Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
File:                     PS2TrIsQhlgX2adMyBoDDX010HQ.mft (raw, json)
Hash identifier:          +SAMvV6ld99tHzt/GubE2Vnn+YvI/WbPj+XhTXeC2w8=
Subject key identifier:   81:3E:BC:73:A2:E0:67:30:1D:42:44:59:E4:82:9F:BA:B0:80:A2:74
Authority key identifier: 3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74
Certificate issuer:       /CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
Manifest number:          01C9
Signing time:             Wed 15 Apr 2026 03:20:24 +0000
Manifest this update:     Wed 15 Apr 2026 03:20:23 +0000
Manifest next update:     Wed 22 Apr 2026 03:20:23 +0000
Files and hashes:         1: PS2TrIsQhlgX2adMyBoDDX010HQ.crl (hash: CUdPOLfyiGcudi71J6+EAK0yE7KWyFafpBlLAiiU3MA=)
                          2: C8BDA37CF68A11EFB7F91E24C4F9AE02.roa (hash: zfGF7KOCQQRDY2l23rBtYS3NirQreMdPDlzYfVapP6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl
                          rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 03:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D9E, serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074
        Validity
            Not Before: Apr 15 03:20:23 2026 GMT
            Not After : Apr 22 03:20:23 2026 GMT
        Subject: CN=69df03f8-96a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:06:2f:ab:d8:02:f9:d4:eb:f0:8b:c5:a6:
                    6c:61:a2:f4:6f:d5:61:27:14:f6:d8:8e:ca:f4:93:
                    62:e4:4f:6a:72:c1:30:03:87:b2:1d:09:7f:6c:5f:
                    c5:6d:12:9c:cd:51:14:97:a9:f0:cd:c4:e6:61:b4:
                    46:4d:b1:39:43:17:04:26:03:00:2f:d0:19:bc:09:
                    ee:59:c8:40:dc:60:8c:75:69:ba:4d:fa:17:5b:ad:
                    9f:f1:d2:43:a7:72:6a:b0:0d:ee:77:75:46:9c:a9:
                    33:13:14:7c:31:b6:87:3c:d0:fa:21:d8:eb:f8:06:
                    b1:6b:4f:15:24:71:59:51:db:90:a7:8f:ea:fb:e2:
                    77:27:e9:8b:25:da:ea:67:7f:fc:2a:ab:6e:83:9e:
                    83:e1:d7:ce:5f:19:af:4f:72:77:46:5d:00:b7:38:
                    50:e2:01:2a:49:6e:cf:86:7c:b6:c8:c1:08:c3:4b:
                    8a:3f:da:53:7b:28:69:8d:d8:72:14:c5:25:4a:d6:
                    7e:1d:69:45:d0:18:20:c2:e4:8b:d9:e8:4b:a8:5d:
                    76:af:ba:a6:b5:2e:0e:82:d8:5d:34:84:69:de:d4:
                    e3:16:97:e9:9e:ea:37:0b:41:7e:08:4d:2d:c6:53:
                    ae:5c:6c:a7:13:10:5e:c9:16:f7:61:de:3c:32:89:
                    88:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3E:BC:73:A2:E0:67:30:1D:42:44:59:E4:82:9F:BA:B0:80:A2:74
            X509v3 Authority Key Identifier:
                keyid:3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:cc:0a:03:ec:34:f5:9f:af:51:11:10:4e:95:1f:3e:2d:dd:
         df:c1:15:21:1e:7c:7f:87:36:70:55:23:32:bd:42:e3:e0:90:
         fe:eb:b1:de:11:d0:23:17:f2:34:f6:f5:cf:56:25:31:1d:d7:
         0b:e4:eb:62:66:96:c4:66:70:8c:08:86:4f:41:42:bc:b2:a3:
         fd:59:0b:d3:25:9d:1c:d6:53:9d:fe:53:34:ce:b0:eb:da:eb:
         5b:62:68:17:ba:c3:60:d5:a7:e8:91:d5:53:f4:ff:4f:71:a4:
         3d:4d:70:11:24:e9:32:14:07:ee:b3:2c:06:6f:f2:57:cf:67:
         59:0b:ab:f9:ff:98:34:e5:8d:30:59:a8:b1:b9:e3:df:06:dd:
         c9:54:a5:f0:d3:f2:60:26:e8:34:47:07:cc:19:5c:b6:43:46:
         25:1a:40:b6:af:3c:1b:d0:fb:a4:aa:de:fd:e7:b8:6e:99:67:
         5a:eb:d2:60:37:22:8f:3c:4f:c0:45:eb:60:53:83:9c:76:e3:
         ac:8c:19:89:75:6b:4a:b2:17:6e:75:65:d1:8a:0e:91:18:69:
         3e:18:a8:dc:e5:76:86:89:5c:ef:a0:e2:e9:3f:43:5a:c4:56:
         6e:b1:63:15:0c:30:b5:9f:59:59:2c:c3:04:73:88:fd:b3:ae:
         98:8b:df:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZEOUUxMTAvBgNVBAUTKDNEMkQ5M0FDOEIxMDg2NTgxN0Q5QTc0Q0M4MUEwMzBE
N0QzNUQwNzQwHhcNMjYwNDE1MDMyMDIzWhcNMjYwNDIyMDMyMDIzWjAYMRYwFAYD
VQQDEw02OWRmMDNmOC05NmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq7AGL6vYAvnU6/CLxaZsYaL0b9VhJxT22I7K9JNi5E9qcsEwA4eyHQl/bF/F
bRKczVEUl6nwzcTmYbRGTbE5QxcEJgMAL9AZvAnuWchA3GCMdWm6TfoXW62f8dJD
p3JqsA3ud3VGnKkzExR8MbaHPND6Idjr+Aaxa08VJHFZUduQp4/q++J3J+mLJdrq
Z3/8Kqtug56D4dfOXxmvT3J3Rl0AtzhQ4gEqSW7Phny2yMEIw0uKP9pTeyhpjdhy
FMUlStZ+HWlF0BggwuSL2ehLqF12r7qmtS4OgthdNIRp3tTjFpfpnuo3C0F+CE0t
xlOuXGynExBeyRb3Yd48MomIJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIE+vHOi
4GcwHUJEWeSCn7qwgKJ0MB8GA1UdIwQYMBaAFD0tk6yLEIZYF9mnTMgaAw19NdB0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQ5RS83N0JCOTg0QzdE
NjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhsZ1gyYWRNeUJvRERYMDEw
SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BTMlRySXNRaGxnWDJhZE15Qm9ERFgwMTBIUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkQ5RS83N0JCOTg0QzdENjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhs
Z1gyYWRNeUJvRERYMDEwSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqcwKA+w09Z+vUREQTpUfPi3d38EVIR58f4c2cFUjMr1C4+CQ/uux3hHQIxfy
NPb1z1YlMR3XC+TrYmaWxGZwjAiGT0FCvLKj/VkL0yWdHNZTnf5TNM6w69rrW2Jo
F7rDYNWn6JHVU/T/T3GkPU1wESTpMhQH7rMsBm/yV89nWQur+f+YNOWNMFmosbnj
3wbdyVSl8NPyYCboNEcHzBlctkNGJRpAtq88G9D7pKre/ee4bplnWuvSYDcijzxP
wEXrYFODnHbjrIwZiXVrSrIXbnVl0YoOkRhpPhio3OV2holc76Di6T9DWsRWbrFj
FQwwtZ9ZWSzDBHOI/bOumIvfbg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:21:08 2026 by rpki-client