Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft
File:                     e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft (raw, json)
Hash identifier:          +Z4lnPLenYByYaKv88N2Mbmv3Q+Qxh3Jzq0kRyCG8vY=
Subject key identifier:   49:C4:B6:AD:2C:BE:31:E3:DD:34:5D:BD:BE:E3:8A:D7:D7:CA:0E:50
Authority key identifier: 7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14
Certificate issuer:       /CN=A9155AD0/serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft
Manifest number:          0234
Signing time:             Wed 25 Mar 2026 02:00:13 +0000
Manifest this update:     Wed 25 Mar 2026 02:00:13 +0000
Manifest next update:     Wed 01 Apr 2026 02:00:13 +0000
Files and hashes:         1: e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl (hash: c8VrFC3Uybl9vrsQTuycNn1ZQh+4IzfJ8qk2DZowiKM=)
                          2: EB732812CC8211ED9420A757C4F9AE02.roa (hash: xTVPZTGVFcQ941n2VG9Gi5wdER1nTq4jaX59NbOs0yU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl
                          rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155AD0, serialNumber=7BD36954C4D0C305AB4FA1C225C0F3D732D67714
        Validity
            Not Before: Mar 25 02:00:13 2026 GMT
            Not After : Apr  1 02:00:13 2026 GMT
        Subject: CN=69c341ad-1e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d6:51:16:3b:ea:68:10:23:cc:f9:66:e1:04:
                    c5:e4:db:82:8f:d5:91:6a:e9:c4:4c:59:1a:0e:5f:
                    1b:2c:09:06:e8:44:93:a9:29:29:2f:40:9c:19:eb:
                    7b:9c:94:39:14:45:91:52:f8:cb:0e:db:6a:6e:1f:
                    38:ac:02:a6:93:b7:61:56:ec:e6:9b:4c:ad:49:c8:
                    fb:3a:39:0e:33:40:d4:db:9c:d1:21:45:0e:56:c9:
                    26:b1:fd:5c:34:44:68:19:b6:77:e2:33:a5:ec:58:
                    7e:48:f8:b1:0c:db:39:bb:08:e8:33:5e:d7:9b:7d:
                    16:3b:de:e4:0c:48:d0:b5:6b:11:bb:84:ac:c6:20:
                    e4:63:90:37:1e:da:e4:eb:2e:56:bf:fb:9a:a6:89:
                    df:c5:e2:cd:f0:c6:ef:1a:f2:d1:06:0c:95:f3:80:
                    4a:3d:65:c1:cb:07:58:0f:17:31:cc:7e:70:5f:56:
                    7a:65:9e:80:32:44:2d:88:e5:d1:3f:64:60:64:e8:
                    c9:58:70:c0:63:50:f9:a1:6b:8c:f2:b6:b5:94:31:
                    58:ec:b6:78:e1:40:58:9d:d6:72:91:ea:dc:c7:d1:
                    19:9b:1f:65:92:da:6e:15:16:4b:d7:16:c1:2d:c5:
                    c4:ba:91:84:70:a5:63:59:e6:da:48:03:11:cd:62:
                    94:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C4:B6:AD:2C:BE:31:E3:DD:34:5D:BD:BE:E3:8A:D7:D7:CA:0E:50
            X509v3 Authority Key Identifier:
                keyid:7B:D3:69:54:C4:D0:C3:05:AB:4F:A1:C2:25:C0:F3:D7:32:D6:77:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AD0/099AA7DECC7E11ED97E4532BC4F9AE02/e9NpVMTQwwWrT6HCJcDz1zLWdxQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ad:97:cf:c4:9c:11:a8:db:73:4c:88:13:c6:09:3d:f3:20:
         79:6f:1c:04:07:1e:25:32:8e:b7:5e:6f:03:f9:9c:4a:89:90:
         16:c6:c0:5f:18:40:58:14:2a:3c:01:d0:2b:d4:94:6d:cb:84:
         9e:25:8d:b5:0f:7f:a4:cc:02:31:f0:e3:01:38:35:31:53:09:
         dd:0e:50:8f:7a:23:19:43:2b:6b:d2:8a:f1:9d:f2:af:a1:f6:
         13:9e:8b:94:b5:2a:26:2e:e9:c8:13:32:9c:18:2f:53:fc:6a:
         a9:21:a3:d6:c0:3e:67:45:40:43:6d:76:4a:d1:cd:8d:1d:c0:
         25:fc:15:c8:96:8a:f5:65:87:b1:93:bd:36:ef:92:20:b6:06:
         53:49:80:1d:3c:e3:ef:0c:f7:ca:bf:eb:5b:75:11:65:5d:3e:
         a4:58:3d:c2:2f:0b:8d:e8:7e:bf:33:da:af:39:f8:4f:0d:0e:
         f5:99:f3:19:f5:3d:11:57:5f:6b:46:d1:8f:07:c0:a1:fe:ea:
         b1:f1:dd:91:68:13:53:3f:8c:a1:78:d8:be:0a:e3:d9:e4:a0:
         29:24:a4:c3:c4:d6:a3:c7:4b:b5:2c:28:fd:57:4e:53:dc:c5:
         08:5e:ee:dc:67:5a:dd:f0:68:7c:69:84:68:32:72:ec:8e:1c:
         87:72:eb:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTVBRDAxMTAvBgNVBAUTKDdCRDM2OTU0QzREMEMzMDVBQjRGQTFDMjI1QzBGM0Q3
MzJENjc3MTQwHhcNMjYwMzI1MDIwMDEzWhcNMjYwNDAxMDIwMDEzWjAYMRYwFAYD
VQQDEw02OWMzNDFhZC0xZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAltZRFjvqaBAjzPlm4QTF5NuCj9WRaunETFkaDl8bLAkG6ESTqSkpL0CcGet7
nJQ5FEWRUvjLDttqbh84rAKmk7dhVuzmm0ytScj7OjkOM0DU25zRIUUOVskmsf1c
NERoGbZ34jOl7Fh+SPixDNs5uwjoM17Xm30WO97kDEjQtWsRu4SsxiDkY5A3Htrk
6y5Wv/uaponfxeLN8MbvGvLRBgyV84BKPWXBywdYDxcxzH5wX1Z6ZZ6AMkQtiOXR
P2RgZOjJWHDAY1D5oWuM8ra1lDFY7LZ44UBYndZykercx9EZmx9lktpuFRZL1xbB
LcXEupGEcKVjWebaSAMRzWKUHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEnEtq0s
vjHj3TRdvb7jitfXyg5QMB8GA1UdIwQYMBaAFHvTaVTE0MMFq0+hwiXA89cy1ncU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFEMC8wOTlBQTdERUND
N0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3V3JUNkhDSmNEejF6TFdk
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2U5TnBWTVRRd3dXclQ2SENKY0R6MXpMV2R4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NUFEMC8wOTlBQTdERUNDN0UxMUVEOTdFNDUzMkJDNEY5QUUwMi9lOU5wVk1UUXd3
V3JUNkhDSmNEejF6TFdkeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV62Xz8ScEajbc0yIE8YJPfMgeW8cBAceJTKOt15vA/mcSomQFsbAXxhAWBQq
PAHQK9SUbcuEniWNtQ9/pMwCMfDjATg1MVMJ3Q5Qj3ojGUMra9KK8Z3yr6H2E56L
lLUqJi7pyBMynBgvU/xqqSGj1sA+Z0VAQ212StHNjR3AJfwVyJaK9WWHsZO9Nu+S
ILYGU0mAHTzj7wz3yr/rW3URZV0+pFg9wi8Ljeh+vzParzn4Tw0O9ZnzGfU9EVdf
a0bRjwfAof7qsfHdkWgTUz+MoXjYvgrj2eSgKSSkw8TWo8dLtSwo/VdOU9zFCF7u
3Gda3fBofGmEaDJy7I4ch3Lrfw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:37 2026 by rpki-client