Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
File:                     5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json)
Hash identifier:          g+v3p86Tld5Xh1fjROku1ixfpvQ/WkJMeO6AYZExsuQ=
Subject key identifier:   A3:F0:F4:7F:CC:DE:1E:3E:7A:4C:6F:F0:D5:42:80:86:04:60:DF:71
Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
Certificate issuer:       /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Certificate serial:       0D1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
Manifest number:          0D09
Signing time:             Thu 26 Mar 2026 18:06:52 +0000
Manifest this update:     Thu 26 Mar 2026 18:06:51 +0000
Manifest next update:     Thu 02 Apr 2026 18:06:51 +0000
Files and hashes:         1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: 6fVG0dAhu2nc03ykhx51bIzswt6VGDeX3tThDmw6gvc=)
                          2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: ywPnX5HWIz7gB+GZOiMioEbYiFIq0HckI3yhWxQCoN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
                          rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3357 (0xd1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
        Validity
            Not Before: Mar 26 18:06:51 2026 GMT
            Not After : Apr  2 18:06:51 2026 GMT
        Subject: CN=69c575bc-4a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:11:81:c9:db:50:9a:4b:1b:30:06:af:84:
                    10:35:c0:26:f1:40:ac:c3:26:d1:03:eb:8b:b0:7c:
                    83:fa:43:a2:f4:87:e0:ff:c0:9a:a2:a1:f4:eb:d6:
                    76:7b:90:49:dc:59:b7:24:71:36:66:9a:c4:64:2b:
                    5a:22:65:12:e9:f0:94:d6:b2:8d:a8:60:c1:15:80:
                    af:7a:8a:be:ab:f1:2f:81:46:cc:4d:e1:51:14:4b:
                    f6:41:3a:3d:59:f0:97:d8:74:ba:33:39:5d:6c:48:
                    6b:e7:e5:d7:17:c3:85:9d:ef:1d:e5:77:90:eb:6c:
                    54:75:f9:3f:a6:bd:bc:0e:68:db:6c:1f:0a:b1:9c:
                    57:df:c1:d4:36:11:24:32:52:d1:c1:2a:eb:ef:2d:
                    ad:30:02:ad:bc:9b:75:67:c6:6d:0b:fe:7e:d3:4f:
                    dd:b4:16:cb:88:50:b9:c6:b3:b7:44:cc:de:46:05:
                    dd:3d:0e:44:61:26:ef:17:f7:dd:7d:54:bd:bf:a0:
                    96:4f:1d:21:6e:89:42:94:03:86:c3:63:87:a6:cc:
                    74:ea:8b:38:a3:98:13:d3:c6:d8:15:0e:5e:ec:76:
                    cb:24:3f:b9:c1:f9:7b:63:af:c5:36:a0:0b:27:1d:
                    3e:bf:e7:89:b6:68:5c:c2:2e:58:13:e7:6b:4b:8e:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F0:F4:7F:CC:DE:1E:3E:7A:4C:6F:F0:D5:42:80:86:04:60:DF:71
            X509v3 Authority Key Identifier:
                keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ad:36:59:a9:9c:e9:07:99:00:9f:fa:90:66:4f:11:0d:cd:
         c9:f1:4e:88:54:b8:c6:3f:0f:e0:e2:7e:95:5c:31:a9:b2:a3:
         5f:27:3e:88:0c:4f:44:17:90:00:16:09:b3:c7:f7:46:c9:fa:
         09:55:22:e4:96:11:19:d8:da:a0:28:fc:6d:04:2f:fd:9e:22:
         ac:8f:bd:2d:01:bf:ee:a1:30:09:4c:68:10:20:6c:16:33:c6:
         85:bd:58:ed:17:5a:38:29:29:5b:ed:b0:5c:2d:0d:80:c9:55:
         d9:da:98:7e:ab:b3:c8:3c:93:c0:56:56:2b:fe:21:82:0f:36:
         59:68:08:1d:29:c4:26:ea:21:75:a1:c9:81:6c:27:ba:52:7c:
         21:2b:d8:43:75:5b:41:60:1f:2a:6f:18:f2:44:b5:24:44:da:
         76:c7:33:6b:97:b3:9a:f5:86:e2:18:87:bb:0c:b1:2f:7e:09:
         1d:29:5b:f5:9a:bf:ec:eb:6b:b2:9e:7e:9c:db:13:aa:f5:d6:
         32:da:e0:26:4f:37:dd:ab:9d:ef:be:ad:f2:a1:13:d4:46:ec:
         ba:36:f2:d9:cc:c2:4b:78:4f:68:33:82:2e:02:8a:06:0b:81:
         75:02:f2:a6:ac:69:0f:72:3b:cc:c5:fa:5e:2e:ee:9b:93:b6:
         7f:e4:d9:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgzMzYxMTAvBgNVBAUTKEU2MjQ0MTJBNDI3OTU4OUI5RUMyRkFCMzIyMkJBQjA2
MjZEMzEyNUEwHhcNMjYwMzI2MTgwNjUxWhcNMjYwNDAyMTgwNjUxWjAYMRYwFAYD
VQQDEw02OWM1NzViYy00YTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqOQRgcnbUJpLGzAGr4QQNcAm8UCswybRA+uLsHyD+kOi9Ifg/8CaoqH069Z2
e5BJ3Fm3JHE2ZprEZCtaImUS6fCU1rKNqGDBFYCveoq+q/EvgUbMTeFRFEv2QTo9
WfCX2HS6MzldbEhr5+XXF8OFne8d5XeQ62xUdfk/pr28DmjbbB8KsZxX38HUNhEk
MlLRwSrr7y2tMAKtvJt1Z8ZtC/5+00/dtBbLiFC5xrO3RMzeRgXdPQ5EYSbvF/fd
fVS9v6CWTx0hbolClAOGw2OHpsx06os4o5gT08bYFQ5e7HbLJD+5wfl7Y6/FNqAL
Jx0+v+eJtmhcwi5YE+drS44UsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKPw9H/M
3h4+ekxv8NVCgIYEYN9xMB8GA1UdIwQYMBaAFOYkQSpCeVibnsL6syIrqwYm0xJa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODMzNi8xOUY3NUE2NjAx
Q0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdKdWV3dnF6SWl1ckJpYlRF
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVpUkJLa0o1V0p1ZXd2cXpJaXVyQmliVEVsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODMzNi8xOUY3NUE2NjAxQ0QxMUVBQjg2NUVBMjJDNEY5QUUwMi81aVJCS2tKNVdK
dWV3dnF6SWl1ckJpYlRFbG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdq02Wamc6QeZAJ/6kGZPEQ3NyfFOiFS4xj8P4OJ+lVwxqbKjXyc+iAxPRBeQ
ABYJs8f3Rsn6CVUi5JYRGdjaoCj8bQQv/Z4irI+9LQG/7qEwCUxoECBsFjPGhb1Y
7RdaOCkpW+2wXC0NgMlV2dqYfquzyDyTwFZWK/4hgg82WWgIHSnEJuohdaHJgWwn
ulJ8ISvYQ3VbQWAfKm8Y8kS1JETadscza5ezmvWG4hiHuwyxL34JHSlb9Zq/7Otr
sp5+nNsTqvXWMtrgJk833aud776t8qET1Ebsujby2czCS3hPaDOCLgKKBguBdQLy
pqxpD3I7zMX6Xi7um5O2f+TZoA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:07:55 2026 by rpki-client