Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
File:                     9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json)
Hash identifier:          tmAvzlc0O4JsFySpYq7DppYdyTXo8sQBI4IMZnC5YSo=
Subject key identifier:   0F:F9:B6:58:99:C1:4C:05:2C:35:E8:F3:81:14:9B:6D:FD:27:EF:84
Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88
Certificate issuer:       /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
Manifest number:          0134
Signing time:             Sat 13 Jun 2026 05:32:09 +0000
Manifest this update:     Sat 13 Jun 2026 05:32:09 +0000
Manifest next update:     Sat 20 Jun 2026 05:32:09 +0000
Files and hashes:         1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: oI1fwu0rnCeId2poZP7QSP9DPXWtBP98AQDl9GCjwsU=)
                          2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: VhIuGtFPo2Cv8cAGYxGtYUO/7hhyF5U43Aacg6GF4jM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl
                          rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
        Validity
            Not Before: Jun 13 05:32:09 2026 GMT
            Not After : Jun 20 05:32:09 2026 GMT
        Subject: CN=6a2ceb59-0cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:29:27:48:2f:aa:82:5a:eb:97:3d:13:f9:
                    8a:8f:43:af:38:ed:80:30:1c:62:cf:d2:8e:13:ab:
                    89:91:96:40:72:d9:db:7d:56:8c:0b:3f:69:e6:cf:
                    b3:d7:f8:96:e2:81:b1:48:7e:0e:c8:3b:f0:37:ac:
                    7e:c0:ab:71:e0:c0:be:7b:c4:b6:98:55:5d:ad:b0:
                    f6:83:2a:76:44:47:0d:18:a7:4d:bd:3a:25:65:43:
                    a7:2d:a0:74:e1:10:41:51:81:b7:41:47:5d:66:93:
                    a5:5d:d2:63:99:af:b3:e7:94:f2:3f:fd:f4:3a:ee:
                    1d:70:d2:bf:21:0c:e3:9d:f2:69:f6:dc:48:7b:b9:
                    1c:17:e3:9d:b3:05:60:15:45:c2:0f:5f:30:14:0d:
                    24:7c:45:bd:d7:27:f4:42:fb:fe:0f:fb:08:9a:a8:
                    80:f4:a6:3d:a8:90:8c:ed:d7:0e:b4:49:aa:06:34:
                    41:08:c8:4f:d5:9a:e0:fc:fd:8c:03:24:77:ca:5e:
                    6c:e6:15:3b:81:8c:05:ba:ab:02:ca:75:66:83:e8:
                    7d:04:cf:e3:df:e6:ba:10:cb:fe:46:2d:aa:a8:4a:
                    ae:a4:d2:20:af:b1:16:5f:a1:33:9a:61:da:a6:14:
                    32:02:37:44:c7:b3:9d:14:82:46:82:4e:c2:9b:6d:
                    34:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F9:B6:58:99:C1:4C:05:2C:35:E8:F3:81:14:9B:6D:FD:27:EF:84
            X509v3 Authority Key Identifier:
                keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:04:bc:34:e0:65:4e:ed:ec:d9:2d:4a:88:24:3a:7e:31:03:
         2c:d5:85:fd:d1:21:9e:3e:e9:ec:d8:28:ae:24:7a:57:d2:3b:
         1f:42:be:e9:a5:a8:82:79:2b:5c:bf:80:3b:b9:24:62:a0:ce:
         67:17:c1:07:25:69:09:b0:66:e7:69:fb:75:b2:0c:10:f9:56:
         5b:11:08:9c:db:8a:42:76:23:31:58:f6:93:1f:76:ae:0c:0c:
         01:ec:f9:de:bc:bb:5e:e7:54:4d:17:f3:68:a1:e4:bf:bb:89:
         55:14:75:c6:5d:c4:a9:32:4a:aa:66:f4:2f:9e:8d:16:25:9d:
         35:02:5d:db:55:ab:1a:58:20:b6:37:60:7c:55:59:19:4e:e2:
         f0:05:a1:f1:2a:8c:5b:f3:35:83:91:03:8d:70:6e:52:82:32:
         91:73:31:93:00:f2:54:2d:ae:68:b3:ea:a5:2e:2d:36:39:05:
         3b:03:87:3d:3a:e6:3b:0a:fd:ad:3e:61:94:e0:bf:43:5f:e0:
         6f:7b:f0:c3:c5:91:8e:7c:ad:4d:bc:06:7d:48:a3:c2:f7:1f:
         bc:ca:d5:78:17:2f:ec:eb:40:6f:b6:fa:48:c4:fb:d0:35:09:
         f2:a6:a8:1a:25:ab:79:bf:6e:78:e9:aa:88:46:8b:c7:f1:d8:
         55:f3:70:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI3RTIxMTAvBgNVBAUTKEY0NDRCOEREQUMxQTJBRUM5Qzk4RDg5ODE2MUM3MzQ4
MkMyRUQ0ODgwHhcNMjYwNjEzMDUzMjA5WhcNMjYwNjIwMDUzMjA5WjAYMRYwFAYD
VQQDEw02YTJjZWI1OS0wY2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0uUpJ0gvqoJa65c9E/mKj0OvOO2AMBxiz9KOE6uJkZZActnbfVaMCz9p5s+z
1/iW4oGxSH4OyDvwN6x+wKtx4MC+e8S2mFVdrbD2gyp2REcNGKdNvTolZUOnLaB0
4RBBUYG3QUddZpOlXdJjma+z55TyP/30Ou4dcNK/IQzjnfJp9txIe7kcF+OdswVg
FUXCD18wFA0kfEW91yf0Qvv+D/sImqiA9KY9qJCM7dcOtEmqBjRBCMhP1Zrg/P2M
AyR3yl5s5hU7gYwFuqsCynVmg+h9BM/j3+a6EMv+Ri2qqEqupNIgr7EWX6EzmmHa
phQyAjdEx7OdFIJGgk7Cm200HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/5tliZ
wUwFLDXo84EUm239J++EMB8GA1UdIwQYMBaAFPREuN2sGirsnJjYmBYcc0gsLtSI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83MDMxQTFFQzkz
NTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1eWNtTmlZRmh4elNDd3Ux
SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjdFMi83MDMxQTFFQzkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1
eWNtTmlZRmh4elNDd3UxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQAS8NOBlTu3s2S1KiCQ6fjEDLNWF/dEhnj7p7NgoriR6V9I7H0K+6aWognkr
XL+AO7kkYqDOZxfBByVpCbBm52n7dbIMEPlWWxEInNuKQnYjMVj2kx92rgwMAez5
3ry7XudUTRfzaKHkv7uJVRR1xl3EqTJKqmb0L56NFiWdNQJd21WrGlggtjdgfFVZ
GU7i8AWh8SqMW/M1g5EDjXBuUoIykXMxkwDyVC2uaLPqpS4tNjkFOwOHPTrmOwr9
rT5hlOC/Q1/gb3vww8WRjnytTbwGfUijwvcfvMrVeBcv7OtAb7b6SMT70DUJ8qao
GiWreb9ueOmqiEaLx/HYVfNw7g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:33:13 2026 by rpki-client