Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
File:                     _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json)
Hash identifier:          gE9c1d5VPnX1WoR+3Sersr2h6/ltboUjhnD3A44mMsA=
Subject key identifier:   3B:BE:8E:86:14:5B:0F:8D:D6:76:4D:DB:25:3F:95:B3:69:20:7D:94
Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62
Certificate issuer:       /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
Manifest number:          0197
Signing time:             Wed 25 Mar 2026 03:38:10 +0000
Manifest this update:     Wed 25 Mar 2026 03:38:09 +0000
Manifest next update:     Wed 01 Apr 2026 03:38:09 +0000
Files and hashes:         1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: YJ8w+fnOL+sFHbnsIf0gtkx8UPHUKZH4XGiVTLkcYHQ=)
                          2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: kEA6yeUhDISU7WpJDe7H86w819sEogR4lALDsAB0ROU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl
                          rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62
        Validity
            Not Before: Mar 25 03:38:09 2026 GMT
            Not After : Apr  1 03:38:09 2026 GMT
        Subject: CN=69c358a1-01e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:19:c2:ff:e3:2d:18:30:21:6e:46:65:8d:68:
                    61:fa:87:9c:91:4b:da:c9:14:d8:00:c3:8c:77:e5:
                    de:28:45:01:5a:0f:92:8a:d5:86:49:ac:a5:06:37:
                    48:81:9e:d9:5e:e3:ee:96:b8:9a:af:cf:4c:75:fb:
                    c9:b3:3f:ff:cd:12:bc:49:f1:bc:44:cd:ca:ff:61:
                    3a:2d:d0:f3:48:67:0c:6e:d2:3a:ff:59:bf:0c:75:
                    26:30:1c:aa:da:31:9e:a2:6e:12:f9:01:55:c7:4a:
                    78:f1:43:4e:fb:28:6f:f7:42:c7:51:b9:dd:f0:a9:
                    9c:81:09:1a:51:22:34:ce:9e:17:83:27:cc:dd:e6:
                    31:c9:8b:c0:d4:08:93:1a:10:2c:56:04:05:e7:89:
                    7b:80:ec:c6:af:16:cd:b5:e9:56:3e:b6:18:62:62:
                    c8:e7:6e:af:d4:6c:3e:85:c7:65:c4:7b:31:78:c2:
                    37:0a:f0:55:42:4f:2f:f3:91:fc:49:07:e1:8f:4a:
                    23:a3:49:0a:a4:4b:f4:1a:37:7d:ff:36:69:3b:46:
                    47:e4:63:24:fe:de:5b:97:12:c1:85:d2:43:9a:ab:
                    60:27:b5:1e:65:03:c3:24:a4:93:a9:5b:eb:a9:ea:
                    68:76:96:22:2b:c8:2c:61:c9:01:59:2f:1b:58:32:
                    ff:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BE:8E:86:14:5B:0F:8D:D6:76:4D:DB:25:3F:95:B3:69:20:7D:94
            X509v3 Authority Key Identifier:
                keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:d2:9b:33:b8:08:e1:4b:18:18:c0:db:0c:cd:7e:60:db:de:
         3c:c6:35:60:76:29:53:c7:96:8e:ff:c0:85:23:0a:26:52:2c:
         c1:54:5f:a2:76:84:df:08:e9:9f:e7:7a:f5:bc:a4:de:f0:6b:
         92:63:eb:64:e3:5f:12:df:7d:67:e3:ea:b4:c0:b6:e7:b5:86:
         64:7c:8b:86:7d:b5:df:94:67:4f:97:c4:e6:d9:04:bd:2b:d4:
         cc:ee:60:9f:bf:27:d0:c8:8a:e3:3a:da:cc:80:2e:e7:ac:d6:
         6e:36:43:92:49:e3:b3:59:ab:41:70:5b:46:74:fa:1b:56:bb:
         90:3d:42:5a:f2:4e:f3:67:8f:dd:7e:7d:0e:1d:2e:63:aa:da:
         d4:c7:07:f8:72:8c:04:f5:26:a0:b8:3f:b5:30:8f:ba:96:5d:
         2b:e7:96:ce:ba:9f:07:a4:4a:f8:a2:93:21:63:40:65:2b:39:
         57:43:cc:10:7c:a2:7a:5a:18:93:8c:c9:16:69:d2:2c:34:66:
         a7:bf:35:e2:3c:fb:08:72:52:2f:42:22:9f:a1:e3:3a:c9:65:
         a9:4f:da:7e:a5:1c:e7:4b:a3:33:e5:dd:95:a6:1a:fc:4b:bc:
         cf:b8:09:3e:c7:8d:0c:e1:71:8a:07:4e:46:f6:a3:1e:6e:c2:
         14:7d:8c:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFOEQxMTAvBgNVBAUTKEZDRTAzMEVCMzAyMDNBNTEwQ0RCQ0Y5QzdDM0E0MzAw
M0JCREZBNjIwHhcNMjYwMzI1MDMzODA5WhcNMjYwNDAxMDMzODA5WjAYMRYwFAYD
VQQDEw02OWMzNThhMS0wMWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6RnC/+MtGDAhbkZljWhh+oeckUvayRTYAMOMd+XeKEUBWg+SitWGSaylBjdI
gZ7ZXuPulriar89MdfvJsz//zRK8SfG8RM3K/2E6LdDzSGcMbtI6/1m/DHUmMByq
2jGeom4S+QFVx0p48UNO+yhv90LHUbnd8KmcgQkaUSI0zp4XgyfM3eYxyYvA1AiT
GhAsVgQF54l7gOzGrxbNtelWPrYYYmLI526v1Gw+hcdlxHsxeMI3CvBVQk8v85H8
SQfhj0ojo0kKpEv0Gjd9/zZpO0ZH5GMk/t5blxLBhdJDmqtgJ7UeZQPDJKSTqVvr
qepodpYiK8gsYckBWS8bWDL/kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDu+joYU
Ww+N1nZN2yU/lbNpIH2UMB8GA1UdIwQYMBaAFPzgMOswIDpRDNvPnHw6QwA7vfpi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U4RC82NEIxNkE5OEJG
NDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09sRU0yOC1jZkRwREFEdTkt
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19PQXc2ekFnT2xFTTI4LWNmRHBEQUR1OS1tSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0U4RC82NEIxNkE5OEJGNDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09s
RU0yOC1jZkRwREFEdTktbUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu9KbM7gI4UsYGMDbDM1+YNvePMY1YHYpU8eWjv/AhSMKJlIswVRfonaE3wjp
n+d69byk3vBrkmPrZONfEt99Z+PqtMC257WGZHyLhn2135RnT5fE5tkEvSvUzO5g
n78n0MiK4zrazIAu56zWbjZDkknjs1mrQXBbRnT6G1a7kD1CWvJO82eP3X59Dh0u
Y6ra1McH+HKMBPUmoLg/tTCPupZdK+eWzrqfB6RK+KKTIWNAZSs5V0PMEHyieloY
k4zJFmnSLDRmp7814jz7CHJSL0Iin6HjOsllqU/afqUc50ujM+XdlaYa/Eu8z7gJ
PseNDOFxigdORvajHm7CFH2M0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:36 2026 by rpki-client