Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
File:                     P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json)
Hash identifier:          9isv0uaQGO1kxg2KD3qKcxAm+TiHGnw7ifkH2Dx9Q0A=
Subject key identifier:   20:D8:B4:EE:81:81:30:47:F1:F1:3E:A5:E7:B5:F9:EA:02:3B:73:B0
Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71
Certificate issuer:       /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
Manifest number:          026B
Signing time:             Fri 17 Apr 2026 01:57:49 +0000
Manifest this update:     Fri 17 Apr 2026 01:57:48 +0000
Manifest next update:     Fri 24 Apr 2026 01:57:48 +0000
Files and hashes:         1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: cQNKhJQ82QXd4o1y7KCyULwhy2XUkJe6VAG6+8QQmhM=)
                          2: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: 8QPHRn8irHtyPflJX7FXyll2eB+IKwt/6uDtxAHI16I=)
                          3: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: Mgaf9CSqoVizRMwA95HzOIftcIqXK+Ix2kwlxzxOnak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl
                          rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71
        Validity
            Not Before: Apr 17 01:57:48 2026 GMT
            Not After : Apr 24 01:57:48 2026 GMT
        Subject: CN=69e1939c-0b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f8:4b:9b:2c:e3:ba:85:ec:3a:f5:8a:b4:2b:
                    92:51:c2:f0:69:91:0b:6e:f0:26:3a:1f:5d:06:d9:
                    00:9a:17:c4:44:70:f4:e6:64:7d:5a:1c:39:2c:69:
                    24:03:cd:c8:f7:d8:f8:b5:8d:ed:6c:ea:22:93:2e:
                    99:6b:ca:50:25:41:c3:ac:bd:eb:e8:26:bc:c3:6d:
                    4d:2c:5b:4c:4a:02:4a:07:7d:73:f0:0c:b4:dc:e6:
                    e9:0e:ec:a7:cd:ad:96:96:4f:93:de:43:4e:c2:d0:
                    70:47:a4:1c:73:31:5a:ed:df:84:c7:f7:9b:44:68:
                    57:78:28:f0:78:de:fb:73:29:91:47:77:4c:6e:ca:
                    95:65:1e:5c:48:7e:3e:44:90:fc:7b:17:a0:a4:66:
                    8e:f4:83:2e:53:96:e2:ab:49:d0:60:c5:6e:9a:43:
                    8d:73:69:cd:40:28:50:b4:ee:0a:f4:aa:16:4d:e5:
                    bd:1b:2b:f6:68:91:2a:4b:13:39:25:2b:38:a1:66:
                    a3:92:da:68:9f:62:ab:02:7d:6e:16:f3:73:a8:83:
                    61:5e:3b:d0:93:af:fb:46:2f:1f:9e:7f:8d:dc:d7:
                    5b:cb:84:8f:bc:0e:6c:fc:04:a8:45:12:96:fc:e0:
                    83:c3:08:71:42:03:00:58:71:aa:45:9d:78:ed:2f:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D8:B4:EE:81:81:30:47:F1:F1:3E:A5:E7:B5:F9:EA:02:3B:73:B0
            X509v3 Authority Key Identifier:
                keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:87:1a:eb:04:87:e1:f8:3e:68:32:ad:65:5b:c4:73:dd:83:
         99:32:87:f9:f2:68:fc:9e:6e:be:71:1c:66:1c:1d:27:57:a6:
         ab:ce:24:ea:74:f9:68:02:78:db:de:a9:b0:0c:bd:8c:ce:55:
         12:7f:87:35:da:45:92:49:29:8b:83:c1:4c:d9:ec:1a:f9:c4:
         11:15:76:7d:dd:2d:c2:70:c2:b1:78:24:07:1c:56:fc:ce:63:
         e8:39:f0:b3:4c:3a:7f:41:ce:1c:02:ed:11:82:cc:fc:55:6b:
         7c:b9:c3:3a:f0:89:a7:cb:0a:84:43:d3:8e:93:b0:62:bb:67:
         1b:25:9b:ec:2f:df:21:36:9a:e7:ed:47:00:24:8a:b9:94:66:
         55:f1:c4:d4:7c:94:27:4c:f6:14:5f:d8:77:0f:46:d6:c1:23:
         6b:22:9d:fe:86:bd:cc:44:21:ba:ee:e6:63:52:5e:ee:71:b1:
         1d:e0:e5:d6:23:68:e7:65:15:86:06:e6:6e:9b:31:79:66:06:
         7e:b3:15:27:30:dc:80:b3:5b:46:7f:19:70:08:2e:52:6d:03:
         b2:80:4b:d3:53:12:c8:45:d0:09:54:79:c6:09:c8:99:5d:99:
         85:e6:5b:31:28:3b:9b:ae:9d:22:a0:ca:99:21:e2:06:ec:1a:
         4a:e7:9e:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw
NzA4MzBCNzEwHhcNMjYwNDE3MDE1NzQ4WhcNMjYwNDI0MDE1NzQ4WjAYMRYwFAYD
VQQDEw02OWUxOTM5Yy0wYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9vhLmyzjuoXsOvWKtCuSUcLwaZELbvAmOh9dBtkAmhfERHD05mR9Whw5LGkk
A83I99j4tY3tbOoiky6Za8pQJUHDrL3r6Ca8w21NLFtMSgJKB31z8Ay03ObpDuyn
za2Wlk+T3kNOwtBwR6QcczFa7d+Ex/ebRGhXeCjweN77cymRR3dMbsqVZR5cSH4+
RJD8exegpGaO9IMuU5biq0nQYMVumkONc2nNQChQtO4K9KoWTeW9Gyv2aJEqSxM5
JSs4oWajktpon2KrAn1uFvNzqINhXjvQk6/7Ri8fnn+N3Ndby4SPvA5s/ASoRRKW
/OCDwwhxQgMAWHGqRZ147S8abQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCDYtO6B
gTBH8fE+pee1+eoCO3OwMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB
M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD
M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s
eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVIca6wSH4fg+aDKtZVvEc92DmTKH+fJo/J5uvnEcZhwdJ1emq84k6nT5aAJ4
296psAy9jM5VEn+HNdpFkkkpi4PBTNnsGvnEERV2fd0twnDCsXgkBxxW/M5j6Dnw
s0w6f0HOHALtEYLM/FVrfLnDOvCJp8sKhEPTjpOwYrtnGyWb7C/fITaa5+1HACSK
uZRmVfHE1HyUJ0z2FF/Ydw9G1sEjayKd/oa9zEQhuu7mY1Je7nGxHeDl1iNo52UV
hgbmbpsxeWYGfrMVJzDcgLNbRn8ZcAguUm0DsoBL01MSyEXQCVR5xgnImV2ZheZb
MSg7m66dIqDKmSHiBuwaSueeNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:40:34 2026 by rpki-client