Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
File:                     2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft (raw, json)
Hash identifier:          9SaKqbZaAaxeAmSHh9Wag69tNR7la/MC3GOSuPMS3Hs=
Subject key identifier:   3B:1C:FF:9C:CB:0C:26:58:FA:C1:19:47:3A:AC:13:5A:83:A5:BF:C5
Authority key identifier: D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
Certificate issuer:       /CN=A9124D7C/serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
Manifest number:          0B
Signing time:             Wed 15 Apr 2026 08:43:55 +0000
Manifest this update:     Wed 15 Apr 2026 08:43:54 +0000
Manifest next update:     Wed 22 Apr 2026 08:43:54 +0000
Files and hashes:         1: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl (hash: zEXQZSFkwNNTUIzUYhHDZ8p+Kuaop0MqDoLwQAPb63U=)
                          2: 8C138F502CCA11F1960EC6ED91833773.roa (hash: xJmZuhv9rNcM/Fsd3fmDp03WFv+ujmJvez9T7ai4exw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
                          rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124D7C, serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
        Validity
            Not Before: Apr 15 08:43:54 2026 GMT
            Not After : Apr 22 08:43:54 2026 GMT
        Subject: CN=69df4fcb-7dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:49:4a:0a:17:06:37:0a:8d:57:ce:67:ca:
                    00:40:24:f4:5a:f7:57:2f:a5:7b:65:00:15:be:d5:
                    0b:a9:e0:9e:dd:17:34:d1:8b:fc:cb:b4:f4:57:05:
                    b3:6b:fa:40:ca:6f:36:0b:48:f1:3d:a8:de:bf:f8:
                    a9:54:c3:01:26:43:eb:4c:c2:f1:5f:5f:ee:9e:e5:
                    7d:43:92:72:04:b8:0c:52:1b:e9:e1:92:7a:d9:48:
                    32:98:b5:aa:9b:85:55:88:ba:da:a7:4d:19:a6:d6:
                    fb:d9:cd:36:34:d6:2e:6f:e4:0f:ad:71:54:79:70:
                    e3:c9:76:bd:dc:74:6c:f3:ed:16:60:ed:b3:dd:4e:
                    1a:d9:90:9f:e4:05:e7:15:0c:d7:ab:1a:80:c5:89:
                    b1:d2:cf:54:e1:2f:33:6a:f5:8c:d9:16:ac:81:88:
                    ca:be:18:b7:53:f7:2a:46:ca:89:7f:3c:a5:1b:72:
                    fa:af:10:3f:b3:5d:1f:69:17:10:ba:3e:c8:61:e8:
                    0e:c9:e9:15:5c:71:0d:48:4b:05:64:54:f1:8c:9a:
                    1a:c5:8d:71:df:60:41:a6:7e:10:40:0f:29:77:bf:
                    8d:46:d8:4f:ea:6f:55:d4:15:35:b5:00:13:1d:aa:
                    2d:d9:eb:b7:ea:48:19:7f:a2:ce:d7:25:ab:e4:7e:
                    ec:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1C:FF:9C:CB:0C:26:58:FA:C1:19:47:3A:AC:13:5A:83:A5:BF:C5
            X509v3 Authority Key Identifier:
                keyid:D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:65:92:04:8b:26:ab:2a:95:37:79:c6:d5:a6:40:bd:41:d8:
         56:3d:14:84:c5:13:a0:47:f5:48:6f:fc:88:af:aa:4a:88:59:
         b3:f7:44:26:a1:67:35:5f:09:1d:c5:49:57:b3:20:57:41:e0:
         5d:09:ac:84:b5:42:44:dc:97:6b:0a:88:53:64:b0:a4:e5:00:
         f7:6e:8b:da:75:75:cf:c0:32:5c:dc:8e:66:1b:72:3c:71:f0:
         4f:00:68:e0:73:75:bb:6d:6a:c5:51:e4:32:ba:2a:00:ff:1e:
         22:48:84:ec:0d:f2:df:38:9a:a4:c3:f8:72:a5:a6:22:02:fc:
         cb:d4:65:18:45:f8:8a:f3:a9:1b:ef:df:94:af:57:09:03:e8:
         c2:06:b2:9a:3e:db:14:2c:01:d4:c0:03:da:65:92:3b:80:05:
         b8:20:94:38:bf:c0:16:e8:57:8f:7c:e9:80:03:02:10:0d:23:
         76:fa:ae:49:90:87:d8:a0:c7:7c:e2:c8:88:fa:a9:fe:cc:21:
         c5:b0:bf:11:c1:e6:1b:d6:16:c9:85:23:c9:ed:4d:6e:69:fb:
         65:d6:e3:b8:05:c2:91:4d:56:3c:37:4e:8f:e4:e4:60:3b:1f:
         fb:9e:bd:5b:0e:11:5d:8d:9d:30:71:32:14:a8:47:ad:88:7c:
         16:bd:b9:63
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NEQ3QzExMC8GA1UEBRMoRDkyNDBCRTUyNzIzRTUxN0YxRTU0NzVBMUJDRjk0QjhG
MDhDMDM4MDAeFw0yNjA0MTUwODQzNTRaFw0yNjA0MjIwODQzNTRaMBgxFjAUBgNV
BAMTDTY5ZGY0ZmNiLTdkZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCu+UlKChcGNwqNV85nygBAJPRa91cvpXtlABW+1Qup4J7dFzTRi/zLtPRXBbNr
+kDKbzYLSPE9qN6/+KlUwwEmQ+tMwvFfX+6e5X1DknIEuAxSG+nhknrZSDKYtaqb
hVWIutqnTRmm1vvZzTY01i5v5A+tcVR5cOPJdr3cdGzz7RZg7bPdThrZkJ/kBecV
DNerGoDFibHSz1ThLzNq9YzZFqyBiMq+GLdT9ypGyol/PKUbcvqvED+zXR9pFxC6
Pshh6A7J6RVccQ1ISwVkVPGMmhrFjXHfYEGmfhBADyl3v41G2E/qb1XUFTW1ABMd
qi3Z67fqSBl/os7XJavkfuzFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOxz/nMsM
Jlj6wRlHOqwTWoOlv8UwHwYDVR0jBBgwFoAU2SQL5Scj5Rfx5UdaG8+UuPCMA4Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0RDdDL0EwM0VBQUM2MkNB
RTExRjFCMjc2QjMxNUM4ODMzNzczLzJTUUw1U2NqNVJmeDVVZGFHOC1VdVBDTUE0
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMlNRTDVTY2o1UmZ4NVVkYUc4LVV1UENNQTRBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0
RDdDL0EwM0VBQUM2MkNBRTExRjFCMjc2QjMxNUM4ODMzNzczLzJTUUw1U2NqNVJm
eDVVZGFHOC1VdVBDTUE0QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBHZZIEiyarKpU3ecbVpkC9QdhWPRSExROgR/VIb/yIr6pKiFmz90QmoWc1Xwkd
xUlXsyBXQeBdCayEtUJE3JdrCohTZLCk5QD3bovadXXPwDJc3I5mG3I8cfBPAGjg
c3W7bWrFUeQyuioA/x4iSITsDfLfOJqkw/hypaYiAvzL1GUYRfiK86kb79+Ur1cJ
A+jCBrKaPtsULAHUwAPaZZI7gAW4IJQ4v8AW6FePfOmAAwIQDSN2+q5JkIfYoMd8
4siI+qn+zCHFsL8RweYb1hbJhSPJ7U1uaftl1uO4BcKRTVY8N06P5ORgOx/7nr1b
DhFdjZ0wcTIUqEetiHwWvblj
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:58:26 2026 by rpki-client