Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
File:                     l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json)
Hash identifier:          sLs8+s7AV1X8jqZNiFIH5WwSQuPSKXTZzSurWmzINNA=
Subject key identifier:   82:31:8A:20:45:4E:2B:93:F7:CA:26:74:4E:2A:44:75:1C:F4:00:8E
Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
Certificate issuer:       /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
Manifest number:          01CA
Signing time:             Sat 13 Jun 2026 03:43:08 +0000
Manifest this update:     Sat 13 Jun 2026 03:43:08 +0000
Manifest next update:     Sat 20 Jun 2026 03:43:08 +0000
Files and hashes:         1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: Cdk74MTZnhJLaCVYnaGOVLmtTwLnwn49yUG0l2RlbDA=)
                          2: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: QyH6dxXjokhnXxiQxLvd1TdbejtHEOfwUUHqYEjI6K8=)
                          3: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: +LlWfDPiKDdUCs+xHkkWz7phXd+8+cijStN/OwLrfmY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
                          rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
        Validity
            Not Before: Jun 13 03:43:08 2026 GMT
            Not After : Jun 20 03:43:08 2026 GMT
        Subject: CN=6a2cd1cc-ff90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:13:9d:3c:dc:b6:44:98:2c:ed:48:7c:d6:
                    bd:55:43:af:52:09:ef:75:44:4a:6a:50:5d:1c:4f:
                    63:88:a7:d2:2c:82:a1:07:64:74:5a:27:e9:dd:c9:
                    5d:59:7e:6e:19:85:23:b1:36:0b:e6:db:1e:d5:a0:
                    64:32:ad:9a:e5:c0:f5:7c:89:dd:08:e1:ee:4f:63:
                    94:01:39:d6:51:2c:bf:fe:0b:e9:4d:88:5f:3e:f2:
                    dd:32:1d:e4:8f:2a:d1:81:49:50:76:59:fa:9b:81:
                    a6:ff:3d:41:e6:57:90:e7:2e:da:9c:cc:39:8c:32:
                    ce:9a:77:1a:5c:f6:36:25:b1:0c:15:f7:82:95:65:
                    91:a4:8e:4a:a6:5b:64:df:55:59:ff:7c:bf:0b:8c:
                    79:ba:3e:50:ad:81:de:5c:aa:05:9c:7c:2e:4b:cf:
                    b1:47:0a:a8:91:1c:61:cd:7a:bf:47:2e:5a:c3:82:
                    03:59:6c:bf:c2:a3:b7:a7:f4:3c:9e:be:b2:ed:46:
                    3c:da:85:72:81:93:11:62:0f:fd:06:17:94:ad:d5:
                    60:de:af:2b:56:ab:cb:ee:28:ca:33:52:1a:4d:be:
                    2f:d9:23:7b:0a:f9:38:c1:b7:5e:4a:b5:12:63:35:
                    91:98:7f:92:c0:90:33:2f:e6:81:65:44:80:ef:f8:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:31:8A:20:45:4E:2B:93:F7:CA:26:74:4E:2A:44:75:1C:F4:00:8E
            X509v3 Authority Key Identifier:
                keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5f:fc:5e:be:c3:74:c1:e9:a7:a7:f9:22:80:0b:9b:c3:94:
         fb:80:30:ec:5f:88:60:99:93:fe:e1:64:a9:8f:93:f0:bc:e1:
         4b:d8:79:9a:e9:d5:cc:5e:b0:e7:f1:e2:90:2c:89:31:c5:8c:
         d2:04:18:cf:02:40:98:af:49:71:46:26:6f:1f:c0:08:0f:20:
         39:d5:99:88:70:15:76:5e:8b:3c:7c:da:e1:a5:d5:d9:70:3d:
         20:6d:5b:2d:f8:9a:ab:db:9b:9a:a9:1d:45:84:83:cf:ea:88:
         e8:33:96:62:ff:6c:e1:22:bd:31:75:28:79:8a:49:7e:be:9e:
         61:d8:ea:0b:b3:ab:cf:9f:45:6c:83:77:a3:73:50:31:a4:2a:
         dd:93:1f:c0:d4:12:b1:ce:37:72:91:02:38:7d:0b:1b:f3:52:
         80:5b:ab:09:5f:02:50:2c:5b:9e:f2:19:c1:a9:06:6e:99:b2:
         e7:79:c2:27:dd:05:09:0a:03:66:ce:60:92:93:1e:23:21:04:
         55:1f:e3:eb:29:3b:4e:87:b8:0e:a8:53:d7:36:d1:7b:75:31:
         a3:1f:fe:92:83:1b:10:8a:c5:50:ea:83:9c:2a:91:05:d8:81:
         fb:0a:30:eb:1f:bd:55:10:23:11:d8:5a:43:f6:fc:de:79:c8:
         06:8b:8e:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw
Q0UwQzI5RkEwHhcNMjYwNjEzMDM0MzA4WhcNMjYwNjIwMDM0MzA4WjAYMRYwFAYD
VQQDEw02YTJjZDFjYy1mZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwFATnTzctkSYLO1IfNa9VUOvUgnvdURKalBdHE9jiKfSLIKhB2R0Wifp3cld
WX5uGYUjsTYL5tse1aBkMq2a5cD1fIndCOHuT2OUATnWUSy//gvpTYhfPvLdMh3k
jyrRgUlQdln6m4Gm/z1B5leQ5y7anMw5jDLOmncaXPY2JbEMFfeClWWRpI5Kpltk
31VZ/3y/C4x5uj5QrYHeXKoFnHwuS8+xRwqokRxhzXq/Ry5aw4IDWWy/wqO3p/Q8
nr6y7UY82oVygZMRYg/9BheUrdVg3q8rVqvL7ijKM1IaTb4v2SN7Cvk4wbdeSrUS
YzWRmH+SwJAzL+aBZUSA7/i86wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIIxiiBF
TiuT98omdE4qRHUc9ACOMB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC
NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU
MzVaUzlidGlTT1FNNE1LZm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhl/8Xr7DdMHpp6f5IoALm8OU+4Aw7F+IYJmT/uFkqY+T8LzhS9h5munVzF6w
5/HikCyJMcWM0gQYzwJAmK9JcUYmbx/ACA8gOdWZiHAVdl6LPHza4aXV2XA9IG1b
Lfiaq9ubmqkdRYSDz+qI6DOWYv9s4SK9MXUoeYpJfr6eYdjqC7Orz59FbIN3o3NQ
MaQq3ZMfwNQSsc43cpECOH0LG/NSgFurCV8CUCxbnvIZwakGbpmy53nCJ90FCQoD
Zs5gkpMeIyEEVR/j6yk7Toe4DqhT1zbRe3Uxox/+koMbEIrFUOqDnCqRBdiB+wow
6x+9VRAjEdhaQ/b83nnIBouO9A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:50:36 2026 by rpki-client