Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
File:                     1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json)
Hash identifier:          P+sJE1NvBg0tYCbBLXxRInTMRv0sdg4Ywyr7vVkFi5g=
Subject key identifier:   56:91:5A:83:62:C1:A8:AC:6D:D4:E7:14:F0:80:F0:EF:13:E6:A4:6E
Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98
Certificate issuer:       /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
Certificate serial:       0240
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
Manifest number:          023A
Signing time:             Fri 17 Apr 2026 02:19:01 +0000
Manifest this update:     Fri 17 Apr 2026 02:19:01 +0000
Manifest next update:     Fri 24 Apr 2026 02:19:01 +0000
Files and hashes:         1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: 2AqxBT3NI251PzPo5fJI/cmT3Am0hMGatARqs/PRdgk=)
                          2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: Jyx2g2LuWi9RChNnQzsKyfqbLFT8q1vzBpyZSYuRyps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl
                          rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
        Validity
            Not Before: Apr 17 02:19:01 2026 GMT
            Not After : Apr 24 02:19:01 2026 GMT
        Subject: CN=69e19895-2064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:87:5e:20:60:2f:e8:ab:5c:ca:e6:4d:ac:
                    68:44:86:75:27:54:2e:e1:ad:95:4d:77:43:c2:06:
                    ff:4f:e3:9d:95:1b:8b:09:e5:af:7c:9e:ee:54:bf:
                    15:9e:73:37:2a:0d:96:65:63:90:03:ea:a2:5e:da:
                    a7:6c:2f:96:da:ac:13:13:20:76:30:73:c2:b1:8f:
                    af:be:c9:ce:00:5b:3d:0a:78:65:7a:0c:90:63:a7:
                    00:0a:70:67:89:a5:dd:f1:61:5c:e6:40:19:56:40:
                    a2:85:67:4e:9c:50:01:97:4b:4e:74:c0:e8:e1:81:
                    8f:72:77:a3:ba:aa:8d:61:f3:2c:0b:70:48:4c:6e:
                    54:74:9c:06:1c:4a:48:18:a2:5d:42:18:af:94:5d:
                    9b:9d:fe:44:ad:34:16:37:fb:54:7f:28:79:4f:c4:
                    63:bd:b8:16:08:a5:7d:4a:b8:49:c4:bc:a0:01:85:
                    5a:de:70:85:d5:f4:63:87:d4:b1:0f:d4:f3:ba:11:
                    bd:af:c7:ec:1b:76:3e:09:50:4a:31:ae:9d:a1:83:
                    b0:83:da:b0:72:83:06:2c:18:18:ce:4e:7f:09:1a:
                    d8:f4:aa:be:fa:7b:0e:18:13:97:44:07:98:1a:19:
                    51:69:62:81:49:f4:80:c3:e4:4d:20:82:43:a7:b9:
                    ef:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:91:5A:83:62:C1:A8:AC:6D:D4:E7:14:F0:80:F0:EF:13:E6:A4:6E
            X509v3 Authority Key Identifier:
                keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d7:c7:a6:1b:53:3b:23:30:fa:27:cf:a8:1f:ed:47:7c:b8:
         fb:cf:2b:43:4e:d3:22:cc:0e:80:bf:f0:41:98:23:8e:69:37:
         9f:c5:45:16:0e:e4:d2:2b:b6:4c:fa:8b:e0:83:f3:aa:e8:18:
         ac:7e:f7:c7:64:6e:70:fe:de:54:58:60:1c:b0:73:e4:07:1d:
         23:8f:41:c4:58:b6:9b:c9:3a:02:92:9a:01:82:0b:3b:fb:64:
         4f:62:19:bf:dd:ea:f5:16:51:94:be:e0:55:0c:bf:fb:d9:4e:
         a1:a7:4c:ac:44:96:1c:ec:01:7d:d0:c2:30:f8:00:f0:79:8a:
         43:53:c4:59:48:25:25:e9:f7:2e:55:16:6f:45:6a:42:1b:36:
         b4:43:92:96:0a:ff:67:75:82:f3:f9:e9:92:ac:26:15:a5:cb:
         96:60:ae:57:68:d2:39:ed:a7:a2:21:56:32:f7:f6:8f:ce:c4:
         08:d7:e4:9b:93:da:3e:c9:0a:1c:33:4b:f6:df:d5:fe:ff:df:
         5a:57:e1:8e:8e:a5:19:f9:e0:9b:7c:7b:82:7b:41:4d:67:78:
         87:6b:b7:c9:e2:90:55:2c:5c:f8:76:ad:2f:00:a5:84:87:ef:
         74:ed:1f:1b:70:4a:c4:79:e5:2e:30:62:ad:c5:54:2b:4c:96:
         39:31:17:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlDQTgxMTAvBgNVBAUTKEQ2OTYxQURBOENENTc3Q0MzM0Q3MUE5QTJEQzgxQjBD
MTkyNUFDOTgwHhcNMjYwNDE3MDIxOTAxWhcNMjYwNDI0MDIxOTAxWjAYMRYwFAYD
VQQDEw02OWUxOTg5NS0yMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwSHXiBgL+irXMrmTaxoRIZ1J1Qu4a2VTXdDwgb/T+OdlRuLCeWvfJ7uVL8V
nnM3Kg2WZWOQA+qiXtqnbC+W2qwTEyB2MHPCsY+vvsnOAFs9CnhlegyQY6cACnBn
iaXd8WFc5kAZVkCihWdOnFABl0tOdMDo4YGPcnejuqqNYfMsC3BITG5UdJwGHEpI
GKJdQhivlF2bnf5ErTQWN/tUfyh5T8RjvbgWCKV9SrhJxLygAYVa3nCF1fRjh9Sx
D9TzuhG9r8fsG3Y+CVBKMa6doYOwg9qwcoMGLBgYzk5/CRrY9Kq++nsOGBOXRAeY
GhlRaWKBSfSAw+RNIIJDp7nvawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFaRWoNi
waisbdTnFPCA8O8T5qRuMB8GA1UdIwQYMBaAFNaWGtqM1XfMM9cami3IGwwZJayY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBOC8wNTY2MDkyNkQ0
NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4d3oxeHFhTGNnYkRCa2xy
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFwWWEyb3pWZDh3ejF4cWFMY2diREJrbHJKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUNBOC8wNTY2MDkyNkQ0NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4
d3oxeHFhTGNnYkRCa2xySmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALdfHphtTOyMw+ifPqB/tR3y4+88rQ07TIswOgL/wQZgjjmk3n8VFFg7k0iu2
TPqL4IPzqugYrH73x2RucP7eVFhgHLBz5AcdI49BxFi2m8k6ApKaAYILO/tkT2IZ
v93q9RZRlL7gVQy/+9lOoadMrESWHOwBfdDCMPgA8HmKQ1PEWUglJen3LlUWb0Vq
Qhs2tEOSlgr/Z3WC8/npkqwmFaXLlmCuV2jSOe2noiFWMvf2j87ECNfkm5PaPskK
HDNL9t/V/v/fWlfhjo6lGfngm3x7gntBTWd4h2u3yeKQVSxc+HatLwClhIfvdO0f
G3BKxHnlLjBircVUK0yWOTEXeA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:06 2026 by rpki-client