Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft
File:                     a1eqjwdnrM-oLNKqaesREse3fPw.mft (raw, json)
Hash identifier:          Ud7xUjn5kl+IxdOUlLK4bGxTthaBrs+7wrDc/Jpkj8M=
Subject key identifier:   18:AE:53:F4:E2:50:25:D9:D9:59:A1:58:46:4C:4D:69:B2:19:A8:38
Authority key identifier: 6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC
Certificate issuer:       /CN=A917EC30/serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft
Manifest number:          9A
Signing time:             Wed 15 Apr 2026 07:00:22 +0000
Manifest this update:     Wed 15 Apr 2026 07:00:21 +0000
Manifest next update:     Wed 22 Apr 2026 07:00:21 +0000
Files and hashes:         1: a1eqjwdnrM-oLNKqaesREse3fPw.crl (hash: tvC6vKL2KeXSs3DecYEJnKZVSJpyFHf29Jg+3GumZec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl
                          rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EC30, serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC
        Validity
            Not Before: Apr 15 07:00:21 2026 GMT
            Not After : Apr 22 07:00:21 2026 GMT
        Subject: CN=69df3786-fb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:5a:25:07:f9:a5:80:58:7d:cb:61:c7:64:
                    88:66:7b:7f:28:c7:c5:69:e5:70:ac:5c:95:42:0d:
                    90:5d:02:28:6c:99:9c:71:25:ba:30:33:e5:cc:b3:
                    25:37:83:f0:c3:f7:4a:8a:9d:08:6d:45:15:7a:6e:
                    ac:85:d7:e5:c7:6d:61:e3:4c:ea:aa:45:1b:13:5b:
                    4a:e1:43:e1:16:2c:c3:7d:2e:13:30:40:ad:c7:99:
                    e7:12:f6:2a:c4:62:b3:21:c0:b1:c3:b3:04:e5:92:
                    4f:98:68:d8:b2:17:54:96:af:81:75:2c:51:86:04:
                    bb:a1:a8:6d:1d:fd:6f:a1:50:f4:bb:f4:af:57:c4:
                    95:e4:4f:be:d6:82:2b:f6:1a:09:fd:cc:9a:d4:a0:
                    83:32:fa:52:69:ca:2b:58:4e:cc:e0:bf:86:1a:f6:
                    0b:89:4a:7b:65:2c:72:45:88:b6:ff:8f:63:17:f7:
                    9d:b4:96:c0:ca:26:3a:26:be:cd:3c:56:6e:6f:09:
                    d2:08:49:74:ab:ff:1d:3a:ba:24:a5:b8:87:57:92:
                    24:00:79:a9:72:ac:09:08:fd:87:eb:f2:aa:01:d3:
                    f6:06:9a:f3:7c:23:ca:90:81:f7:6c:91:89:84:94:
                    5e:a9:2a:8c:c0:8a:02:0c:7d:ac:8a:42:f1:60:fe:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AE:53:F4:E2:50:25:D9:D9:59:A1:58:46:4C:4D:69:B2:19:A8:38
            X509v3 Authority Key Identifier:
                keyid:6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f2:33:a9:3a:33:e0:c9:85:58:0b:b3:4d:25:f4:d0:8d:d8:
         77:51:27:05:28:ce:94:d0:cc:1f:be:19:7f:1b:b3:2e:7e:07:
         9b:6d:06:89:3a:cf:bd:2d:13:2c:b5:2f:08:0e:64:37:42:25:
         9d:ba:2a:7d:f3:13:c7:ce:de:1d:6e:40:73:53:de:d9:86:83:
         df:a9:c1:9a:5b:d8:fe:29:45:df:2e:13:1d:a1:54:67:22:95:
         89:8e:50:4c:1c:d6:84:0c:a2:2a:17:36:56:58:47:a8:65:f6:
         46:6e:1f:4d:62:ec:5b:0a:48:53:02:9b:0f:09:35:d0:b9:8d:
         26:a7:2d:96:9a:e0:b3:7f:39:d7:55:9d:9c:27:b7:24:76:0d:
         c7:4b:1c:8f:69:7d:7d:03:f8:78:db:5c:2e:2a:b1:50:fb:0c:
         b8:44:8d:c6:97:85:f3:7a:01:cc:d0:7a:8e:db:82:3b:03:51:
         e6:17:cb:34:93:78:cb:84:67:f1:86:0a:bf:10:58:c6:ff:af:
         26:44:db:51:91:9b:b2:c2:9c:66:f4:13:68:20:20:f9:ca:2b:
         3d:27:2d:f9:48:d5:d3:21:36:d5:c8:64:8d:6d:91:95:05:f9:
         ba:a9:87:13:b3:c2:a2:66:ea:27:bc:78:79:93:c2:3e:dd:e1:
         cf:d8:3b:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VDMzAxMTAvBgNVBAUTKDZCNTdBQThGMDc2N0FDQ0ZBODJDRDJBQTY5RUIxMTEy
QzdCNzdDRkMwHhcNMjYwNDE1MDcwMDIxWhcNMjYwNDIyMDcwMDIxWjAYMRYwFAYD
VQQDEw02OWRmMzc4Ni1mYjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Q1aJQf5pYBYfcthx2SIZnt/KMfFaeVwrFyVQg2QXQIobJmccSW6MDPlzLMl
N4Pww/dKip0IbUUVem6shdflx21h40zqqkUbE1tK4UPhFizDfS4TMECtx5nnEvYq
xGKzIcCxw7ME5ZJPmGjYshdUlq+BdSxRhgS7oahtHf1voVD0u/SvV8SV5E++1oIr
9hoJ/cya1KCDMvpSacorWE7M4L+GGvYLiUp7ZSxyRYi2/49jF/edtJbAyiY6Jr7N
PFZubwnSCEl0q/8dOrokpbiHV5IkAHmpcqwJCP2H6/KqAdP2BprzfCPKkIH3bJGJ
hJReqSqMwIoCDH2sikLxYP6egQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBiuU/Ti
UCXZ2VmhWEZMTWmyGag4MB8GA1UdIwQYMBaAFGtXqo8HZ6zPqCzSqmnrERLHt3z8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUMzMC82M0NENkVDNDU3
M0UxMUYwQkIyN0ZCODRDNEY5QUUwMi9hMWVxandkbnJNLW9MTktxYWVzUkVzZTNm
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ExZXFqd2Ruck0tb0xOS3FhZXNSRXNlM2ZQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUMzMC82M0NENkVDNDU3M0UxMUYwQkIyN0ZCODRDNEY5QUUwMi9hMWVxandkbnJN
LW9MTktxYWVzUkVzZTNmUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGPIzqToz4MmFWAuzTSX00I3Yd1EnBSjOlNDMH74ZfxuzLn4Hm20GiTrPvS0T
LLUvCA5kN0IlnboqffMTx87eHW5Ac1Pe2YaD36nBmlvY/ilF3y4THaFUZyKViY5Q
TBzWhAyiKhc2VlhHqGX2Rm4fTWLsWwpIUwKbDwk10LmNJqctlprgs38511WdnCe3
JHYNx0scj2l9fQP4eNtcLiqxUPsMuESNxpeF83oBzNB6jtuCOwNR5hfLNJN4y4Rn
8YYKvxBYxv+vJkTbUZGbssKcZvQTaCAg+corPSct+UjV0yE21chkjW2RlQX5uqmH
E7PCombqJ7x4eZPCPt3hz9g71Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:54 2026 by rpki-client