Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft
File:                     9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft (raw, json)
Hash identifier:          0g/9i7Pj5BNKrBzt/Dgqd0ya+mlt3FGN7vVQMNJfmkk=
Subject key identifier:   49:1E:82:DC:F6:BD:DA:B8:62:A2:CF:05:F4:60:D1:1C:87:07:14:FF
Authority key identifier: F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4
Certificate issuer:       /CN=A919834A/serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4
Certificate serial:       1A9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft
Manifest number:          1A5C
Signing time:             Thu 16 Apr 2026 16:17:52 +0000
Manifest this update:     Thu 16 Apr 2026 16:17:52 +0000
Manifest next update:     Thu 23 Apr 2026 16:17:52 +0000
Files and hashes:         1: 9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl (hash: nXqPC2LfWI/zA3Ux0eYO6vANpLFgsR4Z67aHhsDEZ9Q=)
                          2: 48EE1EC6A80311EBA56CEC52C4F9AE02.roa (hash: kwgKh0oIcd7aU/3K+fYEn2O6hHR9NFe0BcHgoefOH/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl
                          rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6814 (0x1a9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919834A, serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4
        Validity
            Not Before: Apr 16 16:17:52 2026 GMT
            Not After : Apr 23 16:17:52 2026 GMT
        Subject: CN=69e10bb0-180c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:23:04:87:ab:dc:1b:2f:94:af:b4:23:5d:e2:
                    b5:36:c7:e2:ad:cf:25:19:ff:fa:6e:a9:bc:c4:aa:
                    1b:97:86:b8:d6:f2:81:cc:b8:eb:7f:04:a7:25:23:
                    70:c1:66:27:c0:f3:e8:97:51:d8:ed:6f:e3:8e:7f:
                    79:7a:19:be:55:a1:60:ce:be:c3:27:fc:3e:cb:df:
                    0b:9d:50:58:fe:27:c3:15:3b:84:6c:ed:b2:5b:26:
                    2a:fe:58:7c:31:53:c8:c7:8b:af:63:12:6e:09:80:
                    02:b6:6a:cf:ad:ea:65:95:bf:95:ac:3c:c9:40:48:
                    82:3a:a9:cc:90:94:28:e6:73:95:ee:33:ad:96:fe:
                    48:e8:cc:dd:dc:52:eb:a6:88:6c:b4:af:e4:2e:57:
                    3d:68:45:44:fe:c1:b9:29:9a:5f:5e:6f:9e:2f:bc:
                    05:7a:1e:2f:4b:ca:7b:16:b5:b8:51:e3:1b:01:25:
                    a3:61:d2:1f:8b:e0:93:7c:98:0f:34:5d:92:c4:7b:
                    33:15:fc:15:c9:7f:f0:c2:5e:d2:97:b3:25:16:37:
                    13:f7:07:5f:82:d2:58:af:f0:5e:67:f8:f9:ed:07:
                    73:6f:fb:99:98:1f:28:11:ff:c1:e6:cd:ff:cd:a8:
                    1f:44:f5:71:e8:b6:3e:42:99:d0:a7:f8:cd:dd:f8:
                    4f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1E:82:DC:F6:BD:DA:B8:62:A2:CF:05:F4:60:D1:1C:87:07:14:FF
            X509v3 Authority Key Identifier:
                keyid:F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:14:56:e7:eb:74:c9:be:06:ea:bf:3e:8f:a1:75:0a:bb:6c:
         d7:60:c5:cb:00:9e:4b:8a:3f:8a:b4:a9:e1:37:8a:03:81:e7:
         9d:18:4e:d8:30:8f:d4:ba:a8:72:38:04:61:c2:ba:ac:4b:f8:
         ed:e5:f0:a0:5a:0c:9c:73:8c:64:7a:91:15:e3:0d:49:48:92:
         66:8c:51:d3:d0:d1:25:48:f2:97:a9:27:b0:db:d6:8b:24:49:
         05:73:6f:49:a5:08:00:16:b0:a0:8b:54:da:46:4e:67:e1:c1:
         11:de:c7:f6:9d:57:75:52:39:a0:0b:27:34:8f:08:f0:75:7b:
         d8:11:39:59:52:45:cf:47:65:ff:b7:c2:5d:a5:c1:86:1e:ef:
         dd:cc:a6:14:19:87:91:03:d6:23:23:13:a9:57:22:7c:07:86:
         55:af:24:62:53:61:87:6f:f6:cf:5c:e0:98:8e:aa:a3:b3:73:
         6b:71:de:29:13:76:bd:23:99:60:d5:99:a6:95:d3:5c:d5:11:
         fe:48:8e:46:de:b6:be:b2:ea:1b:35:8f:b6:24:f3:c7:d5:80:
         0f:9e:5b:6b:f9:cb:6e:b9:e1:3c:f8:b1:49:0a:95:cb:6f:f8:
         74:0b:f9:b1:f7:ab:e7:a1:69:b2:b6:b8:b8:8a:26:1b:64:06:
         2b:36:6a:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgzNEExMTAvBgNVBAUTKEY2MjVENkJGQ0Q0MjFCRDNEQjk3QzY5NTk0MTRCQzcw
OTQ2RUFCQzQwHhcNMjYwNDE2MTYxNzUyWhcNMjYwNDIzMTYxNzUyWjAYMRYwFAYD
VQQDEw02OWUxMGJiMC0xODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjiMEh6vcGy+Ur7QjXeK1Nsfirc8lGf/6bqm8xKobl4a41vKBzLjrfwSnJSNw
wWYnwPPol1HY7W/jjn95ehm+VaFgzr7DJ/w+y98LnVBY/ifDFTuEbO2yWyYq/lh8
MVPIx4uvYxJuCYACtmrPrepllb+VrDzJQEiCOqnMkJQo5nOV7jOtlv5I6Mzd3FLr
pohstK/kLlc9aEVE/sG5KZpfXm+eL7wFeh4vS8p7FrW4UeMbASWjYdIfi+CTfJgP
NF2SxHszFfwVyX/wwl7Sl7MlFjcT9wdfgtJYr/BeZ/j57Qdzb/uZmB8oEf/B5s3/
zagfRPVx6LY+QpnQp/jN3fhPYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkegtz2
vdq4YqLPBfRg0RyHBxT/MB8GA1UdIwQYMBaAFPYl1r/NQhvT25fGlZQUvHCUbqvE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODM0QS8yQzA0NzQ3NDZF
MzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5UGJsOGFWbEJTOGNKUnVx
OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlpWFd2ODFDRzlQYmw4YVZsQlM4Y0pSdXE4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODM0QS8yQzA0NzQ3NDZFMzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5
UGJsOGFWbEJTOGNKUnVxOFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXBRW5+t0yb4G6r8+j6F1Crts12DFywCeS4o/irSp4TeKA4HnnRhO2DCP1Lqo
cjgEYcK6rEv47eXwoFoMnHOMZHqRFeMNSUiSZoxR09DRJUjyl6knsNvWiyRJBXNv
SaUIABawoItU2kZOZ+HBEd7H9p1XdVI5oAsnNI8I8HV72BE5WVJFz0dl/7fCXaXB
hh7v3cymFBmHkQPWIyMTqVcifAeGVa8kYlNhh2/2z1zgmI6qo7Nza3HeKRN2vSOZ
YNWZppXTXNUR/kiORt62vrLqGzWPtiTzx9WAD55ba/nLbrnhPPixSQqVy2/4dAv5
sfer56Fpsra4uIomG2QGKzZq4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:10 2026 by rpki-client