Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
File:                     Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft (raw, json)
Hash identifier:          NWNf5iLQV1YAopWphqiLr8egooY3yNaVef4wwIyIvQ4=
Subject key identifier:   FC:01:93:F1:91:88:AC:9D:CC:14:EC:D1:22:2F:32:16:D2:04:C8:E6
Authority key identifier: 46:0F:6A:FE:69:CF:A8:9C:CF:D6:01:0F:E2:BA:4F:9E:21:F7:BE:73
Certificate issuer:       /CN=A91CCE09/serialNumber=460F6AFE69CFA89CCFD6010FE2BA4F9E21F7BE73
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
Manifest number:          20
Signing time:             Fri 17 Apr 2026 08:36:17 +0000
Manifest this update:     Fri 17 Apr 2026 08:36:17 +0000
Manifest next update:     Fri 24 Apr 2026 08:36:17 +0000
Files and hashes:         1: Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl (hash: 2ieCfd5TeYEElXJvgfAum6nWYGMwP5UybLxO9Q0Ietc=)
                          2: 5396275C112A11F1ADC700F81B3D8C67.roa (hash: wxsoV6n9bNMMjGcsLAWPPKxBCyMgY8xWZ0QUFwcjolY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl
                          rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCE09, serialNumber=460F6AFE69CFA89CCFD6010FE2BA4F9E21F7BE73
        Validity
            Not Before: Apr 17 08:36:17 2026 GMT
            Not After : Apr 24 08:36:17 2026 GMT
        Subject: CN=69e1f101-f521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:31:73:e7:1e:51:8f:dd:d7:50:ac:80:75:4e:
                    74:70:b1:3a:0f:e0:b7:55:f6:9f:04:ac:0f:3a:53:
                    66:bf:c6:9f:53:ac:41:dc:79:93:41:bb:c0:33:1b:
                    b3:2c:f8:8b:0a:00:19:ea:b3:e0:c1:ac:af:44:a2:
                    1f:3f:7a:92:1a:fd:4c:21:e8:c9:af:56:de:be:51:
                    b8:a4:6a:f8:1c:16:89:76:bc:e6:60:d7:ea:5a:75:
                    e7:5a:3d:d8:d2:3d:b2:b8:4c:1c:fb:6b:7a:c3:d4:
                    10:78:2a:ec:3f:2d:6f:95:fd:bb:f8:cd:6f:43:05:
                    ce:da:b8:c1:98:e7:dd:64:1e:a1:c1:a7:71:ec:86:
                    17:3c:13:e7:a4:46:83:d4:08:bc:6e:b0:9a:a0:ba:
                    44:fa:f5:19:73:30:43:54:0b:aa:54:ce:a9:7f:60:
                    84:a6:62:94:15:d2:09:1b:71:73:e8:ad:37:95:3a:
                    78:1d:53:62:40:94:19:68:a3:59:84:3e:8b:60:86:
                    e2:29:e3:c3:35:52:85:1d:5d:5a:70:e9:f1:05:6f:
                    a6:8c:ea:a8:11:cd:c5:d7:77:4e:3e:f0:ee:31:6d:
                    4d:84:d0:c1:3f:80:ed:e9:4e:64:85:07:9d:e6:71:
                    bd:d1:fb:01:08:4a:fb:df:09:be:8c:40:50:3f:37:
                    cc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:01:93:F1:91:88:AC:9D:CC:14:EC:D1:22:2F:32:16:D2:04:C8:E6
            X509v3 Authority Key Identifier:
                keyid:46:0F:6A:FE:69:CF:A8:9C:CF:D6:01:0F:E2:BA:4F:9E:21:F7:BE:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg9q_mnPqJzP1gEP4rpPniH3vnM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE09/4928B10A112911F1B64BF8BC1B3D8C67/Rg9q_mnPqJzP1gEP4rpPniH3vnM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:50:dd:2a:f6:37:ad:bd:b2:5b:68:18:03:7c:02:d3:10:46:
         bb:99:64:50:17:b3:f2:f1:32:97:a7:2c:3a:a6:08:1d:2c:65:
         c5:46:3d:5e:5d:33:05:63:72:26:24:82:45:be:b1:bf:0a:41:
         10:be:19:2b:d6:ce:ed:9b:a3:a7:a9:1f:c7:9b:7a:65:1b:99:
         ab:f3:26:cf:64:9a:51:87:9b:d9:db:d9:b0:73:40:21:df:97:
         a4:0d:5d:08:b1:c3:e8:ff:ca:cd:6b:d9:6a:93:05:c3:64:51:
         60:0d:18:45:bb:80:0f:b9:b2:32:7c:64:c8:23:ac:3c:8a:80:
         0c:7a:3a:fc:b5:42:84:23:0b:72:d5:d6:52:c0:61:2f:4e:b4:
         8e:20:83:15:33:a2:e3:b2:e2:98:6a:ef:97:4d:01:1c:53:39:
         28:28:09:43:5e:b2:95:67:be:09:e4:3d:22:4b:2c:9d:ee:f4:
         f3:b3:d7:d3:8a:36:3f:1a:8a:5c:10:64:7c:d2:66:17:e0:20:
         c9:63:06:79:97:cd:ee:26:8e:3b:63:17:31:c0:09:6d:1b:c7:
         93:a1:ce:ae:0a:a8:7b:23:ff:de:c3:34:a6:0a:f2:89:4b:2c:
         30:9b:e5:06:60:a6:04:76:9b:73:70:a7:ab:19:c5:68:15:76:
         fe:e4:2b:d1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
Q0UwOTExMC8GA1UEBRMoNDYwRjZBRkU2OUNGQTg5Q0NGRDYwMTBGRTJCQTRGOUUy
MUY3QkU3MzAeFw0yNjA0MTcwODM2MTdaFw0yNjA0MjQwODM2MTdaMBgxFjAUBgNV
BAMTDTY5ZTFmMTAxLWY1MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9MXPnHlGP3ddQrIB1TnRwsToP4LdV9p8ErA86U2a/xp9TrEHceZNBu8AzG7Ms
+IsKABnqs+DBrK9Eoh8/epIa/Uwh6MmvVt6+UbikavgcFol2vOZg1+padedaPdjS
PbK4TBz7a3rD1BB4Kuw/LW+V/bv4zW9DBc7auMGY591kHqHBp3Hshhc8E+ekRoPU
CLxusJqgukT69RlzMENUC6pUzql/YISmYpQV0gkbcXPorTeVOngdU2JAlBloo1mE
PotghuIp48M1UoUdXVpw6fEFb6aM6qgRzcXXd04+8O4xbU2E0ME/gO3pTmSFB53m
cb3R+wEISvvfCb6MQFA/N8xHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/AGT8ZGI
rJ3MFOzRIi8yFtIEyOYwHwYDVR0jBBgwFoAURg9q/mnPqJzP1gEP4rpPniH3vnMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDRTA5LzQ5MjhCMTBBMTEy
OTExRjFCNjRCRjhCQzFCM0Q4QzY3L1JnOXFfbW5QcUp6UDFnRVA0cnBQbmlIM3Zu
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUmc5cV9tblBxSnpQMWdFUDRycFBuaUgzdm5NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND
RTA5LzQ5MjhCMTBBMTEyOTExRjFCNjRCRjhCQzFCM0Q4QzY3L1JnOXFfbW5QcUp6
UDFnRVA0cnBQbmlIM3ZuTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBbUN0q9jetvbJbaBgDfALTEEa7mWRQF7Py8TKXpyw6pggdLGXFRj1eXTMFY3Im
JIJFvrG/CkEQvhkr1s7tm6OnqR/Hm3plG5mr8ybPZJpRh5vZ29mwc0Ah35ekDV0I
scPo/8rNa9lqkwXDZFFgDRhFu4APubIyfGTII6w8ioAMejr8tUKEIwty1dZSwGEv
TrSOIIMVM6LjsuKYau+XTQEcUzkoKAlDXrKVZ74J5D0iSyyd7vTzs9fTijY/Gopc
EGR80mYX4CDJYwZ5l83uJo47YxcxwAltG8eToc6uCqh7I//ewzSmCvKJSywwm+UG
YKYEdptzcKerGcVoFXb+5CvR
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:34:30 2026 by rpki-client