Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
File:                     tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft (raw, json)
Hash identifier:          VD8xZ1F8E1rHvLvqKNZK5ARsOvm43MK68UNyUHwJBFs=
Subject key identifier:   A1:37:D7:7A:6F:C4:6D:F7:0C:04:0C:5D:70:68:74:2F:BC:2C:DB:43
Authority key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
Certificate issuer:       /CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
Certificate serial:       01A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
Manifest number:          019F
Signing time:             Fri 17 Apr 2026 04:00:02 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:02 +0000
Manifest next update:     Fri 24 Apr 2026 04:00:02 +0000
Files and hashes:         1: tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl (hash: dI6BvFfoGXyFOFGRlSJhFp5XsimKCWDszC0vjPalq0c=)
                          2: B2B006BAE3E911EEB845B268C4F9AE02.roa (hash: xllDJ7wsryQrkSvX97smRm5LJiMbi7ECfICbiD0R3+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl
                          rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131711, serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
        Validity
            Not Before: Apr 17 04:00:02 2026 GMT
            Not After : Apr 24 04:00:02 2026 GMT
        Subject: CN=69e1b042-2c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:ce:2b:ed:52:39:c3:e0:f6:9d:47:29:ff:
                    81:f9:27:04:24:7c:c3:4c:c3:17:25:29:3a:b7:7e:
                    d0:07:c5:8b:86:ff:fe:fa:66:ca:9b:f2:7b:58:62:
                    a9:65:6e:d1:82:38:df:d9:e7:68:c0:90:4a:c4:b1:
                    10:91:9c:8a:b3:df:77:b4:67:bb:12:e7:c4:83:ba:
                    b4:6c:c2:d3:6c:fd:d8:65:c3:b2:37:d7:8d:7a:0d:
                    64:86:dc:03:a8:d4:6d:d6:56:21:3d:59:56:70:4c:
                    ae:99:9f:80:51:01:ff:a6:bb:4c:b4:bd:18:9d:49:
                    d7:3b:29:7d:fc:dd:d7:7b:b3:2a:c2:b2:1d:76:61:
                    7c:2b:b9:99:f0:61:ee:0f:d0:b0:5e:7f:01:4d:10:
                    23:22:6c:fe:12:c0:83:65:4f:69:f8:39:87:d8:f7:
                    3d:f8:ee:2e:c0:4e:4c:9d:3c:26:8d:f5:dc:f0:38:
                    01:f9:7c:bf:77:39:ae:21:bc:c5:a1:41:de:ed:d5:
                    9d:23:3e:16:15:2c:ed:99:d2:77:fd:80:95:02:59:
                    2a:de:79:86:c5:3c:4f:04:7e:d2:0e:54:bf:3a:fd:
                    39:ca:e2:0e:18:0a:8e:7f:76:5c:c4:bc:e0:af:2b:
                    66:a9:4b:60:6d:eb:79:ce:45:71:e1:b6:74:40:92:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:37:D7:7A:6F:C4:6D:F7:0C:04:0C:5D:70:68:74:2F:BC:2C:DB:43
            X509v3 Authority Key Identifier:
                keyid:B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ab:53:0b:98:65:3f:99:90:b9:2e:08:ae:50:6b:36:91:79:
         42:c0:84:9d:f0:24:e0:2a:77:6b:58:a0:11:f9:87:e8:b5:43:
         6a:20:24:76:a4:78:67:31:30:cf:55:fe:c6:d2:b4:1b:56:33:
         2b:fd:8f:01:6b:9b:1a:6e:bf:d0:32:02:03:ee:24:39:f0:c4:
         8d:9c:f6:b7:1f:43:53:f3:aa:6c:7e:35:ad:63:47:eb:e4:af:
         7c:b4:47:22:b0:b9:9b:0f:63:58:46:82:f0:b4:1d:0a:d8:9e:
         36:a6:7f:77:bf:fb:50:8c:dc:f6:8c:55:e3:c4:19:b7:cb:af:
         2e:ee:7a:7b:b8:35:a9:7d:bc:a8:8a:d8:32:f7:d2:c1:39:a1:
         c6:95:39:24:54:bc:cd:16:47:4c:0a:2f:9b:9f:45:8b:e8:fa:
         3d:16:90:0a:52:00:4a:58:b8:61:c5:8e:0c:f1:40:2a:1b:7c:
         8e:e5:e6:14:5b:22:0e:2e:6e:ad:38:d0:e6:2a:34:ef:25:f8:
         51:19:43:e9:09:45:aa:1d:6c:29:1c:af:d6:2c:82:99:30:36:
         ee:99:37:47:6d:32:87:b2:23:8c:09:90:3d:e1:a4:a8:4f:e8:
         f6:ae:b9:3f:95:52:22:89:82:b1:88:bf:45:9d:79:03:a2:25:
         97:6b:7d:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE3MTExMTAvBgNVBAUTKEI1N0IyMDdGMEUxQzFCQTg3M0EwNzkzNTgyQzdBODEz
NDA5ODY3NEMwHhcNMjYwNDE3MDQwMDAyWhcNMjYwNDI0MDQwMDAyWjAYMRYwFAYD
VQQDEw02OWUxYjA0Mi0yYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1zOK+1SOcPg9p1HKf+B+ScEJHzDTMMXJSk6t37QB8WLhv/++mbKm/J7WGKp
ZW7Rgjjf2edowJBKxLEQkZyKs993tGe7EufEg7q0bMLTbP3YZcOyN9eNeg1khtwD
qNRt1lYhPVlWcEyumZ+AUQH/prtMtL0YnUnXOyl9/N3Xe7MqwrIddmF8K7mZ8GHu
D9CwXn8BTRAjImz+EsCDZU9p+DmH2Pc9+O4uwE5MnTwmjfXc8DgB+Xy/dzmuIbzF
oUHe7dWdIz4WFSztmdJ3/YCVAlkq3nmGxTxPBH7SDlS/Ov05yuIOGAqOf3ZcxLzg
rytmqUtgbet5zkVx4bZ0QJKrawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKE313pv
xG33DAQMXXBodC+8LNtDMB8GA1UdIwQYMBaAFLV7IH8OHBuoc6B5NYLHqBNAmGdM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTcxMS85RkREMkRBMEM5
OTExMUVFODkxQkE0MTlDNEY5QUUwMi90WHNnZnc0Y0c2aHpvSGsxZ3Nlb0UwQ1la
MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RYc2dmdzRjRzZoem9IazFnc2VvRTBDWVowdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTcxMS85RkREMkRBMEM5OTExMUVFODkxQkE0MTlDNEY5QUUwMi90WHNnZnc0Y0c2
aHpvSGsxZ3Nlb0UwQ1laMHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAqtTC5hlP5mQuS4IrlBrNpF5QsCEnfAk4Cp3a1igEfmH6LVDaiAkdqR4ZzEw
z1X+xtK0G1YzK/2PAWubGm6/0DICA+4kOfDEjZz2tx9DU/OqbH41rWNH6+SvfLRH
IrC5mw9jWEaC8LQdCtieNqZ/d7/7UIzc9oxV48QZt8uvLu56e7g1qX28qIrYMvfS
wTmhxpU5JFS8zRZHTAovm59Fi+j6PRaQClIASli4YcWODPFAKht8juXmFFsiDi5u
rTjQ5io07yX4URlD6QlFqh1sKRyv1iyCmTA27pk3R20yh7IjjAmQPeGkqE/o9q65
P5VSIomCsYi/RZ15A6Ill2t9TA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:15 2026 by rpki-client