Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
File:                     R9Br1-qN8hl_cScLdclkx5q58Mw.mft (raw, json)
Hash identifier:          +MvHLoKOoLbNowchg/voBBjZgswg2WiFJtjltH+01DM=
Subject key identifier:   06:BB:A9:B7:47:72:8C:63:D1:79:CD:89:00:83:D2:B7:75:E6:5E:A4
Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
Certificate issuer:       /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Certificate serial:       1236
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
Manifest number:          1221
Signing time:             Fri 12 Jun 2026 17:06:08 +0000
Manifest this update:     Fri 12 Jun 2026 17:06:08 +0000
Manifest next update:     Fri 19 Jun 2026 17:06:08 +0000
Files and hashes:         1: R9Br1-qN8hl_cScLdclkx5q58Mw.crl (hash: rW1G9WM8Qekm9wuokjYXlkyfGo+Yvp0yY/Oe6STkv24=)
                          2: 1C6ADB02525311EA939E4652C4F9AE02.roa (hash: QDOv/k1/6QwFO3v9/oK9m5KqC6iM+gtzDTOnLCwkAkg=)
                          3: 1B3EC39C525311EA939E4652C4F9AE02.roa (hash: OlyIY7R0t7UmXYws0QWQQU3lNAFUrjDepPqWUn8CEMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
                          rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4662 (0x1236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144354, serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
        Validity
            Not Before: Jun 12 17:06:08 2026 GMT
            Not After : Jun 19 17:06:08 2026 GMT
        Subject: CN=6a2c3c80-9a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:48:cb:17:08:dd:5b:47:87:66:d1:a8:bd:
                    62:b1:59:e6:33:ed:9a:79:aa:01:7a:25:8d:6c:ee:
                    24:e3:6d:02:15:dd:38:4f:54:6c:cf:c5:7a:a0:52:
                    31:6d:45:28:06:4e:79:16:a7:0b:97:a9:3e:80:8b:
                    d6:5f:9d:de:c5:fb:a8:73:9f:da:43:bb:1f:8c:51:
                    6e:73:53:f8:f8:70:63:6f:49:3f:92:bc:27:79:1a:
                    44:20:8b:e1:0c:0b:a2:d7:66:8c:1c:da:43:59:e9:
                    ec:67:67:99:5c:51:88:1d:af:84:d0:08:ef:36:eb:
                    f3:d8:1a:46:bd:93:f0:44:94:26:08:7a:c5:6d:13:
                    22:ab:0e:f4:8d:5e:6a:ee:a0:64:62:0e:54:b0:38:
                    1f:e2:9e:90:07:98:af:9a:56:50:a5:2a:f3:dc:24:
                    bb:cb:62:ad:fd:48:16:f4:c2:86:1a:5f:f7:73:c2:
                    20:01:6e:a3:d8:e5:52:09:4f:b7:ff:06:03:46:94:
                    27:9a:a9:7b:fe:e9:92:aa:f2:8b:22:f3:e1:4f:c8:
                    88:75:ff:a1:e9:4f:c0:51:27:e5:e7:7c:6f:39:c0:
                    af:4a:7c:2d:10:6d:81:93:d4:81:e3:8e:b2:31:57:
                    29:ce:8e:65:bc:0a:f6:f8:7c:db:d9:e3:ac:c6:a7:
                    f6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BB:A9:B7:47:72:8C:63:D1:79:CD:89:00:83:D2:B7:75:E6:5E:A4
            X509v3 Authority Key Identifier:
                keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:49:fd:03:55:6c:f2:de:78:f0:3b:29:06:ba:6e:de:18:e0:
         99:53:af:b3:ac:58:c4:e5:ff:6f:d2:95:1a:95:65:a6:d9:60:
         1c:10:8d:e4:d9:f3:7f:9c:ee:b4:68:1e:53:fd:6e:01:6a:6b:
         03:5f:51:4c:3f:12:86:6c:f7:f3:14:e1:ce:0b:bb:e6:2f:9e:
         e6:fd:f0:a9:cc:26:38:e3:77:66:f6:a7:40:9d:c9:00:1f:30:
         c8:1f:61:cf:00:7b:7c:b5:0d:20:39:00:b6:12:98:3a:64:49:
         be:6c:48:ee:f6:6b:61:51:40:09:7a:1f:8b:21:00:05:2a:42:
         df:89:cf:de:0f:e7:48:66:3c:0a:8d:19:c9:bc:c4:18:44:2b:
         3c:d5:12:97:be:62:8e:7c:52:0e:47:ea:bc:f8:dc:f8:5d:5c:
         42:64:ec:9e:83:8f:7a:c8:a3:fa:a8:19:ba:8c:45:9c:ed:fc:
         5d:00:52:84:fb:de:f6:29:e4:2c:36:fc:3f:73:ff:9f:56:c1:
         fa:27:59:4a:f8:c0:f0:46:eb:74:27:d4:33:9c:43:cf:65:3e:
         45:54:2e:2d:6b:4d:46:50:c6:fd:eb:8b:bc:cb:fd:da:e1:5e:
         4e:d4:03:b1:d7:b9:b9:11:fd:34:33:5a:93:d4:98:92:cc:4c:
         13:f1:1f:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQzNTQxMTAvBgNVBAUTKDQ3RDA2QkQ3RUE4REYyMTk3RjcxMjcwQjc1Qzk2NEM3
OUFCOUYwQ0MwHhcNMjYwNjEyMTcwNjA4WhcNMjYwNjE5MTcwNjA4WjAYMRYwFAYD
VQQDEw02YTJjM2M4MC05YTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAum5IyxcI3VtHh2bRqL1isVnmM+2aeaoBeiWNbO4k420CFd04T1Rsz8V6oFIx
bUUoBk55FqcLl6k+gIvWX53exfuoc5/aQ7sfjFFuc1P4+HBjb0k/krwneRpEIIvh
DAui12aMHNpDWensZ2eZXFGIHa+E0AjvNuvz2BpGvZPwRJQmCHrFbRMiqw70jV5q
7qBkYg5UsDgf4p6QB5ivmlZQpSrz3CS7y2Kt/UgW9MKGGl/3c8IgAW6j2OVSCU+3
/wYDRpQnmql7/umSqvKLIvPhT8iIdf+h6U/AUSfl53xvOcCvSnwtEG2Bk9SB446y
MVcpzo5lvAr2+Hzb2eOsxqf2hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAa7qbdH
coxj0XnNiQCD0rd15l6kMB8GA1UdIwQYMBaAFEfQa9fqjfIZf3EnC3XJZMeaufDM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM1NC82MUExMjZFNDA0
RTQxMUU5OENBRkFBN0JDNEY5QUUwMi9SOUJyMS1xTjhobF9jU2NMZGNsa3g1cTU4
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1I5QnIxLXFOOGhsX2NTY0xkY2xreDVxNThNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDM1NC82MUExMjZFNDA0RTQxMUU5OENBRkFBN0JDNEY5QUUwMi9SOUJyMS1xTjho
bF9jU2NMZGNsa3g1cTU4TXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADUn9A1Vs8t548DspBrpu3hjgmVOvs6xYxOX/b9KVGpVlptlgHBCN5Nnzf5zu
tGgeU/1uAWprA19RTD8Shmz38xThzgu75i+e5v3wqcwmOON3ZvanQJ3JAB8wyB9h
zwB7fLUNIDkAthKYOmRJvmxI7vZrYVFACXofiyEABSpC34nP3g/nSGY8Co0ZybzE
GEQrPNUSl75ijnxSDkfqvPjc+F1cQmTsnoOPesij+qgZuoxFnO38XQBShPve9ink
LDb8P3P/n1bB+idZSvjA8EbrdCfUM5xDz2U+RVQuLWtNRlDG/euLvMv92uFeTtQD
sde5uRH9NDNak9SYksxME/EfTA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:37:01 2026 by rpki-client