Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
File:                     m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json)
Hash identifier:          3zzG3yWFFZN5UMQU74rJPBch+jSwJ4q4eBwXH9wc5Cw=
Subject key identifier:   D8:C7:C6:FA:EC:96:88:50:E9:A5:2F:20:7F:BD:78:AA:2F:AB:B6:4F
Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D
Certificate issuer:       /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
Certificate serial:       0A1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
Manifest number:          0A16
Signing time:             Tue 24 Mar 2026 19:35:45 +0000
Manifest this update:     Tue 24 Mar 2026 19:35:44 +0000
Manifest next update:     Tue 31 Mar 2026 19:35:44 +0000
Files and hashes:         1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: 5f2GIvvbgoGWUB/jKlixsyz5RG5m25JquDeo0eidTFs=)
                          2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: p5tHceUGggVzp/JRsrpIxwd9XbhGqbw9afNYTWBImQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl
                          rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2591 (0xa1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
        Validity
            Not Before: Mar 24 19:35:44 2026 GMT
            Not After : Mar 31 19:35:44 2026 GMT
        Subject: CN=69c2e791-0936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:96:65:06:df:3e:19:3c:b6:cc:0e:b9:cf:4e:
                    8d:fa:cb:86:32:3f:07:37:b4:52:aa:20:ea:ad:2f:
                    e9:1b:97:2f:44:6a:7e:02:88:ea:08:11:2d:00:0c:
                    0e:1e:3d:a4:d1:bf:20:5c:c5:8f:35:e5:9c:bc:53:
                    5c:61:75:a1:00:35:6b:13:dc:f8:09:db:5d:5e:85:
                    c1:1b:47:e2:fa:bf:49:d1:04:48:e3:19:ac:52:78:
                    d6:e0:cb:7e:22:3e:67:3c:08:5f:58:4e:60:48:46:
                    0e:d3:41:e5:26:cc:59:f5:57:88:25:c8:4f:42:49:
                    9d:86:03:8d:7f:19:a3:fc:80:a0:d6:86:bf:55:aa:
                    b8:a3:6c:c0:b2:04:c4:e9:0d:76:13:c3:d9:64:12:
                    f3:55:d1:ed:3b:3e:ca:4d:1e:53:e3:af:58:d8:cb:
                    00:20:ce:0c:55:0e:db:c1:83:c7:af:8b:4c:13:77:
                    5a:ff:12:65:8a:69:81:8e:57:35:e2:4c:3c:3e:01:
                    fc:a1:fc:74:4f:83:d8:dc:ad:04:d9:13:97:ce:fe:
                    b9:ad:7a:c6:34:9c:f2:92:74:d5:1b:8c:b8:da:f3:
                    98:6b:e1:3c:c1:f2:61:93:31:fc:11:96:8a:30:18:
                    0f:81:68:f9:03:79:4d:80:70:2a:d0:19:ec:49:67:
                    cd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C7:C6:FA:EC:96:88:50:E9:A5:2F:20:7F:BD:78:AA:2F:AB:B6:4F
            X509v3 Authority Key Identifier:
                keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a1:98:af:a0:aa:28:e4:0c:a0:fe:23:f9:1e:c3:a1:45:67:
         d8:0d:11:c3:9c:26:8f:10:9a:c4:94:37:ed:82:3d:29:5f:db:
         d4:ac:da:c0:06:cd:c6:3f:2c:f3:a6:a8:0d:8d:fd:a7:6b:63:
         c0:0a:35:fb:56:57:74:17:59:c7:5e:5b:af:29:0b:52:0f:3e:
         82:83:df:e5:bc:c3:ea:08:9c:26:e9:81:88:58:ba:56:fb:f2:
         91:36:40:5c:57:7b:8e:7d:a2:c9:fb:c9:e9:8a:62:2d:e5:9c:
         d8:1d:e1:e6:41:8c:76:60:60:10:99:d6:30:2e:d5:3f:51:54:
         06:5b:12:25:42:64:f0:66:4a:ce:79:a6:88:4e:39:f9:e6:d0:
         83:01:ea:d5:3b:95:19:b8:0f:91:5a:07:88:b1:09:25:fa:07:
         b2:dc:57:1b:ed:6f:9f:3b:4a:6e:3c:ee:ab:7e:e8:19:1d:2b:
         79:c7:80:75:73:c0:f0:c9:e8:aa:2e:b1:30:eb:91:4d:e2:0e:
         39:57:fa:ac:85:06:22:80:70:f9:59:cc:25:ca:a8:c7:f4:26:
         00:a8:84:f2:ef:e9:78:61:25:43:77:f7:d2:d4:ec:f8:af:c2:
         40:aa:05:c4:34:62:73:c4:d7:b0:b9:47:8f:d8:9a:0d:b8:81:
         ae:91:39:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA1NjYxMTAvBgNVBAUTKDlCRDY0NDgzQTI0MjFGQTZGMEVFNjM5OTc1QzcwNTk3
NjJBRkYwNUQwHhcNMjYwMzI0MTkzNTQ0WhcNMjYwMzMxMTkzNTQ0WjAYMRYwFAYD
VQQDEw02OWMyZTc5MS0wOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjpZlBt8+GTy2zA65z06N+suGMj8HN7RSqiDqrS/pG5cvRGp+AojqCBEtAAwO
Hj2k0b8gXMWPNeWcvFNcYXWhADVrE9z4CdtdXoXBG0fi+r9J0QRI4xmsUnjW4Mt+
Ij5nPAhfWE5gSEYO00HlJsxZ9VeIJchPQkmdhgONfxmj/ICg1oa/Vaq4o2zAsgTE
6Q12E8PZZBLzVdHtOz7KTR5T469Y2MsAIM4MVQ7bwYPHr4tME3da/xJlimmBjlc1
4kw8PgH8ofx0T4PY3K0E2ROXzv65rXrGNJzyknTVG4y42vOYa+E8wfJhkzH8EZaK
MBgPgWj5A3lNgHAq0BnsSWfNVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNjHxvrs
lohQ6aUvIH+9eKovq7ZPMB8GA1UdIwQYMBaAFJvWRIOiQh+m8O5jmXXHBZdir/Bd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU2Ni82QjQ1NjA5Qzkw
OEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2Ync3bU9aZGNjRmwyS3Y4
RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL205WkVnNkpDSDZidzdtT1pkY2NGbDJLdjhGMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDU2Ni82QjQ1NjA5QzkwOEYxMUVBOEFDODUwNENDNEY5QUUwMi9tOVpFZzZKQ0g2
Ync3bU9aZGNjRmwyS3Y4RjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdqGYr6CqKOQMoP4j+R7DoUVn2A0Rw5wmjxCaxJQ37YI9KV/b1KzawAbNxj8s
86aoDY39p2tjwAo1+1ZXdBdZx15brykLUg8+goPf5bzD6gicJumBiFi6VvvykTZA
XFd7jn2iyfvJ6YpiLeWc2B3h5kGMdmBgEJnWMC7VP1FUBlsSJUJk8GZKznmmiE45
+ebQgwHq1TuVGbgPkVoHiLEJJfoHstxXG+1vnztKbjzuq37oGR0receAdXPA8Mno
qi6xMOuRTeIOOVf6rIUGIoBw+VnMJcqox/QmAKiE8u/peGElQ3f30tTs+K/CQKoF
xDRic8TXsLlHj9iaDbiBrpE5yA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:24:18 2026 by rpki-client