhXPb6VSH8GCZvy54Qb/KOg880=
Subject key identifier:   B3:DB:CF:2C:BE:3B:53:CC:C0:EA:B2:43:0A:04:B9:DD:09:E7:7D:90
Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF
Certificate issuer:       /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
Certificate serial:       03C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
Manifest number:          03B9
Signing time:             Fri 17 Apr 2026 00:35:32 +0000
Manifest this update:     Fri 17 Apr 2026 00:35:31 +0000
Manifest next update:     Fri 24 Apr 2026 00:35:31 +0000
Files and hashes:         1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: /8i20TPBWcm5DuxfKowmO2dPEMcpqWq8KGvfUiXi2mo=)
                          2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: D8m13spLSM0y5GB/4qATdHzlSdpaWUvX2eUbzxTPsS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl
                          rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962 (0x3c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
        Validity
            Not Before: Apr 17 00:35:31 2026 GMT
            Not After : Apr 24 00:35:31 2026 GMT
        Subject: CN=69e18054-9549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:b6:d8:b8:c4:f5:db:e7:b6:22:98:d2:e4:
                    e1:7a:99:63:e3:56:7b:b0:c2:51:a0:5a:7e:59:d3:
                    43:f2:7d:1c:28:06:3f:a0:65:ae:1f:d1:16:51:fe:
                    d8:ab:fd:a0:06:94:07:d8:66:1b:57:08:c0:c7:86:
                    8f:45:39:d2:39:59:77:7b:8b:5d:b9:81:b1:69:bd:
                    67:fa:11:98:b2:ad:84:23:ce:6a:41:db:b6:8a:79:
                    23:03:70:06:dd:6d:91:6d:52:93:8d:3a:51:e6:7a:
                    dc:6e:0f:f3:2f:d4:f4:15:78:c8:65:e5:da:20:ee:
                    b6:91:db:21:e8:19:07:a1:dd:03:68:cd:65:27:44:
                    ed:8a:ba:8e:e5:fc:ac:04:a2:3e:45:ce:73:3b:fa:
                    04:57:ec:51:c9:8d:30:19:97:08:38:5e:1b:3a:1e:
                    35:dd:52:52:b0:fd:8b:ea:e6:4f:9a:81:ab:8f:7f:
                    46:d5:e0:00:8b:b3:0e:6c:5d:b7:cb:66:dd:9b:8a:
                    63:23:d3:ba:51:c9:09:93:1e:88:90:ee:8c:66:b3:
                    c3:ed:78:61:0c:66:e2:5a:84:c4:58:af:6d:a6:62:
                    cf:12:64:20:69:b9:a7:16:c3:3f:a0:7f:28:b7:28:
                    a7:4e:c9:d9:a7:39:f2:45:e3:55:85:bd:38:ce:b1:
                    5e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DB:CF:2C:BE:3B:53:CC:C0:EA:B2:43:0A:04:B9:DD:09:E7:7D:90
            X509v3 Authority Key Identifier:
                keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:68:18:1c:fa:90:da:c4:15:7c:f9:57:93:04:d6:73:20:8e:
         97:37:fc:f1:06:04:a3:9e:b9:d5:a6:6a:0b:71:09:81:99:80:
         12:e6:94:53:04:7a:9d:9a:5c:ca:63:b7:38:38:29:3e:8a:b0:
         36:5a:a7:e9:4b:c3:7a:00:cd:50:1b:6d:00:61:b7:3d:f0:b0:
         64:5e:bf:62:0f:a2:e1:74:33:ce:84:89:d8:98:18:60:2a:c5:
         41:13:bc:e8:c2:3f:3c:96:c0:21:2a:d6:3b:c8:64:81:a8:ee:
         c2:4c:7b:ac:b2:2c:f8:fd:a5:fc:82:fa:4a:d3:cd:d6:34:0b:
         c6:dc:03:e5:49:74:c2:68:4a:9e:34:f9:d9:07:71:25:b5:82:
         4c:54:ba:1c:53:04:df:ad:db:bd:a4:c2:db:00:73:38:73:98:
         f3:88:45:08:35:16:b2:31:f2:80:42:4a:bf:01:f5:37:73:e9:
         5a:43:3b:59:fe:48:d1:07:b7:92:e9:ab:f2:eb:3f:05:ce:73:
         ba:b2:53:de:9e:e9:dd:74:36:72:8e:d2:6c:25:10:e4:a2:03:
         db:57:1e:51:89:2e:e3:47:91:13:0c:2b:b9:7c:e5:32:34:1b:
         89:99:02:14:c8:bf:51:a6:eb:5a:2a:38:b2:b9:9d:96:53:9f:
         b0:38:78:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkyM0MxMTAvBgNVBAUTKDcyNjg3NDNFNUM1MEREOUY1NEQyQTY5NUM1QTBFQkY1
NDBDRjlCQUYwHhcNMjYwNDE3MDAzNTMxWhcNMjYwNDI0MDAzNTMxWjAYMRYwFAYD
VQQDEw02OWUxODA1NC05NTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAprm22LjE9dvntiKY0uTheplj41Z7sMJRoFp+WdND8n0cKAY/oGWuH9EWUf7Y
q/2gBpQH2GYbVwjAx4aPRTnSOVl3e4tduYGxab1n+hGYsq2EI85qQdu2inkjA3AG
3W2RbVKTjTpR5nrcbg/zL9T0FXjIZeXaIO62kdsh6BkHod0DaM1lJ0TtirqO5fys
BKI+Rc5zO/oEV+xRyY0wGZcIOF4bOh413VJSsP2L6uZPmoGrj39G1eAAi7MObF23
y2bdm4pjI9O6UckJkx6IkO6MZrPD7XhhDGbiWoTEWK9tpmLPEmQgabmnFsM/oH8o
tyinTsnZpznyReNVhb04zrFeCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPbzyy+
O1PMwOqyQwoEud0J532QMB8GA1UdIwQYMBaAFHJodD5cUN2fVNKmlcWg6/VAz5uv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTIzQy9EQTBDOTcyOEQz
NDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNaOVUwcWFWeGFEcjlVRFBt
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NtaDBQbHhRM1o5VTBxYVZ4YURyOVVEUG02OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTIzQy9EQTBDOTcyOEQzNDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNa
OVUwcWFWeGFEcjlVRFBtNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoWgYHPqQ2sQVfPlXkwTWcyCOlzf88QYEo5651aZqC3EJgZmAEuaUUwR6nZpc
ymO3ODgpPoqwNlqn6UvDegDNUBttAGG3PfCwZF6/Yg+i4XQzzoSJ2JgYYCrFQRO8
6MI/PJbAISrWO8hkgajuwkx7rLIs+P2l/IL6StPN1jQLxtwD5Ul0wmhKnjT52Qdx
JbWCTFS6HFME363bvaTC2wBzOHOY84hFCDUWsjHygEJKvwH1N3PpWkM7Wf5I0Qe3
kumr8us/Bc5zurJT3p7p3XQ2co7SbCUQ5KID21ceUYku40eREwwruXzlMjQbiZkC
FMi/UabrWio4srmdllOfsDh4kQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:56:25 2026 by rpki-client