Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
File:                     ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json)
Hash identifier:          SsewV5l749ILkTJkfIz55behYTcbaErwS19sVVogDVM=
Subject key identifier:   88:00:FB:5A:34:7E:D0:2C:4C:03:7A:A8:50:7D:93:F0:C7:72:27:77
Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94
Certificate issuer:       /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
Manifest number:          01E6
Signing time:             Wed 13 May 2026 03:29:38 +0000
Manifest this update:     Wed 13 May 2026 03:29:37 +0000
Manifest next update:     Wed 20 May 2026 03:29:37 +0000
Files and hashes:         1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: Z/J22dmEyLRv+Y/04tuPjNC4iMdxKplcou7JkuK/eIU=)
                          2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: hDaWJ1MPMK/kTcYrElHYKR5D6BKNhIGyYI8+GpXOoQk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl
                          rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794
        Validity
            Not Before: May 13 03:29:37 2026 GMT
            Not After : May 20 03:29:37 2026 GMT
        Subject: CN=6a03f022-c1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:25:58:a4:53:dd:85:68:ef:bc:f3:9d:70:
                    ca:90:bc:04:f0:62:76:33:4d:43:9c:3b:9a:a3:4f:
                    a2:04:bb:cc:bd:43:8b:af:55:77:15:6d:47:1f:e9:
                    b9:17:ed:4b:98:19:1f:fd:66:d0:69:7c:bb:24:9e:
                    69:bb:1f:41:0e:05:fc:8a:8e:ec:b7:49:d6:40:9b:
                    ac:da:9f:84:bb:d4:0e:7c:38:ba:8f:05:7c:d5:59:
                    07:53:d3:92:18:09:1e:65:81:91:6e:fd:b6:4f:8d:
                    51:f1:08:25:f7:b5:89:22:84:b1:05:68:64:44:b9:
                    dd:65:27:82:8b:ef:6a:7d:44:20:84:dc:3f:e5:d4:
                    94:da:cd:bf:77:8c:96:83:88:1f:b3:f4:43:d2:cd:
                    a6:10:12:b8:fe:1e:ac:dd:b8:6f:43:9f:1b:90:f4:
                    f7:b8:28:3e:f7:54:e7:d8:17:cd:c0:e7:fd:40:0a:
                    2e:4c:68:92:54:15:b4:05:1e:7c:da:8c:4a:a5:58:
                    15:42:0f:5f:58:eb:d5:04:6a:27:36:be:3d:d0:16:
                    ff:fb:ec:aa:27:27:b7:81:87:9d:be:4c:da:fb:d9:
                    fd:96:eb:1d:2e:3c:01:ce:00:5c:c8:d8:fe:47:d1:
                    10:ad:aa:e1:de:e2:56:0e:94:18:83:ad:cf:63:e2:
                    7f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:00:FB:5A:34:7E:D0:2C:4C:03:7A:A8:50:7D:93:F0:C7:72:27:77
            X509v3 Authority Key Identifier:
                keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:18:c9:0e:bc:6d:18:60:02:81:2e:b2:f2:f6:cc:f6:6d:0d:
         a2:04:b1:01:ae:d9:29:02:65:28:3e:2c:16:33:06:52:bd:40:
         f8:53:1e:7b:f4:3e:e7:46:19:59:f8:e3:2c:c2:e9:38:ef:e4:
         50:68:ce:af:e0:1c:27:d5:f1:29:ac:20:38:f6:14:84:bd:57:
         7b:2a:5e:ee:94:de:14:e0:95:84:3c:8b:fb:4b:09:97:60:f0:
         47:7a:9a:69:47:e5:dd:dd:30:b4:69:9b:0d:42:43:07:68:aa:
         25:42:94:96:22:2b:a1:6a:02:da:b0:d1:a0:4a:70:50:8a:3b:
         02:8c:b0:e4:8d:04:67:f3:6b:1a:b3:c7:d1:55:61:ab:f0:a5:
         4e:fb:e4:66:a4:83:c3:bf:2f:6a:d9:94:6c:45:79:f0:d6:c1:
         62:3b:83:5b:97:af:77:6b:fc:38:c6:e4:ff:e7:9d:ec:cf:93:
         ff:7f:bf:63:f1:f0:f1:81:2a:dd:84:c5:96:4e:af:04:21:00:
         92:41:dd:b9:3e:56:01:23:4a:c2:9c:11:3a:1e:45:64:ad:2d:
         22:f7:e0:b3:68:aa:e3:92:3f:79:31:c2:44:19:90:76:f0:ea:
         d5:b9:10:a5:3f:9e:b6:77:51:da:c3:cf:bd:fb:0e:ac:ed:48:
         9b:28:12:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5
MTg0M0M3OTQwHhcNMjYwNTEzMDMyOTM3WhcNMjYwNTIwMDMyOTM3WjAYMRYwFAYD
VQQDEw02YTAzZjAyMi1jMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHclWKRT3YVo77zznXDKkLwE8GJ2M01DnDuao0+iBLvMvUOLr1V3FW1HH+m5
F+1LmBkf/WbQaXy7JJ5pux9BDgX8io7st0nWQJus2p+Eu9QOfDi6jwV81VkHU9OS
GAkeZYGRbv22T41R8Qgl97WJIoSxBWhkRLndZSeCi+9qfUQghNw/5dSU2s2/d4yW
g4gfs/RD0s2mEBK4/h6s3bhvQ58bkPT3uCg+91Tn2BfNwOf9QAouTGiSVBW0BR58
2oxKpVgVQg9fWOvVBGonNr490Bb/++yqJye3gYedvkza+9n9lusdLjwBzgBcyNj+
R9EQrarh3uJWDpQYg63PY+J/OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgA+1o0
ftAsTAN6qFB9k/DHcid3MB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD
MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4
NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx
M2pKT1FneFhPd3FSaER4NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKRjJDrxtGGACgS6y8vbM9m0NogSxAa7ZKQJlKD4sFjMGUr1A+FMee/Q+50YZ
WfjjLMLpOO/kUGjOr+AcJ9XxKawgOPYUhL1Xeype7pTeFOCVhDyL+0sJl2DwR3qa
aUfl3d0wtGmbDUJDB2iqJUKUliIroWoC2rDRoEpwUIo7Aoyw5I0EZ/NrGrPH0VVh
q/ClTvvkZqSDw78vatmUbEV58NbBYjuDW5evd2v8OMbk/+ed7M+T/3+/Y/Hw8YEq
3YTFlk6vBCEAkkHduT5WASNKwpwROh5FZK0tIvfgs2iq45I/eTHCRBmQdvDq1bkQ
pT+etndR2sPPvfsOrO1ImygS4Q==
-----END CERTIFICATE-----
Generated at Wed May 13 14:06:30 2026 by rpki-client