Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
File:                     C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json)
Hash identifier:          x3xidXWmswiN97gF+Kn+auvmX+lPik8LKAExdMBzzyQ=
Subject key identifier:   C6:0E:37:D0:D6:BE:15:53:93:62:F5:41:D7:C0:96:C8:8D:FD:04:8B
Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
Certificate issuer:       /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
Manifest number:          0197
Signing time:             Mon 11 May 2026 04:25:07 +0000
Manifest this update:     Mon 11 May 2026 04:25:07 +0000
Manifest next update:     Mon 18 May 2026 04:25:07 +0000
Files and hashes:         1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: pWbT40jpuV2TnXhlVO8BFrjzLEZ8WHFzeYST+Vt2zos=)
                          2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: ggAQnyXdNs7ZbN7s75DCVXJXQOiPT7nZ4fbBC6nuxr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl
                          rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
        Validity
            Not Before: May 11 04:25:07 2026 GMT
            Not After : May 18 04:25:07 2026 GMT
        Subject: CN=6a015a23-d4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:d9:f8:b2:35:a8:18:ed:bc:50:20:f4:4d:
                    84:34:4c:28:aa:f7:9e:b7:3e:6a:03:e2:d6:b2:c4:
                    90:2b:61:6c:37:84:0c:81:5a:91:7e:02:96:b7:62:
                    bc:ec:71:e3:c3:dd:a0:d1:e5:26:3c:ab:f0:01:7a:
                    2b:12:a2:17:fe:25:51:ac:2b:0e:23:da:a6:f2:aa:
                    28:a2:d9:80:2c:38:1b:64:fe:c1:ba:54:3c:62:13:
                    a3:68:cb:6a:9c:df:e2:e3:21:9c:f1:9f:57:9c:e7:
                    a8:7b:a6:d6:e3:f8:39:0a:97:28:67:70:3e:cd:a2:
                    10:a9:cc:50:84:38:8d:b9:b2:12:b8:d6:24:15:20:
                    60:fc:0d:9e:f4:df:73:f0:63:01:29:d9:5e:06:2c:
                    88:de:2c:d0:cb:83:2c:79:87:c0:2a:6d:5f:c6:d4:
                    d6:56:1e:a2:ff:11:dc:85:51:af:75:43:a7:ba:f7:
                    7b:5c:3d:20:f1:f8:10:82:e3:a1:8e:a8:49:cd:7e:
                    00:4a:84:9e:62:c3:4d:15:40:06:49:4a:94:f5:1d:
                    bb:c7:aa:d0:b8:e5:5e:26:15:d9:22:75:32:b4:a5:
                    2d:ce:02:10:f3:13:dc:4c:22:5e:47:3a:82:0c:66:
                    f0:21:e9:3b:d3:8f:bf:43:e4:25:85:8f:53:ce:83:
                    6a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0E:37:D0:D6:BE:15:53:93:62:F5:41:D7:C0:96:C8:8D:FD:04:8B
            X509v3 Authority Key Identifier:
                keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:22:cd:d3:23:62:ba:37:ce:45:09:24:f0:50:3c:e3:d9:42:
         51:56:2e:17:1d:9d:f8:c9:45:60:35:9e:ba:a9:2f:3c:c8:9b:
         1c:a1:1d:1d:64:b7:8d:90:5b:1f:8a:1e:e2:4c:1d:c2:b3:18:
         7b:67:79:e5:31:03:1b:66:f1:83:a0:d7:6f:37:2d:53:3e:f7:
         65:a2:31:9e:f3:d9:04:c8:68:d8:9c:95:04:45:bb:44:d5:9b:
         f5:ae:97:d7:a4:c1:f7:28:c0:1d:c8:00:a4:d9:94:67:1b:c9:
         a7:08:50:c9:03:b2:45:47:23:f6:4e:47:8c:75:a9:d0:69:c9:
         5d:3c:f8:78:11:ed:61:d8:ab:40:e1:ab:42:68:38:83:ab:e7:
         e9:79:ba:de:14:eb:94:a9:08:5e:fe:09:8e:8e:2d:40:18:04:
         46:1b:02:73:33:ad:88:50:1d:80:c8:f8:1a:60:9f:97:35:3f:
         43:5f:d0:3f:47:ce:c1:70:41:6d:b3:8e:b5:c0:77:13:21:72:
         b8:19:cb:bb:22:a6:d8:3d:15:3f:8d:2a:48:96:f2:08:ca:46:
         04:bf:57:b9:2e:f0:70:23:21:2b:0e:bf:16:51:98:be:09:ad:
         c0:64:cd:28:48:bb:4e:71:26:8b:b0:b1:a5:97:e4:5b:fd:1f:
         a1:3e:29:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI2QjMxMTAvBgNVBAUTKDBCREFCNjA4NjE3RjNDMzE4M0M0NzBGNEU2MTlCMjc5
NUY3NUMzODkwHhcNMjYwNTExMDQyNTA3WhcNMjYwNTE4MDQyNTA3WjAYMRYwFAYD
VQQDEw02YTAxNWEyMy1kNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnNfZ+LI1qBjtvFAg9E2ENEwoqveetz5qA+LWssSQK2FsN4QMgVqRfgKWt2K8
7HHjw92g0eUmPKvwAXorEqIX/iVRrCsOI9qm8qoootmALDgbZP7BulQ8YhOjaMtq
nN/i4yGc8Z9XnOeoe6bW4/g5CpcoZ3A+zaIQqcxQhDiNubISuNYkFSBg/A2e9N9z
8GMBKdleBiyI3izQy4MseYfAKm1fxtTWVh6i/xHchVGvdUOnuvd7XD0g8fgQguOh
jqhJzX4ASoSeYsNNFUAGSUqU9R27x6rQuOVeJhXZInUytKUtzgIQ8xPcTCJeRzqC
DGbwIek704+/Q+QlhY9TzoNq1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMYON9DW
vhVTk2L1QdfAlsiN/QSLMB8GA1UdIwQYMBaAFAvatghhfzwxg8Rw9OYZsnlfdcOJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DNTU0MjNBQUU2
OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BER0R4SEQwNWhteWVWOTF3
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0M5cTJDR0ZfUERHRHhIRDA1aG15ZVY5MXc0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjZCMy9DNTU0MjNBQUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BE
R0R4SEQwNWhteWVWOTF3NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACSLN0yNiujfORQkk8FA849lCUVYuFx2d+MlFYDWeuqkvPMibHKEdHWS3jZBb
H4oe4kwdwrMYe2d55TEDG2bxg6DXbzctUz73ZaIxnvPZBMho2JyVBEW7RNWb9a6X
16TB9yjAHcgApNmUZxvJpwhQyQOyRUcj9k5HjHWp0GnJXTz4eBHtYdirQOGrQmg4
g6vn6Xm63hTrlKkIXv4Jjo4tQBgERhsCczOtiFAdgMj4GmCflzU/Q1/QP0fOwXBB
bbOOtcB3EyFyuBnLuyKm2D0VP40qSJbyCMpGBL9XuS7wcCMhKw6/FlGYvgmtwGTN
KEi7TnEmi7CxpZfkW/0foT4p/A==
-----END CERTIFICATE-----
Generated at Wed May 13 04:07:46 2026 by rpki-client