Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
File:                     B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json)
Hash identifier:          JkEvfSN/ugoUiu8BrpELsxlqkhUzVQ+8LAsTTt9meyo=
Subject key identifier:   06:4D:95:1A:53:58:0C:71:A7:85:AE:AD:EA:DB:00:EC:30:EA:B3:98
Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
Certificate issuer:       /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
Manifest number:          010F
Signing time:             Fri 17 Apr 2026 05:40:00 +0000
Manifest this update:     Fri 17 Apr 2026 05:40:00 +0000
Manifest next update:     Fri 24 Apr 2026 05:40:00 +0000
Files and hashes:         1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: o5s9Q58VqFX2RPie1oPyJ7KKGETLUys/Xk++HRiv+RE=)
                          2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: PJLa3dcXC2/TqvhR77SxkhOWTThse4ZX840dFNg6P88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl
                          rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
        Validity
            Not Before: Apr 17 05:40:00 2026 GMT
            Not After : Apr 24 05:40:00 2026 GMT
        Subject: CN=69e1c7b0-ea1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:e4:7d:97:c3:0e:50:a3:8f:62:ef:78:98:
                    f4:c7:27:20:35:1b:4b:80:f7:02:56:ca:a3:cf:6c:
                    7f:e4:87:69:07:6b:ff:f4:f8:71:bf:f6:30:fa:7c:
                    10:3f:c3:0a:d1:2c:b9:60:ea:69:b6:03:0a:99:1f:
                    ba:c8:b7:15:b1:38:ff:a3:ea:43:af:fc:9e:8c:71:
                    4d:11:89:39:f1:1e:6c:d0:db:24:0b:19:f3:7e:e8:
                    a4:3d:e3:e2:a2:91:7c:23:e5:4c:94:28:81:91:27:
                    a8:c7:e5:32:d6:48:c0:91:0f:7a:f5:ae:80:ad:30:
                    39:a7:4d:9c:34:ce:d4:6b:b5:f1:61:4e:d5:15:9d:
                    83:d7:de:72:a1:9c:d5:97:68:d2:88:87:fb:6d:d2:
                    c4:58:4f:6e:2b:72:69:d5:bf:56:56:60:a0:f4:42:
                    d3:cf:ed:90:8a:a7:80:5b:46:4f:80:19:f1:6a:55:
                    78:c5:4a:33:0e:22:85:65:8a:8e:45:ae:d9:0f:59:
                    f8:c9:2c:89:08:20:1d:84:55:2a:5e:f7:d2:da:6c:
                    02:f9:08:6b:fe:c0:20:a8:9f:0a:78:13:48:f8:bc:
                    3f:c3:49:15:29:32:77:39:02:6b:aa:14:ce:58:94:
                    6b:d4:9a:b8:9f:42:f0:bb:bc:13:21:7d:c1:79:23:
                    36:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4D:95:1A:53:58:0C:71:A7:85:AE:AD:EA:DB:00:EC:30:EA:B3:98
            X509v3 Authority Key Identifier:
                keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4c:18:85:1f:e4:a1:1a:31:58:aa:c6:5d:b7:db:e2:ae:38:
         9e:ee:2b:97:fe:1b:d5:2e:85:7b:64:88:96:e4:3d:bb:88:db:
         ef:cc:60:28:f7:83:2e:35:5b:9a:6e:be:da:ee:43:08:b5:29:
         ee:d3:2c:b5:0e:09:d9:52:48:84:f2:52:8f:31:e8:3e:86:08:
         cb:3b:c9:62:1d:8b:45:98:70:ad:b7:a5:99:62:6a:e9:14:13:
         02:a4:e3:5a:59:9f:6f:a5:b9:f3:f5:98:04:37:31:ea:bf:bf:
         20:ec:87:be:1f:7c:97:3b:a9:8d:ca:fd:25:e5:4c:42:f9:af:
         11:43:f4:5f:31:56:3d:7c:5e:1e:cc:8f:94:a1:62:09:65:1e:
         4b:95:2c:0f:d0:e3:a4:98:ff:0c:c2:40:d9:21:97:7b:e4:2d:
         be:5e:33:72:c0:a5:d0:ad:4d:7f:f2:cf:54:af:a1:c6:9d:8e:
         d7:05:12:e3:e7:5e:41:61:b2:c4:4c:dc:c3:d2:2f:8f:3a:bb:
         3b:2e:5a:f0:12:f8:bd:06:5a:43:63:d7:aa:5c:4b:db:b5:b6:
         d4:e0:ac:02:84:88:b4:bb:a2:68:ae:24:c2:85:32:ad:95:1d:
         c6:dd:a4:3b:89:6e:6d:9e:e6:78:bf:3e:18:6d:6f:0f:c3:7f:
         ce:33:17:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBEM0UxMTAvBgNVBAUTKDA3RjMxQjQ3NDcxM0IzQTE1MkM2QTVGOEY0OERFRDIw
OTdEQzI0MUYwHhcNMjYwNDE3MDU0MDAwWhcNMjYwNDI0MDU0MDAwWjAYMRYwFAYD
VQQDEw02OWUxYzdiMC1lYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA05PkfZfDDlCjj2LveJj0xycgNRtLgPcCVsqjz2x/5IdpB2v/9Phxv/Yw+nwQ
P8MK0Sy5YOpptgMKmR+6yLcVsTj/o+pDr/yejHFNEYk58R5s0NskCxnzfuikPePi
opF8I+VMlCiBkSeox+Uy1kjAkQ969a6ArTA5p02cNM7Ua7XxYU7VFZ2D195yoZzV
l2jSiIf7bdLEWE9uK3Jp1b9WVmCg9ELTz+2QiqeAW0ZPgBnxalV4xUozDiKFZYqO
Ra7ZD1n4ySyJCCAdhFUqXvfS2mwC+Qhr/sAgqJ8KeBNI+Lw/w0kVKTJ3OQJrqhTO
WJRr1Jq4n0Lwu7wTIX3BeSM2ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZNlRpT
WAxxp4WurerbAOww6rOYMB8GA1UdIwQYMBaAFAfzG0dHE7OhUsal+PSN7SCX3CQf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CREVFOUUyNDlG
RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2RlN4cVg0OUkzdElKZmNK
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEQzRS9CREVFOUUyNDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2
RlN4cVg0OUkzdElKZmNKQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEUwYhR/koRoxWKrGXbfb4q44nu4rl/4b1S6Fe2SIluQ9u4jb78xgKPeDLjVb
mm6+2u5DCLUp7tMstQ4J2VJIhPJSjzHoPoYIyzvJYh2LRZhwrbelmWJq6RQTAqTj
Wlmfb6W58/WYBDcx6r+/IOyHvh98lzupjcr9JeVMQvmvEUP0XzFWPXxeHsyPlKFi
CWUeS5UsD9DjpJj/DMJA2SGXe+Qtvl4zcsCl0K1Nf/LPVK+hxp2O1wUS4+deQWGy
xEzcw9Ivjzq7Oy5a8BL4vQZaQ2PXqlxL27W21OCsAoSItLuiaK4kwoUyrZUdxt2k
O4lubZ7meL8+GG1vD8N/zjMX1g==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:11:01 2026 by rpki-client