Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
File:                     5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft (raw, json)
Hash identifier:          qsHC2grrHDzfzbk52YlPixRHe68Vey+zJHoBJs9PbK0=
Subject key identifier:   9F:DB:8F:F0:2B:5C:EE:44:9F:2C:99:60:B8:30:31:22:F8:72:CC:67
Authority key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74
Certificate issuer:       /CN=A9125DDA/serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
Manifest number:          9C
Signing time:             Sat 13 Jun 2026 07:25:15 +0000
Manifest this update:     Sat 13 Jun 2026 07:25:15 +0000
Manifest next update:     Sat 20 Jun 2026 07:25:15 +0000
Files and hashes:         1: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl (hash: LPVIoCA51TO3KKbF0STRp4zVuzJ+VUki+aZ0tTtfn00=)
                          2: F91331C4796E11F095D14275C4F9AE02.roa (hash: 5kreoxgcCJUQZsNMEHK/Y4fOtdmTmyIsApDfpOqWQVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl
                          rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74
        Validity
            Not Before: Jun 13 07:25:15 2026 GMT
            Not After : Jun 20 07:25:15 2026 GMT
        Subject: CN=6a2d05db-07b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:09:cf:e0:83:10:51:a1:ba:1a:db:d8:96:cb:
                    fd:94:3d:43:86:da:e8:c2:5a:ea:c1:23:ce:60:1a:
                    31:19:39:0d:74:05:9b:3b:32:5a:4c:bc:69:74:ac:
                    03:c6:2f:5d:53:44:5c:3c:de:6e:da:dc:cc:18:c5:
                    19:e7:30:e4:ed:ec:76:28:b7:27:e9:78:82:e8:11:
                    fa:0f:3f:74:87:e1:cb:4f:c6:9a:9e:66:5d:6b:e8:
                    47:82:f9:f9:30:e4:83:a9:dd:9a:96:1c:5a:8f:79:
                    20:0f:dc:30:63:bf:35:34:fc:de:f8:d1:90:0a:06:
                    0f:03:7c:20:b7:dd:4d:03:f5:15:8f:20:7a:0f:62:
                    b0:67:7d:c1:6b:dd:6f:83:d3:b7:1b:1b:54:a8:a3:
                    39:a8:f9:f6:f3:3e:06:93:a1:12:9c:09:3c:38:a6:
                    61:ab:b4:81:3c:a2:ea:84:83:a6:2b:71:f2:77:00:
                    85:a5:ca:e6:ca:aa:c2:5a:9a:77:27:b9:0c:cb:ef:
                    bb:51:0d:36:4e:bb:70:2b:0a:91:84:ec:31:d5:a8:
                    62:eb:fe:a1:f6:93:e0:1e:b8:52:bb:f1:00:82:a7:
                    e8:67:aa:d4:af:7c:b4:4a:63:93:8d:8d:2b:e9:42:
                    c5:c0:d3:43:05:1e:bf:f7:c1:b8:2e:69:9c:0c:33:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DB:8F:F0:2B:5C:EE:44:9F:2C:99:60:B8:30:31:22:F8:72:CC:67
            X509v3 Authority Key Identifier:
                keyid:E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f7:41:51:54:8c:ce:2f:a6:5d:a8:fc:14:92:30:6d:00:d1:
         5d:f2:32:71:f2:1d:e9:74:c7:aa:6c:43:66:7e:6f:c9:0a:d2:
         c9:b4:45:95:ad:58:4f:92:b7:0d:f9:44:e2:61:7f:1a:cf:97:
         89:14:19:94:e0:d3:07:e6:8d:89:ab:04:17:f4:de:38:35:b3:
         3a:a6:3f:a8:76:ae:ce:73:eb:28:81:dd:a5:20:36:6e:86:de:
         b4:4d:88:51:41:a7:30:f9:0a:71:ea:dd:85:16:22:c3:47:d6:
         5a:57:e5:c4:ab:9e:e1:44:f5:90:2a:34:dc:20:66:75:53:b9:
         a0:77:d9:c8:27:d9:1b:7c:c3:dc:ae:b2:ab:5f:69:4b:c7:17:
         62:09:77:ec:3c:24:0a:8a:53:c6:78:24:88:ad:31:82:d4:f8:
         41:40:0f:fc:f1:bc:64:ad:1b:d6:66:89:b2:a4:13:da:2f:d5:
         da:17:65:59:60:ae:4a:83:56:c7:66:f8:4a:87:00:61:97:aa:
         6b:2d:85:fe:70:37:17:e2:cc:59:e6:e4:7d:70:72:01:e8:34:
         1c:b5:91:2b:36:89:4e:a0:0e:77:5c:f7:50:68:5b:b2:a0:2e:
         c2:8b:ca:54:59:8c:79:0f:78:5c:db:f5:69:2d:58:1e:b6:ca:
         f0:c2:7d:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjVEREExMTAvBgNVBAUTKEU1MTAyMDhGRDM5MDQyRTMzNjYyMTMwQTQyQThGODNG
RUVDRkJFNzQwHhcNMjYwNjEzMDcyNTE1WhcNMjYwNjIwMDcyNTE1WjAYMRYwFAYD
VQQDEw02YTJkMDVkYi0wN2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtgnP4IMQUaG6GtvYlsv9lD1DhtrowlrqwSPOYBoxGTkNdAWbOzJaTLxpdKwD
xi9dU0RcPN5u2tzMGMUZ5zDk7ex2KLcn6XiC6BH6Dz90h+HLT8aanmZda+hHgvn5
MOSDqd2alhxaj3kgD9wwY781NPze+NGQCgYPA3wgt91NA/UVjyB6D2KwZ33Ba91v
g9O3GxtUqKM5qPn28z4Gk6ESnAk8OKZhq7SBPKLqhIOmK3HydwCFpcrmyqrCWpp3
J7kMy++7UQ02TrtwKwqRhOwx1ahi6/6h9pPgHrhSu/EAgqfoZ6rUr3y0SmOTjY0r
6ULFwNNDBR6/98G4LmmcDDNz8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/bj/Ar
XO5EnyyZYLgwMSL4csxnMB8GA1UdIwQYMBaAFOUQII/TkELjNmITCkKo+D/uz750
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUREQS84MEFDMDk4Njc5
NkUxMUYwOEZDNTE3NzRDNEY5QUUwMi81UkFnajlPUVF1TTJZaE1LUXFqNFAtN1B2
blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVSQWdqOU9RUXVNMlloTUtRcWo0UC03UHZuUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NUREQS84MEFDMDk4Njc5NkUxMUYwOEZDNTE3NzRDNEY5QUUwMi81UkFnajlPUVF1
TTJZaE1LUXFqNFAtN1B2blEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApPdBUVSMzi+mXaj8FJIwbQDRXfIycfId6XTHqmxDZn5vyQrSybRFla1YT5K3
DflE4mF/Gs+XiRQZlODTB+aNiasEF/TeODWzOqY/qHauznPrKIHdpSA2bobetE2I
UUGnMPkKcerdhRYiw0fWWlflxKue4UT1kCo03CBmdVO5oHfZyCfZG3zD3K6yq19p
S8cXYgl37DwkCopTxngkiK0xgtT4QUAP/PG8ZK0b1maJsqQT2i/V2hdlWWCuSoNW
x2b4SocAYZeqay2F/nA3F+LMWebkfXByAeg0HLWRKzaJTqAOd1z3UGhbsqAuwovK
VFmMeQ94XNv1aS1YHrbK8MJ9jw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:11 2026 by rpki-client