Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
File:                     kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json)
Hash identifier:          TqCpi3Y8SE0PsvigFfwMORjb4s7o0m4yOt3LR9TYQYM=
Subject key identifier:   48:3E:0E:9C:15:74:DB:7D:E2:C8:CF:99:5A:43:F2:6D:54:54:AF:5B
Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
Certificate issuer:       /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Certificate serial:       0AB2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
Manifest number:          0A9A
Signing time:             Tue 12 May 2026 16:06:43 +0000
Manifest this update:     Tue 12 May 2026 16:06:43 +0000
Manifest next update:     Tue 19 May 2026 16:06:43 +0000
Files and hashes:         1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: o+HzL+rze9/fiJFRMkBlSUGJDuCE2zqQWrPc4XmS1zk=)
                          2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: 6/hpOniUWZ3kaCUO3scuJGL4ThJjABMLCMX3Elyy0Vo=)
                          3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: H9NP/VYQvQD8I9QwYD5I5jN2r70DSUl3MHJ3J25IGvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
                          rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2738 (0xab2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
        Validity
            Not Before: May 12 16:06:43 2026 GMT
            Not After : May 19 16:06:43 2026 GMT
        Subject: CN=6a035013-6d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:45:96:03:38:35:96:1d:85:5a:b3:99:43:9e:
                    eb:07:58:d9:78:1c:1e:c1:ea:02:7e:3f:1d:ea:86:
                    83:5f:65:7f:a8:a4:85:22:b9:ef:82:4d:f7:77:3c:
                    fb:a6:c8:9f:14:7e:bb:4f:92:dd:69:20:ad:fa:c2:
                    cc:6b:cb:e4:d9:75:75:a8:4c:cb:1a:fa:3d:54:d9:
                    1d:5b:ea:2c:4b:2c:fa:40:11:fc:c7:ea:cf:f4:24:
                    ba:37:41:c0:01:c2:34:56:84:bf:9c:ac:6d:d8:48:
                    fd:85:e3:cb:72:97:9e:fd:3a:13:27:2b:f0:8f:40:
                    32:01:53:c5:e6:0d:33:3f:e1:df:e0:aa:38:63:ef:
                    ba:d5:73:b0:a4:74:da:ba:3f:c3:88:fc:98:ff:b0:
                    72:9d:fc:a5:34:4b:58:f2:98:17:64:e3:49:f3:56:
                    78:52:35:20:39:2c:9d:c6:88:44:88:f3:1b:73:cc:
                    c3:dc:7a:f1:1f:f4:37:ac:11:c5:81:39:22:81:c7:
                    ac:98:6d:f1:f5:e5:99:45:f7:81:f4:cf:9b:27:3d:
                    a8:2b:81:3f:66:d8:96:f2:df:32:07:1d:c3:57:76:
                    09:18:a2:9b:45:1d:6a:25:a5:dd:1d:69:d5:d9:71:
                    d8:9d:9f:4d:fb:51:d2:d2:3a:14:20:a0:56:38:6b:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3E:0E:9C:15:74:DB:7D:E2:C8:CF:99:5A:43:F2:6D:54:54:AF:5B
            X509v3 Authority Key Identifier:
                keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:53:92:d9:33:85:e9:e4:86:6b:a8:2f:45:90:f6:ba:17:39:
         aa:e6:61:73:2e:4f:48:13:e6:26:15:2d:12:fb:d5:e9:cc:00:
         5d:3b:fb:8c:1a:bf:aa:2d:45:2b:31:f5:b5:03:e7:fb:0b:1c:
         88:57:86:0a:7d:85:77:49:54:5c:3e:29:31:81:2a:7d:fa:26:
         92:04:0d:b6:05:6b:61:ed:a4:f5:b3:96:e0:51:a9:1f:51:a9:
         3a:98:3c:3d:e4:2c:b5:98:be:88:16:c1:2d:ee:10:30:fb:81:
         fb:ec:03:08:1e:bf:07:ae:72:0e:da:9a:fa:e9:71:ef:73:2a:
         ca:09:4a:30:e9:8b:c0:51:67:79:83:f0:de:91:6b:db:d7:e2:
         57:d2:07:0e:79:a5:ad:b4:67:10:96:bb:be:8b:5a:07:63:73:
         3b:7d:d9:f7:31:bb:c6:dd:0b:3c:10:3b:af:67:4d:3d:8a:4e:
         06:6c:71:b3:14:b1:9d:df:c4:f1:e5:83:98:06:b6:cc:54:cf:
         35:28:38:9c:10:00:b2:53:4e:e8:a3:25:e6:07:95:14:f6:e7:
         d5:64:bb:b1:1e:7d:63:6b:08:ed:ba:c1:e8:17:6b:43:33:10:
         22:f0:60:cc:fd:20:f0:7a:6c:1f:b1:f1:34:04:9f:c9:88:f3:
         31:7d:89:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx
MzE3NEJGQTcwHhcNMjYwNTEyMTYwNjQzWhcNMjYwNTE5MTYwNjQzWjAYMRYwFAYD
VQQDEw02YTAzNTAxMy02ZDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn0WWAzg1lh2FWrOZQ57rB1jZeBweweoCfj8d6oaDX2V/qKSFIrnvgk33dzz7
psifFH67T5LdaSCt+sLMa8vk2XV1qEzLGvo9VNkdW+osSyz6QBH8x+rP9CS6N0HA
AcI0VoS/nKxt2Ej9hePLcpee/ToTJyvwj0AyAVPF5g0zP+Hf4Ko4Y++61XOwpHTa
uj/DiPyY/7BynfylNEtY8pgXZONJ81Z4UjUgOSydxohEiPMbc8zD3HrxH/Q3rBHF
gTkigcesmG3x9eWZRfeB9M+bJz2oK4E/ZtiW8t8yBx3DV3YJGKKbRR1qJaXdHWnV
2XHYnZ9N+1HS0joUIKBWOGtMnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEg+DpwV
dNt94sjPmVpD8m1UVK9bMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF
RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2
NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN
ejR2Tmo0bU1CbW9URjB2NmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGFOS2TOF6eSGa6gvRZD2uhc5quZhcy5PSBPmJhUtEvvV6cwAXTv7jBq/qi1F
KzH1tQPn+wsciFeGCn2Fd0lUXD4pMYEqffomkgQNtgVrYe2k9bOW4FGpH1GpOpg8
PeQstZi+iBbBLe4QMPuB++wDCB6/B65yDtqa+ulx73MqyglKMOmLwFFneYPw3pFr
29fiV9IHDnmlrbRnEJa7votaB2NzO33Z9zG7xt0LPBA7r2dNPYpOBmxxsxSxnd/E
8eWDmAa2zFTPNSg4nBAAslNO6KMl5geVFPbn1WS7sR59Y2sI7brB6BdrQzMQIvBg
zP0g8HpsH7HxNASfyYjzMX2JHw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:29:15 2026 by rpki-client