Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
File:                     IpO9TF5PmillNYywGN8-Tu5N8c8.mft (raw, json)
Hash identifier:          XdW246R1JQaNCV0zOMIJj/b7cj9rgiyWnJh+7heDxJ0=
Subject key identifier:   EC:88:7A:9D:54:47:39:F0:50:52:4B:94:23:60:EA:71:E9:F1:16:41
Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
Certificate issuer:       /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Certificate serial:       3094
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
Manifest number:          306D
Signing time:             Thu 16 Apr 2026 15:26:12 +0000
Manifest this update:     Thu 16 Apr 2026 15:26:12 +0000
Manifest next update:     Thu 23 Apr 2026 15:26:12 +0000
Files and hashes:         1: IpO9TF5PmillNYywGN8-Tu5N8c8.crl (hash: WhuLDJea6c2jurEza0sN4dmJFxPnuLceJh7lI1H+O7c=)
                          2: 149AB4BE7CE911EEB9A02D83C4F9AE02.roa (hash: KX6DklLChpyy6uFhTyu0wieTEAiRW7QBB9X6fj81ntY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl
                          rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12436 (0x3094)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915177C, serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
        Validity
            Not Before: Apr 16 15:26:12 2026 GMT
            Not After : Apr 23 15:26:12 2026 GMT
        Subject: CN=69e0ff94-8273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f3:a4:b4:7b:7d:ea:85:09:16:0b:70:0c:15:
                    b0:66:82:96:41:b0:cf:94:c2:d1:55:a2:d3:60:f4:
                    0b:f7:8f:5a:90:7f:3f:05:00:d8:7f:9e:ff:53:8e:
                    a1:11:da:fd:06:10:11:3f:32:23:2a:93:e2:44:69:
                    35:3e:6b:ca:de:66:ef:a6:ae:a7:0b:a9:d2:ac:7c:
                    6a:e1:b1:77:8b:ab:34:ea:b9:64:43:1e:4c:ad:88:
                    3f:4e:61:27:44:4e:3b:be:b7:1e:c2:e6:01:e2:0f:
                    f8:83:ee:bb:8d:38:64:58:58:96:51:35:69:dc:3b:
                    b3:d5:21:54:7c:be:b7:fa:2b:32:e2:1a:dc:9a:69:
                    ac:0e:3c:44:0d:1f:41:93:3e:cf:6a:d9:67:fd:42:
                    a6:85:34:4c:8a:84:ee:ee:8e:3b:d0:09:d4:fe:bb:
                    0f:c9:b0:64:6b:c9:2a:2c:3f:37:db:60:81:97:29:
                    0d:b9:fc:f1:17:68:ac:46:fd:dd:14:db:c6:67:47:
                    cf:33:27:74:6c:af:03:24:00:38:74:ed:f9:ce:7f:
                    f6:cf:dc:c9:da:9d:7b:b1:f2:37:59:fd:38:30:da:
                    84:61:ff:d7:b0:b1:7d:ad:1b:61:b2:90:47:3a:42:
                    d1:ab:32:ce:77:e1:79:b7:eb:e2:27:c2:d2:ca:b3:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:88:7A:9D:54:47:39:F0:50:52:4B:94:23:60:EA:71:E9:F1:16:41
            X509v3 Authority Key Identifier:
                keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:58:1f:c1:3a:35:35:89:06:37:ad:e3:d5:0f:76:3a:a8:6b:
         0a:a9:ce:0f:48:68:64:3c:94:ce:71:b6:20:21:de:65:24:54:
         5a:03:ac:99:48:6d:71:0d:ac:bf:33:67:15:43:c9:5b:ae:b0:
         9d:c5:3a:5b:cd:c7:b3:a7:83:d1:6e:6f:23:c7:77:e5:a1:85:
         20:cf:b0:56:9b:d8:f6:bf:b2:cd:0b:56:05:38:5d:4c:db:89:
         32:39:fd:c9:9c:18:90:25:90:d6:30:9a:3d:7b:a5:1b:56:82:
         58:1e:15:ea:c1:dd:01:a9:73:49:c9:54:ca:8c:14:dc:41:aa:
         43:7c:33:78:9b:f9:fe:cd:de:02:9b:3d:b4:6d:43:ec:e8:05:
         7e:b9:0e:f6:f6:2d:a1:b5:d0:5d:3a:db:10:10:d3:13:27:9d:
         36:f4:c1:db:4a:36:4f:20:75:f4:9d:2e:e1:8a:fd:d0:89:c6:
         78:23:34:0a:35:f1:c9:4b:09:13:69:14:c1:69:b8:87:13:c5:
         0d:78:c0:82:f7:f9:2d:3e:f8:91:56:e8:9c:15:f5:15:af:73:
         ce:ae:33:13:dd:a9:30:43:42:b3:ba:bd:2f:53:0c:37:dd:98:
         4f:f7:a3:e6:2f:03:4b:bb:a1:08:66:14:48:7d:fc:5d:31:7f:
         f4:0f:a2:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE3N0MxMTAvBgNVBAUTKDIyOTNCRDRDNUU0RjlBMjk2NTM1OENCMDE4REYzRTRF
RUU0REYxQ0YwHhcNMjYwNDE2MTUyNjEyWhcNMjYwNDIzMTUyNjEyWjAYMRYwFAYD
VQQDEw02OWUwZmY5NC04MjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx/OktHt96oUJFgtwDBWwZoKWQbDPlMLRVaLTYPQL949akH8/BQDYf57/U46h
Edr9BhARPzIjKpPiRGk1PmvK3mbvpq6nC6nSrHxq4bF3i6s06rlkQx5MrYg/TmEn
RE47vrcewuYB4g/4g+67jThkWFiWUTVp3Duz1SFUfL63+isy4hrcmmmsDjxEDR9B
kz7Patln/UKmhTRMioTu7o470AnU/rsPybBka8kqLD8322CBlykNufzxF2isRv3d
FNvGZ0fPMyd0bK8DJAA4dO35zn/2z9zJ2p17sfI3Wf04MNqEYf/XsLF9rRthspBH
OkLRqzLOd+F5t+viJ8LSyrPe+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOyIep1U
RznwUFJLlCNg6nHp8RZBMB8GA1UdIwQYMBaAFCKTvUxeT5opZTWMsBjfPk7uTfHP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTc3Qy85MjRDRENDMDE0
MzAxMUUzQTBCMTlGMkE1OTExRUEzMi9JcE85VEY1UG1pbGxOWXl3R044LVR1NU44
YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lwTzlURjVQbWlsbE5ZeXdHTjgtVHU1TjhjOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTc3Qy85MjRDRENDMDE0MzAxMUUzQTBCMTlGMkE1OTExRUEzMi9JcE85VEY1UG1p
bGxOWXl3R044LVR1NU44YzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm1gfwTo1NYkGN63j1Q92OqhrCqnOD0hoZDyUznG2ICHeZSRUWgOsmUhtcQ2s
vzNnFUPJW66wncU6W83Hs6eD0W5vI8d35aGFIM+wVpvY9r+yzQtWBThdTNuJMjn9
yZwYkCWQ1jCaPXulG1aCWB4V6sHdAalzSclUyowU3EGqQ3wzeJv5/s3eAps9tG1D
7OgFfrkO9vYtobXQXTrbEBDTEyedNvTB20o2TyB19J0u4Yr90InGeCM0CjXxyUsJ
E2kUwWm4hxPFDXjAgvf5LT74kVbonBX1Fa9zzq4zE92pMENCs7q9L1MMN92YT/ej
5i8DS7uhCGYUSH38XTF/9A+iKA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:40:07 2026 by rpki-client