Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
File:                     McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json)
Hash identifier:          ML8Jftt2axO1PjadPGKs4qYfRgg0GnnCc7rTdp68ztw=
Subject key identifier:   D3:F0:D0:8D:73:57:05:D2:40:11:C9:72:50:58:18:1F:6B:10:D5:B3
Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E
Certificate issuer:       /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
Certificate serial:       09B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
Manifest number:          09A1
Signing time:             Thu 16 Apr 2026 19:55:30 +0000
Manifest this update:     Thu 16 Apr 2026 19:55:30 +0000
Manifest next update:     Thu 23 Apr 2026 19:55:30 +0000
Files and hashes:         1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: KujBVzqyOfuztYPK03PGiiCLvnWBASb/1yfx7Ojqgsk=)
                          2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: Hj2gvQPptbIyBsk+GZQr8HEa82gNIwoOpKASxetT7F4=)
                          3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: H91fXqxV7rY9zHcxYCuUe8A5mKb0ae920Vx4iWfH6XE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:55:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2483 (0x9b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E
        Validity
            Not Before: Apr 16 19:55:30 2026 GMT
            Not After : Apr 23 19:55:30 2026 GMT
        Subject: CN=69e13eb2-2360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4c:ad:41:2a:49:13:2d:a0:dc:db:8e:dd:15:
                    78:5c:5d:4e:1c:7c:48:c8:f8:1e:38:88:c1:8e:b8:
                    6b:41:44:a5:02:f0:db:4c:b3:13:3b:6f:ee:7e:c0:
                    81:fc:0f:3a:c7:d2:9e:78:f1:8a:41:13:84:e3:e1:
                    a4:63:33:46:4d:f8:a1:d7:0d:86:bb:1d:d9:49:15:
                    37:bc:ce:6e:9b:c7:1a:44:64:81:34:36:fe:3d:0b:
                    b1:b6:18:fd:70:76:ee:60:b0:69:ca:b5:9f:a5:f5:
                    ac:bb:21:b4:d8:f9:82:a9:97:e6:9b:ca:b5:5b:1d:
                    f2:5e:c5:15:61:27:c1:25:91:24:44:ca:9a:cb:cb:
                    d2:2c:38:94:1d:53:a4:c1:9a:c8:a7:97:8c:b8:f7:
                    b9:3c:8b:57:c6:9e:20:84:4b:25:2b:45:b3:61:74:
                    54:0f:06:a8:7a:32:b4:01:ff:61:4f:3f:dc:41:af:
                    ef:18:10:23:73:ee:2d:fa:a1:0f:62:51:22:67:76:
                    c1:d3:08:b0:79:77:6f:de:32:44:d1:3f:f4:e1:6c:
                    1f:ea:b9:85:f9:59:61:3e:62:74:25:9b:3f:d2:54:
                    a5:e8:63:f1:22:38:a3:b5:be:ea:35:d2:58:bf:d7:
                    67:3e:aa:10:90:dd:02:7f:70:a3:b1:02:82:26:13:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F0:D0:8D:73:57:05:D2:40:11:C9:72:50:58:18:1F:6B:10:D5:B3
            X509v3 Authority Key Identifier:
                keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6d:8a:dd:7e:5f:42:6b:89:cb:7b:14:02:09:fa:e1:28:21:
         c6:b9:2b:f4:d7:5a:40:aa:53:3a:b6:97:12:de:8b:6d:da:b9:
         bd:53:ac:42:fb:02:26:56:b8:54:d7:83:38:39:36:21:e1:21:
         3c:e2:b9:ec:d1:57:cd:20:1a:4a:53:20:82:dd:7f:a6:67:0e:
         69:59:16:86:c4:05:bf:fa:13:77:6b:6e:dc:47:cd:5e:04:46:
         03:06:9a:73:d5:2f:ca:9c:5e:03:a3:22:62:8f:48:bb:6d:bb:
         69:cd:f4:9b:0e:f8:15:4c:6e:d5:b4:3b:c9:33:da:c9:0a:31:
         65:6d:ec:f2:d8:42:46:45:89:92:98:3b:43:08:a3:a5:89:d5:
         60:c0:e0:be:f3:8b:a7:23:4b:36:1d:8f:d6:e2:93:85:e3:6f:
         0c:84:c5:92:63:d5:b2:a9:fa:4e:1f:99:b6:b5:a7:0d:c2:f6:
         45:3c:15:1b:7f:2e:4b:12:2c:3f:b3:f2:37:24:c4:5a:c7:51:
         50:08:ba:fc:8e:4a:10:7d:4c:7f:41:f4:f2:a0:70:b6:67:79:
         e8:5f:d0:c0:c6:84:41:d8:29:3d:ab:02:ef:25:eb:50:d9:5f:
         bf:d6:41:f3:95:0b:0e:ec:d4:6e:10:3a:3d:7b:c2:72:65:29:
         a3:5e:85:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNFMTYxMTAvBgNVBAUTKDMxQzRGOTA2NEY4OUU1NkIxOTRFQjg4NDkyRTkwMjFD
MTUyREVCM0UwHhcNMjYwNDE2MTk1NTMwWhcNMjYwNDIzMTk1NTMwWjAYMRYwFAYD
VQQDEw02OWUxM2ViMi0yMzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmUytQSpJEy2g3NuO3RV4XF1OHHxIyPgeOIjBjrhrQUSlAvDbTLMTO2/ufsCB
/A86x9KeePGKQROE4+GkYzNGTfih1w2Gux3ZSRU3vM5um8caRGSBNDb+PQuxthj9
cHbuYLBpyrWfpfWsuyG02PmCqZfmm8q1Wx3yXsUVYSfBJZEkRMqay8vSLDiUHVOk
wZrIp5eMuPe5PItXxp4ghEslK0WzYXRUDwaoejK0Af9hTz/cQa/vGBAjc+4t+qEP
YlEiZ3bB0wiweXdv3jJE0T/04Wwf6rmF+VlhPmJ0JZs/0lSl6GPxIjijtb7qNdJY
v9dnPqoQkN0Cf3CjsQKCJhMMzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPw0I1z
VwXSQBHJclBYGB9rENWzMB8GA1UdIwQYMBaAFDHE+QZPieVrGU64hJLpAhwVLes+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9EQzU0RDlBNkFD
NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVXc1pUcmlFa3VrQ0hCVXQ2
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01jVDVCay1KNVdzWlRyaUVrdWtDSEJVdDZ6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0UxNi9EQzU0RDlBNkFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVX
c1pUcmlFa3VrQ0hCVXQ2ejQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApW2K3X5fQmuJy3sUAgn64Sghxrkr9NdaQKpTOraXEt6Lbdq5vVOsQvsCJla4
VNeDODk2IeEhPOK57NFXzSAaSlMggt1/pmcOaVkWhsQFv/oTd2tu3EfNXgRGAwaa
c9UvypxeA6MiYo9Iu227ac30mw74FUxu1bQ7yTPayQoxZW3s8thCRkWJkpg7Qwij
pYnVYMDgvvOLpyNLNh2P1uKTheNvDITFkmPVsqn6Th+ZtrWnDcL2RTwVG38uSxIs
P7PyNyTEWsdRUAi6/I5KEH1Mf0H08qBwtmd56F/QwMaEQdgpPasC7yXrUNlfv9ZB
85ULDuzUbhA6PXvCcmUpo16FkQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:52:21 2026 by rpki-client