Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File:                     84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier:          NEH7RpGBfo3JweifUAJTQTRWLT/3j17XosI51jstjZA=
Subject key identifier:   92:0B:B6:68:D9:9A:74:86:CE:F7:82:0E:37:5D:40:DF:61:AB:8C:50
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer:       /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial:       0508
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number:          0501
Signing time:             Tue 12 May 2026 23:47:24 +0000
Manifest this update:     Tue 12 May 2026 23:47:24 +0000
Manifest next update:     Tue 19 May 2026 23:47:24 +0000
Files and hashes:         1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: tDd90PGjIZbdTrcoyZpOqQEN+cjT+5M6GlaTMr3RP/M=)
                          2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: 4pb/gM8lDNYdlH1fovFGDxDjw7tPKno0MVw8fyTlO8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
                          rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288 (0x508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
        Validity
            Not Before: May 12 23:47:24 2026 GMT
            Not After : May 19 23:47:24 2026 GMT
        Subject: CN=6a03bc0c-e7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:42:3a:e6:e6:45:e1:9a:9b:a0:1e:f8:93:1b:
                    fa:9a:55:ee:ee:97:b1:10:07:47:f4:d4:2f:81:0a:
                    50:09:4c:1c:0a:2b:97:60:78:3f:f5:28:cb:21:59:
                    b1:f6:35:5c:76:d8:a8:53:9d:d4:57:b2:67:5b:d1:
                    f5:82:e9:2e:e7:a2:83:b3:e2:c0:5c:38:d6:9a:71:
                    cc:91:c0:25:13:98:37:8a:fe:0e:ff:40:f5:93:68:
                    a0:fb:57:51:43:4a:28:62:34:03:d0:8c:33:fc:9f:
                    56:b2:ce:05:93:a4:8a:9c:87:9a:4c:28:2f:77:64:
                    10:99:7d:7b:f0:39:dd:41:c3:de:0d:ed:e8:93:33:
                    eb:7f:e2:3f:40:be:54:7f:65:25:89:b8:96:65:5f:
                    85:9a:de:61:18:49:14:8c:c4:ad:3a:a5:94:ef:e0:
                    fc:2a:7f:fc:38:8c:98:76:08:16:3f:23:f9:b2:01:
                    47:85:17:5c:fa:9d:3e:6e:f8:46:15:f7:95:38:61:
                    a1:82:dc:fc:f1:e1:bb:4e:27:96:19:81:62:58:e7:
                    94:af:7a:78:29:8b:a9:5a:c0:dd:7e:49:47:a6:81:
                    c1:ae:cf:c9:2e:81:cf:13:86:fa:c5:23:30:78:37:
                    b6:fc:db:d5:79:70:b0:8b:e7:a1:a8:dd:51:81:aa:
                    89:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0B:B6:68:D9:9A:74:86:CE:F7:82:0E:37:5D:40:DF:61:AB:8C:50
            X509v3 Authority Key Identifier:
                keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:2c:00:ad:64:ac:4e:a8:e9:91:5c:3e:82:8a:f6:5f:84:
         e0:f1:35:69:35:42:de:09:cf:08:dc:13:ed:0e:3d:42:f4:44:
         23:3b:ef:19:98:25:c8:bf:f8:e0:56:c3:89:29:f6:83:68:58:
         2e:f7:92:48:51:f0:ce:29:42:f6:5d:26:65:1b:c9:1d:3e:90:
         9e:01:95:6d:e7:97:b7:db:fd:5b:bc:e7:c4:93:fa:ad:c8:91:
         55:63:e8:5b:c1:25:bd:06:b9:69:3e:45:9b:ea:d9:ff:7f:f7:
         31:b1:2f:9b:a5:ba:b9:86:a4:fe:6a:22:a9:c4:19:f7:f7:e1:
         ca:e9:e5:11:14:a2:72:e1:c8:45:cd:09:1b:22:0b:c9:fb:de:
         a4:8b:1f:4f:d5:24:db:ad:6b:a1:b0:0d:5f:4c:ab:af:94:60:
         4e:32:1a:42:17:4f:d9:43:53:f4:d1:c9:a3:52:1f:01:47:f3:
         06:a4:c7:66:26:c8:ca:89:77:a7:12:74:d9:74:00:88:ed:82:
         a5:5d:2f:95:6a:86:91:c2:cb:fd:01:59:67:9f:f5:b1:be:9f:
         05:f4:68:cc:ce:bf:2f:79:a4:a5:e7:fb:00:e7:b0:0c:d3:05:
         eb:d9:64:d4:80:eb:b6:ee:5e:5a:2e:54:ee:38:54:6c:3f:a7:
         77:5f:e2:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3ODVENEJGNEQz
NkNDNDk3MUYwHhcNMjYwNTEyMjM0NzI0WhcNMjYwNTE5MjM0NzI0WjAYMRYwFAYD
VQQDEw02YTAzYmMwYy1lN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7UI65uZF4ZqboB74kxv6mlXu7pexEAdH9NQvgQpQCUwcCiuXYHg/9SjLIVmx
9jVcdtioU53UV7JnW9H1guku56KDs+LAXDjWmnHMkcAlE5g3iv4O/0D1k2ig+1dR
Q0ooYjQD0Iwz/J9Wss4Fk6SKnIeaTCgvd2QQmX178DndQcPeDe3okzPrf+I/QL5U
f2UlibiWZV+Fmt5hGEkUjMStOqWU7+D8Kn/8OIyYdggWPyP5sgFHhRdc+p0+bvhG
FfeVOGGhgtz88eG7TieWGYFiWOeUr3p4KYupWsDdfklHpoHBrs/JLoHPE4b6xSMw
eDe2/NvVeXCwi+ehqN1RgaqJiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJILtmjZ
mnSGzveCDjddQN9hq4xQMB8GA1UdIwQYMBaAFPOIIJysssa4FMrFeF1L9NNsxJcf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE1MC9DOUE3QTQzODU2
RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhyZ1V5c1Y0WFV2MDAyekVs
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg0Z2duS3l5eHJnVXlzVjRYVXYwMDJ6RWx4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEE1MC9DOUE3QTQzODU2RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhy
Z1V5c1Y0WFV2MDAyekVseDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeicsAK1krE6o6ZFcPoKK9l+E4PE1aTVC3gnPCNwT7Q49QvREIzvvGZglyL/4
4FbDiSn2g2hYLveSSFHwzilC9l0mZRvJHT6QngGVbeeXt9v9W7znxJP6rciRVWPo
W8ElvQa5aT5Fm+rZ/3/3MbEvm6W6uYak/moiqcQZ9/fhyunlERSicuHIRc0JGyIL
yfvepIsfT9Uk261robANX0yrr5RgTjIaQhdP2UNT9NHJo1IfAUfzBqTHZibIyol3
pxJ02XQAiO2CpV0vlWqGkcLL/QFZZ5/1sb6fBfRozM6/L3mkpef7AOewDNMF69lk
1IDrtu5eWi5U7jhUbD+nd1/iqQ==
-----END CERTIFICATE-----
Generated at Wed May 13 15:25:33 2026 by rpki-client