Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
File:                     Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json)
Hash identifier:          ztdDjrHCTxwy9NczPBvAtoWDSJ96+jbynXeQJLCYRE0=
Subject key identifier:   9D:05:56:21:CF:96:EC:EF:77:FD:19:65:DD:D2:3D:28:0D:61:7C:85
Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
Certificate issuer:       /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
Manifest number:          05D3
Signing time:             Wed 13 May 2026 00:27:55 +0000
Manifest this update:     Wed 13 May 2026 00:27:55 +0000
Manifest next update:     Wed 20 May 2026 00:27:55 +0000
Files and hashes:         1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: vgwE/2gZKpoQIHwZElBG5wSxmZxJcYv64in1ycEO04M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
        Validity
            Not Before: May 13 00:27:55 2026 GMT
            Not After : May 20 00:27:55 2026 GMT
        Subject: CN=6a03c58b-0549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:44:f7:d2:73:82:46:d1:90:b3:50:8b:ed:
                    d4:bb:a4:20:59:bc:42:8d:d8:82:0e:87:5e:b3:5a:
                    aa:bf:17:c3:72:0a:d1:55:5d:f5:fc:56:64:11:64:
                    89:89:96:41:bc:26:af:e1:0a:c3:2d:ce:67:65:d8:
                    9c:bc:1d:61:2e:f8:3d:49:5d:7a:59:82:0e:34:1a:
                    be:b7:23:57:5c:75:2d:a0:30:44:65:d9:13:7e:41:
                    22:b3:59:a3:9b:da:db:91:99:91:1e:64:90:83:56:
                    03:ce:ea:4a:70:3e:1b:fb:8a:01:da:e2:ef:a0:ff:
                    5e:fa:4e:f9:39:dd:20:01:2f:5c:e1:f9:6e:dc:ae:
                    44:69:39:d4:b1:a4:e9:bf:1d:cb:11:28:ed:92:d6:
                    29:01:f1:2d:89:ce:43:0a:ff:62:b5:e9:bf:d2:70:
                    02:e7:e7:fa:17:71:88:3c:19:8a:de:14:72:86:19:
                    a1:97:6e:03:24:d5:f0:01:17:1e:7c:c7:99:f0:95:
                    fd:ff:5f:56:24:dc:50:59:2e:8f:9f:a8:21:32:fb:
                    a8:9d:cf:94:b4:40:2d:f1:ca:d2:d6:63:82:ed:92:
                    c6:71:7e:6e:bf:08:0d:24:da:2e:ba:4e:2c:ec:39:
                    6c:e6:d3:86:fb:0b:65:de:0d:38:80:70:20:87:b9:
                    97:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:05:56:21:CF:96:EC:EF:77:FD:19:65:DD:D2:3D:28:0D:61:7C:85
            X509v3 Authority Key Identifier:
                keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b2:4a:61:ed:82:a6:3d:5d:25:6c:ee:09:21:67:0c:e2:68:
         bd:70:87:cc:ca:29:79:17:c9:b1:b2:76:d1:15:f0:68:b1:f6:
         2f:57:fd:fa:dc:22:c4:5c:6a:07:31:83:21:55:7c:5d:d9:d6:
         1d:a5:9b:4c:54:96:da:4f:f5:65:bb:30:50:3d:3f:cd:a7:2e:
         6f:b6:41:9b:ac:8b:3c:74:fb:e3:12:b4:8c:e7:ee:5f:a0:54:
         c7:8e:23:13:09:fd:53:54:b4:59:be:98:f7:38:5e:1c:3d:7e:
         e5:9b:0e:21:41:2d:03:5e:8f:e0:9d:1a:96:6f:2e:6c:4e:fb:
         b2:51:81:5c:cc:ec:08:e7:17:02:2c:2e:44:41:66:83:34:d9:
         f0:da:24:c4:a7:5e:19:4e:e3:79:62:cd:a1:3b:52:24:3e:78:
         2c:a0:50:26:a0:68:40:da:91:7d:c7:6d:3e:75:35:1b:64:02:
         b1:5b:32:86:27:e5:7d:77:85:7a:79:74:bb:02:51:e7:b6:11:
         30:a2:90:b4:b3:09:81:3d:a2:dd:7f:c5:b1:5e:34:d6:bf:7a:
         0a:2a:f6:e2:36:0e:9c:19:e4:e1:9e:1d:3e:0f:a3:26:2c:f6:
         cf:18:1d:e0:05:eb:0f:dd:04:ea:3d:c6:3b:7b:85:51:65:3f:
         9d:45:8f:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRDNzAxMTAvBgNVBAUTKDAyODlFMUUwODJCNkRBMUFCQTU1NTI4NDBDMENBQjAy
QzJBM0I3NEUwHhcNMjYwNTEzMDAyNzU1WhcNMjYwNTIwMDAyNzU1WjAYMRYwFAYD
VQQDEw02YTAzYzU4Yi0wNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3RhE99JzgkbRkLNQi+3Uu6QgWbxCjdiCDodes1qqvxfDcgrRVV31/FZkEWSJ
iZZBvCav4QrDLc5nZdicvB1hLvg9SV16WYIONBq+tyNXXHUtoDBEZdkTfkEis1mj
m9rbkZmRHmSQg1YDzupKcD4b+4oB2uLvoP9e+k75Od0gAS9c4flu3K5EaTnUsaTp
vx3LESjtktYpAfEtic5DCv9item/0nAC5+f6F3GIPBmK3hRyhhmhl24DJNXwARce
fMeZ8JX9/19WJNxQWS6Pn6ghMvuonc+UtEAt8crS1mOC7ZLGcX5uvwgNJNouuk4s
7Dls5tOG+wtl3g04gHAgh7mXowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0FViHP
luzvd/0ZZd3SPSgNYXyFMB8GA1UdIwQYMBaAFAKJ4eCCttoaulVShAwMqwLCo7dO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEM3MC84MkJDODRFRUFD
NjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9Bb25oNElLMjJocTZWVktFREF5ckFzS2p0
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Fvbmg0SUsyMmhxNlZWS0VEQXlyQXNLanQwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9Bb25oNElLMjJo
cTZWVktFREF5ckFzS2p0MDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALbJKYe2Cpj1dJWzuCSFnDOJovXCHzMopeRfJsbJ20RXwaLH2L1f9+twixFxq
BzGDIVV8XdnWHaWbTFSW2k/1ZbswUD0/zacub7ZBm6yLPHT74xK0jOfuX6BUx44j
Ewn9U1S0Wb6Y9zheHD1+5ZsOIUEtA16P4J0alm8ubE77slGBXMzsCOcXAiwuREFm
gzTZ8NokxKdeGU7jeWLNoTtSJD54LKBQJqBoQNqRfcdtPnU1G2QCsVsyhiflfXeF
enl0uwJR57YRMKKQtLMJgT2i3X/FsV401r96Cir24jYOnBnk4Z4dPg+jJiz2zxgd
4AXrD90E6j3GO3uFUWU/nUWP+A==
-----END CERTIFICATE-----
Generated at Wed May 13 08:22:48 2026 by rpki-client