Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
File:                     yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json)
Hash identifier:          aNAUrYXoGVmJzJ9vNnLynjLvH+37NMmOLApE2OX/2iU=
Subject key identifier:   17:D5:9B:F5:4E:52:84:6D:57:FC:82:EB:21:25:5A:A8:7E:EE:04:C5
Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
Certificate issuer:       /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
Certificate serial:       1523
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
Manifest number:          151E
Signing time:             Thu 16 Apr 2026 16:45:31 +0000
Manifest this update:     Thu 16 Apr 2026 16:45:30 +0000
Manifest next update:     Thu 23 Apr 2026 16:45:30 +0000
Files and hashes:         1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: dlLDCHy1AT2z1aCvnKwBrQ7x93E4p75Hi3XlwX2NaV8=)
                          2: 811B0DF274CB11EF941F0A71C4F9AE02.roa (hash: hJT4usZf+BKSETDBQrM6NJ4ciacXvVznmaEzi+BU4ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl
                          rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5411 (0x1523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
        Validity
            Not Before: Apr 16 16:45:30 2026 GMT
            Not After : Apr 23 16:45:30 2026 GMT
        Subject: CN=69e1122b-5aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0b:65:dc:06:8f:19:37:8a:1b:a1:df:f2:3c:
                    94:16:62:be:d7:fb:91:40:50:22:e0:6d:bd:dd:cd:
                    37:f1:ab:86:e2:c6:7e:f3:c0:13:65:b7:a6:24:fa:
                    67:c5:d8:bb:3f:ad:95:bd:c5:df:28:46:bd:ae:a4:
                    89:af:5a:a5:e0:8b:72:9f:32:9f:b2:2f:47:e2:2d:
                    3b:8d:80:80:50:d1:50:80:18:fc:76:08:46:44:45:
                    1e:c2:df:e5:49:d5:f0:5d:33:0d:35:44:4f:5e:d2:
                    c5:16:0b:37:d8:c3:6e:c2:4e:bd:06:b3:2c:e9:68:
                    34:43:43:2b:1d:57:01:fe:a7:a0:df:70:3c:9d:fe:
                    1b:49:eb:2e:e5:be:bd:ac:bb:23:f1:90:40:ef:b4:
                    fd:eb:c7:c1:52:04:b8:dd:f7:b1:1e:d5:3c:f4:ce:
                    b9:d2:b3:74:80:be:8b:02:18:50:de:ef:01:4a:f3:
                    65:cf:a4:46:37:4a:a8:5d:c8:16:14:c8:7a:44:36:
                    38:cb:92:de:9f:e1:39:7b:d8:63:66:10:a2:f0:5a:
                    fa:08:3d:83:5f:43:35:32:9d:4f:87:e6:0f:9b:e6:
                    89:86:8b:bf:d7:72:f0:eb:05:11:84:4e:dd:a4:dd:
                    24:41:9d:27:a4:4c:93:12:29:bf:2d:72:69:e7:b9:
                    a7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D5:9B:F5:4E:52:84:6D:57:FC:82:EB:21:25:5A:A8:7E:EE:04:C5
            X509v3 Authority Key Identifier:
                keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:04:63:5a:f0:ab:72:a7:3d:f4:0d:64:0a:60:32:2a:d9:b9:
         85:94:11:81:84:ef:a5:be:73:bb:1d:10:6f:52:57:c8:cd:57:
         12:df:41:58:f4:d3:44:a8:17:3d:26:e1:e0:07:d4:94:7f:29:
         54:31:29:b1:89:64:df:e6:a8:2f:ac:e8:18:fa:d0:6c:1e:45:
         c7:58:22:c6:81:7a:c1:06:33:05:3e:15:4f:7e:14:8a:ac:7d:
         e1:ea:c1:fa:2f:46:e6:b4:a8:6a:9d:cb:85:6f:8d:1e:6c:88:
         ed:d0:ac:60:e4:75:dc:cd:93:9a:2a:08:52:b6:a0:97:8d:6c:
         05:e9:7e:05:53:9d:25:42:fc:dc:e7:4c:c5:58:d6:57:31:73:
         fd:28:73:c1:00:38:3c:fb:e9:2f:ec:7e:d9:79:eb:2b:37:8e:
         ca:0e:22:50:33:82:de:1c:c8:3c:17:b8:97:37:81:12:6e:f0:
         eb:27:f3:b8:8c:06:3c:0f:c3:60:eb:fe:23:41:77:4d:f4:3a:
         6a:68:7e:61:bb:78:94:21:1c:bb:60:f5:f6:84:62:ad:02:84:
         b8:9a:67:cc:e9:ba:29:62:d3:cc:8c:c0:d7:2e:f0:b4:55:fd:
         fe:cd:99:5d:29:35:a6:f5:32:ec:e5:31:56:4c:5a:0e:e1:09:
         ed:d2:cb:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc5OTIxMTAvBgNVBAUTKEM5NEEwMzUwRTcwOUY1NkMyMzk2RTMwQjQ3MEM4QjVF
MURGQjE3MDAwHhcNMjYwNDE2MTY0NTMwWhcNMjYwNDIzMTY0NTMwWjAYMRYwFAYD
VQQDEw02OWUxMTIyYi01YWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAngtl3AaPGTeKG6Hf8jyUFmK+1/uRQFAi4G293c038auG4sZ+88ATZbemJPpn
xdi7P62VvcXfKEa9rqSJr1ql4ItynzKfsi9H4i07jYCAUNFQgBj8dghGREUewt/l
SdXwXTMNNURPXtLFFgs32MNuwk69BrMs6Wg0Q0MrHVcB/qeg33A8nf4bSesu5b69
rLsj8ZBA77T968fBUgS43fexHtU89M650rN0gL6LAhhQ3u8BSvNlz6RGN0qoXcgW
FMh6RDY4y5Len+E5e9hjZhCi8Fr6CD2DX0M1Mp1Ph+YPm+aJhou/13Lw6wURhE7d
pN0kQZ0npEyTEim/LXJp57mnJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfVm/VO
UoRtV/yC6yElWqh+7gTFMB8GA1UdIwQYMBaAFMlKA1DnCfVsI5bjC0cMi14d+xcA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8wMjMyODM0ODY3
Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlXd2psdU1MUnd5TFhoMzdG
d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lVb0RVT2NKOVd3amx1TUxSd3lMWGgzN0Z3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Nzk5Mi8wMjMyODM0ODY3Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlX
d2psdU1MUnd5TFhoMzdGd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbgRjWvCrcqc99A1kCmAyKtm5hZQRgYTvpb5zux0Qb1JXyM1XEt9BWPTTRKgX
PSbh4AfUlH8pVDEpsYlk3+aoL6zoGPrQbB5Fx1gixoF6wQYzBT4VT34Uiqx94erB
+i9G5rSoap3LhW+NHmyI7dCsYOR13M2TmioIUragl41sBel+BVOdJUL83OdMxVjW
VzFz/ShzwQA4PPvpL+x+2XnrKzeOyg4iUDOC3hzIPBe4lzeBEm7w6yfzuIwGPA/D
YOv+I0F3TfQ6amh+Ybt4lCEcu2D19oRirQKEuJpnzOm6KWLTzIzA1y7wtFX9/s2Z
XSk1pvUy7OUxVkxaDuEJ7dLLmQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:56 2026 by rpki-client