Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
File:                     _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json)
Hash identifier:          yzfdZkvA8W53XLdvyowNYXLJ4qniW6ubuwmoXGMvDm8=
Subject key identifier:   E2:1A:80:D4:2C:05:86:26:2C:63:73:1D:D2:B6:D9:5A:C3:93:88:1D
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Certificate issuer:       /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
Manifest number:          012B
Signing time:             Fri 17 Apr 2026 05:29:41 +0000
Manifest this update:     Fri 17 Apr 2026 05:29:41 +0000
Manifest next update:     Fri 24 Apr 2026 05:29:41 +0000
Files and hashes:         1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: ii1Pk0OlnqAOF5jZiS2Fi30W90SmwVi5h+ZnldbZC04=)
                          2: F9EB418CFEAB11F094E473AD656F56BC.roa (hash: ZCVaqB4e05gjNJd4/Bm9ycXqQQacD3faAo8D3OnwhT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
                          rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
        Validity
            Not Before: Apr 17 05:29:41 2026 GMT
            Not After : Apr 24 05:29:41 2026 GMT
        Subject: CN=69e1c545-0ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:ca:01:a5:bf:83:90:72:32:87:4a:af:63:
                    5c:07:51:d6:b7:f1:30:e0:23:86:80:f1:b3:f1:a7:
                    50:f9:27:30:93:c7:b3:e1:03:09:a7:b1:0f:20:3c:
                    08:3b:a9:98:da:31:80:05:ba:47:48:9d:91:f0:89:
                    cd:d1:ac:c0:ef:06:12:3f:7d:07:b7:b6:b5:35:0f:
                    e7:49:97:db:f5:27:72:9b:3e:8d:7f:ef:ff:b6:b3:
                    e1:fc:dc:9f:89:29:02:b3:6a:25:34:4e:f4:92:ea:
                    e9:06:8b:65:6b:7b:8f:b4:98:ca:43:3d:fe:2f:0a:
                    3d:c4:9d:61:01:2b:30:2d:9d:2a:bb:35:58:00:92:
                    27:14:3a:4f:00:3e:3b:a2:d9:45:be:ff:77:c2:77:
                    f8:e0:e5:a2:f3:c6:7e:22:fe:b7:5c:82:3a:53:cb:
                    d0:f2:f0:c5:21:53:bb:3f:62:9c:30:7c:5b:8f:d1:
                    f2:7e:7f:9e:cd:4c:aa:e1:28:9b:32:35:32:1c:80:
                    ea:36:01:0d:69:aa:7e:8d:62:d0:04:13:7b:83:dc:
                    d6:5b:12:0b:3b:5b:2f:fa:42:6d:43:d0:fe:96:83:
                    ad:9b:d9:86:e3:f4:a2:a9:04:ae:e3:1a:9b:44:6e:
                    84:64:ce:2c:6b:b3:8e:25:3b:80:83:eb:bd:d5:25:
                    8d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1A:80:D4:2C:05:86:26:2C:63:73:1D:D2:B6:D9:5A:C3:93:88:1D
            X509v3 Authority Key Identifier:
                keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:71:65:cf:f0:58:27:4a:f8:ab:60:63:aa:9b:dd:1c:1c:45:
         f5:2d:ea:d8:e5:af:22:5e:09:ee:52:8f:71:43:f5:60:ee:38:
         e8:67:c7:45:55:ad:8f:3f:f3:da:e8:33:a1:9a:86:23:16:05:
         39:66:1e:35:e5:a7:d8:33:56:40:3b:cd:87:ed:f4:61:aa:18:
         8f:58:9d:42:be:28:01:7e:73:d6:7a:2b:40:8d:4a:45:24:16:
         43:29:a5:de:98:62:4f:d6:6b:53:07:fc:05:26:f6:ba:e5:66:
         eb:ee:61:6b:41:3d:13:a7:cb:49:f5:bd:ee:4a:8c:1f:a1:5e:
         a2:1d:cc:58:e1:56:8c:76:ef:50:05:3c:fd:ab:db:45:13:51:
         40:72:56:9b:2f:43:7c:68:00:4c:19:ca:94:43:ac:a6:94:2e:
         d3:77:9d:72:88:67:0c:94:f5:ed:de:29:c1:5e:a5:f0:fb:3f:
         03:09:61:e7:7e:73:df:99:23:b3:9b:6b:8c:ba:78:42:05:a1:
         41:2f:7d:a5:1d:91:df:7b:62:32:54:65:21:ec:1e:c5:87:b8:
         59:9a:3b:f9:00:47:8c:9b:e6:80:95:36:f5:f7:fe:88:d1:85:
         fe:17:3c:96:6a:cd:e7:a3:4d:2c:a4:a6:9f:e7:3a:68:17:40:
         82:b7:24:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjBDOUUxMTAvBgNVBAUTKEZEOUQ3RjY2MEYzQTEzMENBNDhCRUJCQTY2RTE2MkJE
MzAzNEUzOEQwHhcNMjYwNDE3MDUyOTQxWhcNMjYwNDI0MDUyOTQxWjAYMRYwFAYD
VQQDEw02OWUxYzU0NS0wZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqp3KAaW/g5ByModKr2NcB1HWt/Ew4COGgPGz8adQ+Scwk8ez4QMJp7EPIDwI
O6mY2jGABbpHSJ2R8InN0azA7wYSP30Ht7a1NQ/nSZfb9Sdymz6Nf+//trPh/Nyf
iSkCs2olNE70kurpBotla3uPtJjKQz3+Lwo9xJ1hASswLZ0quzVYAJInFDpPAD47
otlFvv93wnf44OWi88Z+Iv63XII6U8vQ8vDFIVO7P2KcMHxbj9Hyfn+ezUyq4Sib
MjUyHIDqNgENaap+jWLQBBN7g9zWWxILO1sv+kJtQ9D+loOtm9mG4/SiqQSu4xqb
RG6EZM4sa7OOJTuAg+u91SWNtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOIagNQs
BYYmLGNzHdK22VrDk4gdMB8GA1UdIwQYMBaAFP2df2YPOhMMpIvrumbhYr0wNOON
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS80RUZEMTVCNjhC
Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3eWtpLXU2WnVGaXZUQTA0
NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEM5RS80RUZEMTVCNjhCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3
eWtpLXU2WnVGaXZUQTA0NDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhXFlz/BYJ0r4q2BjqpvdHBxF9S3q2OWvIl4J7lKPcUP1YO446GfHRVWtjz/z
2ugzoZqGIxYFOWYeNeWn2DNWQDvNh+30YaoYj1idQr4oAX5z1norQI1KRSQWQyml
3phiT9ZrUwf8BSb2uuVm6+5ha0E9E6fLSfW97kqMH6Feoh3MWOFWjHbvUAU8/avb
RRNRQHJWmy9DfGgATBnKlEOsppQu03edcohnDJT17d4pwV6l8Ps/Awlh535z35kj
s5trjLp4QgWhQS99pR2R33tiMlRlIewexYe4WZo7+QBHjJvmgJU29ff+iNGF/hc8
lmrN56NNLKSmn+c6aBdAgrckpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:08 2026 by rpki-client