Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
File:                     B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json)
Hash identifier:          XLtLTI5LsipXhenjVkXYc7mOZ/pjauXgS4PZkSXlLAQ=
Subject key identifier:   C3:E0:0A:D1:0A:57:C0:1B:66:71:5F:F1:7B:A1:80:82:11:56:CD:4E
Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
Certificate issuer:       /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
Manifest number:          011C
Signing time:             Wed 13 May 2026 05:55:06 +0000
Manifest this update:     Wed 13 May 2026 05:55:05 +0000
Manifest next update:     Wed 20 May 2026 05:55:05 +0000
Files and hashes:         1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: DsBN4EdKF355E6CRo+C1B2GdJZ50yWW5Xmltaf1tI1E=)
                          2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: PJLa3dcXC2/TqvhR77SxkhOWTThse4ZX840dFNg6P88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl
                          rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
        Validity
            Not Before: May 13 05:55:05 2026 GMT
            Not After : May 20 05:55:05 2026 GMT
        Subject: CN=6a04123a-2709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ba:8f:d4:46:4f:ca:29:3b:86:cf:03:dc:fb:
                    15:a9:31:1d:eb:9c:33:ef:4a:bf:48:68:15:c2:6d:
                    eb:d7:63:6f:27:7e:55:82:c0:17:15:15:95:52:b6:
                    fd:b7:bb:da:e8:e0:a8:aa:5f:15:8e:e0:a4:08:96:
                    f7:3f:ed:53:2e:48:0a:b4:ee:d5:6f:d0:12:fd:1e:
                    e8:12:6c:34:b1:3f:c7:d6:5a:0d:b6:92:ee:e0:8d:
                    c3:e6:16:e6:f8:6f:bc:fb:f2:f6:2a:13:8b:5a:15:
                    55:97:6e:72:a8:09:45:5d:1d:08:02:31:d6:4e:c6:
                    dd:88:73:2f:93:42:86:32:fe:91:a6:a8:82:4a:84:
                    c7:24:b3:6a:32:37:7f:f7:75:a8:75:72:8c:bc:9e:
                    c4:a3:f8:88:25:dd:80:90:0c:82:d0:6d:10:71:ec:
                    1c:16:bc:74:95:66:3b:a4:4c:c1:12:4b:61:4e:e9:
                    46:0c:5f:96:6d:a8:ac:c0:3c:36:fd:3c:43:13:96:
                    4e:38:dc:e9:d5:17:7d:60:18:49:fb:f0:98:59:d5:
                    39:7a:03:5c:02:e0:15:d5:d0:bf:fb:1b:f5:cd:49:
                    95:5d:90:52:1c:26:26:af:26:68:47:db:89:7c:30:
                    7b:8f:1e:a2:3e:85:1c:08:cd:10:4d:c1:09:35:05:
                    f2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E0:0A:D1:0A:57:C0:1B:66:71:5F:F1:7B:A1:80:82:11:56:CD:4E
            X509v3 Authority Key Identifier:
                keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:cf:37:c3:07:7a:14:d7:4c:95:fd:1b:16:f5:be:4b:bf:f3:
         cd:1f:fd:b9:a5:04:5e:59:c1:b9:5b:9f:b1:9a:5b:89:46:90:
         f6:50:ba:56:24:d1:7f:05:a6:78:e7:ba:07:15:e1:46:20:e7:
         db:87:3e:0e:ff:86:1d:56:9a:f1:42:06:20:05:67:93:24:1a:
         1c:7d:ad:6b:e2:bd:37:a5:19:b1:8d:6f:35:65:23:1d:da:c1:
         68:27:5b:83:5a:8e:ae:52:a2:ed:fb:0d:93:af:04:2c:c2:c4:
         19:92:81:08:07:e4:8e:19:90:8c:cf:04:e9:60:52:00:c1:04:
         da:d1:2b:90:41:af:e8:04:fe:a5:ce:9a:70:dd:64:d5:06:d6:
         c1:03:b9:c4:24:47:0a:6a:b9:74:b0:44:1e:21:92:00:a8:0c:
         7a:5c:d5:d3:b4:3e:d6:9b:2c:57:b5:32:2d:7f:90:df:f0:de:
         33:05:23:29:7e:7a:c0:13:ee:0e:6d:56:f5:e5:ba:f5:ec:93:
         86:e8:fc:08:82:13:98:4f:9f:dc:02:07:01:a8:8d:5b:2e:db:
         ba:47:d8:8e:8d:98:3b:b3:16:d4:54:cb:4f:c4:c7:21:a2:3d:
         98:16:80:eb:16:b1:08:e8:2d:05:cb:f4:b5:5c:d3:a0:ae:23:
         5f:d8:81:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBEM0UxMTAvBgNVBAUTKDA3RjMxQjQ3NDcxM0IzQTE1MkM2QTVGOEY0OERFRDIw
OTdEQzI0MUYwHhcNMjYwNTEzMDU1NTA1WhcNMjYwNTIwMDU1NTA1WjAYMRYwFAYD
VQQDEw02YTA0MTIzYS0yNzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyrqP1EZPyik7hs8D3PsVqTEd65wz70q/SGgVwm3r12NvJ35VgsAXFRWVUrb9
t7va6OCoql8VjuCkCJb3P+1TLkgKtO7Vb9AS/R7oEmw0sT/H1loNtpLu4I3D5hbm
+G+8+/L2KhOLWhVVl25yqAlFXR0IAjHWTsbdiHMvk0KGMv6RpqiCSoTHJLNqMjd/
93WodXKMvJ7Eo/iIJd2AkAyC0G0QcewcFrx0lWY7pEzBEkthTulGDF+WbaiswDw2
/TxDE5ZOONzp1Rd9YBhJ+/CYWdU5egNcAuAV1dC/+xv1zUmVXZBSHCYmryZoR9uJ
fDB7jx6iPoUcCM0QTcEJNQXy+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPgCtEK
V8AbZnFf8XuhgIIRVs1OMB8GA1UdIwQYMBaAFAfzG0dHE7OhUsal+PSN7SCX3CQf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CREVFOUUyNDlG
RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2RlN4cVg0OUkzdElKZmNK
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MEQzRS9CREVFOUUyNDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2
RlN4cVg0OUkzdElKZmNKQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAes83wwd6FNdMlf0bFvW+S7/zzR/9uaUEXlnBuVufsZpbiUaQ9lC6ViTRfwWm
eOe6BxXhRiDn24c+Dv+GHVaa8UIGIAVnkyQaHH2ta+K9N6UZsY1vNWUjHdrBaCdb
g1qOrlKi7fsNk68ELMLEGZKBCAfkjhmQjM8E6WBSAMEE2tErkEGv6AT+pc6acN1k
1QbWwQO5xCRHCmq5dLBEHiGSAKgMelzV07Q+1pssV7UyLX+Q3/DeMwUjKX56wBPu
Dm1W9eW69eyThuj8CIITmE+f3AIHAaiNWy7bukfYjo2YO7MW1FTLT8THIaI9mBaA
6xaxCOgtBcv0tVzToK4jX9iBdg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:53 2026 by rpki-client