Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
File:                     cI8eBxM4VcgHTu1fjIO0RmpgesI.mft (raw, json)
Hash identifier:          qQcnej57/WUzKZOoARSl83Qlg9ajNdK/z0hB2sziYKU=
Subject key identifier:   6F:35:B3:17:03:BF:BB:43:66:65:33:2D:FF:96:7C:2E:87:FB:7A:26
Authority key identifier: 70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2
Certificate issuer:       /CN=A9171D16/serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
Manifest number:          01D0
Signing time:             Wed 17 Jun 2026 03:50:45 +0000
Manifest this update:     Wed 17 Jun 2026 03:50:45 +0000
Manifest next update:     Wed 24 Jun 2026 03:50:45 +0000
Files and hashes:         1: cI8eBxM4VcgHTu1fjIO0RmpgesI.crl (hash: TaK8RgVOAuvM+6UYsYck20e2rNt7LteWq5hQ4jZ9jp0=)
                          2: BFC0298670DC11EF8B65D95AC4F9AE02.roa (hash: kzX0teoGqCYcrXmXpjad2Lv+QKDn7uXbylM76fvPiSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl
                          rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D16, serialNumber=708F1E07133855C8074EED5F8C83B4466A607AC2
        Validity
            Not Before: Jun 17 03:50:45 2026 GMT
            Not After : Jun 24 03:50:45 2026 GMT
        Subject: CN=6a321995-acc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:61:13:81:91:37:42:b1:b0:83:ab:a9:ed:24:
                    f5:aa:60:89:d8:77:1d:41:2e:46:0a:06:4e:39:9b:
                    cd:8a:14:ff:d7:96:76:c0:4d:51:71:f7:74:c4:ae:
                    12:c6:22:4a:38:64:f4:1a:95:fa:43:75:89:ff:ce:
                    df:79:4a:c1:a2:e2:17:68:e5:a5:79:ec:00:9c:13:
                    ad:83:cf:d8:f8:ff:15:c2:df:04:dd:b8:a0:68:20:
                    09:5d:75:24:21:4e:0c:d6:ea:3e:a6:be:54:e8:55:
                    c4:c2:da:34:22:95:b5:d7:44:75:95:a7:86:b6:1f:
                    4e:82:5f:cb:3e:6e:52:d9:df:42:b1:f7:b1:24:fe:
                    0e:73:02:a9:9d:8e:df:a7:a5:c8:d0:d7:58:cc:13:
                    76:46:33:3b:dd:e3:6f:5c:90:65:ac:eb:a2:e7:a4:
                    2b:08:37:1d:6c:8b:32:8d:ae:b3:7f:6f:73:a3:8c:
                    3e:17:aa:04:a6:4d:07:15:d2:29:e8:5f:7f:f4:4b:
                    1c:d9:2f:20:ba:c8:1e:82:d9:92:e4:1d:1b:7a:85:
                    f5:bd:61:84:f1:25:d1:d0:c8:a0:03:34:f7:6a:f2:
                    11:37:d3:e3:9b:62:b4:58:29:a7:ff:55:37:1b:51:
                    34:f6:b8:f1:3e:5f:ed:aa:1d:00:c9:f7:92:78:f0:
                    98:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:35:B3:17:03:BF:BB:43:66:65:33:2D:FF:96:7C:2E:87:FB:7A:26
            X509v3 Authority Key Identifier:
                keyid:70:8F:1E:07:13:38:55:C8:07:4E:ED:5F:8C:83:B4:46:6A:60:7A:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cI8eBxM4VcgHTu1fjIO0RmpgesI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D16/656D17A8AE9C11EE911AFB63C4F9AE02/cI8eBxM4VcgHTu1fjIO0RmpgesI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8c:4c:e8:50:22:85:98:f7:52:a4:3c:9f:58:6a:3d:78:f2:
         88:00:a9:f5:01:3e:f9:e2:b6:35:52:fc:06:f6:42:6e:1f:db:
         0a:43:76:e7:2b:fd:48:fc:cb:da:fc:25:f9:0a:e4:ff:ea:aa:
         22:16:83:9f:b1:38:6f:b9:85:26:1a:87:33:cc:a0:eb:13:81:
         0b:0d:f0:b6:67:3f:b4:a4:51:3d:4c:89:83:fd:81:67:12:b2:
         84:98:cd:1a:57:7c:7b:72:a1:8e:05:3f:3f:e0:17:6e:fd:c2:
         bb:3a:de:3a:f8:1e:8a:02:3a:ff:1b:5f:7c:bd:01:24:67:e1:
         bd:fe:28:6a:21:15:81:09:d2:a6:60:54:ba:30:ce:77:85:9b:
         56:6d:2d:6e:92:5c:7e:61:90:10:77:5a:33:4b:23:87:2f:bc:
         fb:d2:74:9e:d7:b3:ff:b8:2a:dc:e8:bf:5b:16:80:62:48:1e:
         55:2f:42:4e:ab:b6:06:cc:7a:46:10:a5:7d:8b:e4:4b:73:e6:
         0c:32:0f:1c:d3:cf:ac:c9:e1:4e:86:9e:13:70:41:61:5f:08:
         67:7d:4c:9a:5e:99:7f:5a:c9:23:89:c0:94:f7:d0:0c:b1:14:
         20:5a:20:30:4f:6d:a3:f8:70:c7:bb:9f:ca:bb:7b:26:29:56:
         07:ce:c8:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFEMTYxMTAvBgNVBAUTKDcwOEYxRTA3MTMzODU1QzgwNzRFRUQ1RjhDODNCNDQ2
NkE2MDdBQzIwHhcNMjYwNjE3MDM1MDQ1WhcNMjYwNjI0MDM1MDQ1WjAYMRYwFAYD
VQQDEw02YTMyMTk5NS1hY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnGETgZE3QrGwg6up7ST1qmCJ2HcdQS5GCgZOOZvNihT/15Z2wE1Rcfd0xK4S
xiJKOGT0GpX6Q3WJ/87feUrBouIXaOWleewAnBOtg8/Y+P8Vwt8E3bigaCAJXXUk
IU4M1uo+pr5U6FXEwto0IpW110R1laeGth9Ogl/LPm5S2d9CsfexJP4OcwKpnY7f
p6XI0NdYzBN2RjM73eNvXJBlrOui56QrCDcdbIsyja6zf29zo4w+F6oEpk0HFdIp
6F9/9Esc2S8gusgegtmS5B0beoX1vWGE8SXR0MigAzT3avIRN9Pjm2K0WCmn/1U3
G1E09rjxPl/tqh0AyfeSePCYuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG81sxcD
v7tDZmUzLf+WfC6H+3omMB8GA1UdIwQYMBaAFHCPHgcTOFXIB07tX4yDtEZqYHrC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQxNi82NTZEMTdBOEFF
OUMxMUVFOTExQUZCNjNDNEY5QUUwMi9jSThlQnhNNFZjZ0hUdTFmaklPMFJtcGdl
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2NJOGVCeE00VmNnSFR1MWZqSU8wUm1wZ2VzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MUQxNi82NTZEMTdBOEFFOUMxMUVFOTExQUZCNjNDNEY5QUUwMi9jSThlQnhNNFZj
Z0hUdTFmaklPMFJtcGdlc0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANIxM6FAihZj3UqQ8n1hqPXjyiACp9QE++eK2NVL8BvZCbh/bCkN25yv9SPzL
2vwl+Qrk/+qqIhaDn7E4b7mFJhqHM8yg6xOBCw3wtmc/tKRRPUyJg/2BZxKyhJjN
Gld8e3KhjgU/P+AXbv3CuzreOvgeigI6/xtffL0BJGfhvf4oaiEVgQnSpmBUujDO
d4WbVm0tbpJcfmGQEHdaM0sjhy+8+9J0ntez/7gq3Oi/WxaAYkgeVS9CTqu2Bsx6
RhClfYvkS3PmDDIPHNPPrMnhToaeE3BBYV8IZ31Mml6Zf1rJI4nAlPfQDLEUIFog
ME9to/hwx7ufyrt7JilWB87I4Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:01:41 2026 by rpki-client