Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File:                     I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier:          pPQNeaGdNJ9Y5O86pkshtgvfPnHax3s5UIrXiuxCF1A=
Subject key identifier:   36:6B:F1:B2:E6:1A:94:D0:ED:59:CA:98:A5:29:BE:50:31:44:ED:FA
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer:       /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial:       0CDC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number:          0CC3
Signing time:             Tue 12 May 2026 18:33:43 +0000
Manifest this update:     Tue 12 May 2026 18:33:42 +0000
Manifest next update:     Tue 19 May 2026 18:33:42 +0000
Files and hashes:         1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: /jet2dn3Wb3Z3sroWjPD+/kKRXoj7GWDL0fbsR89JnQ=)
                          2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: mKkuVSeTZtVuG7BfqaqUZzcHeF9XMKmK1adCEnjlrRM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
                          rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3292 (0xcdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
        Validity
            Not Before: May 12 18:33:42 2026 GMT
            Not After : May 19 18:33:42 2026 GMT
        Subject: CN=6a037287-a449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:24:99:c0:cf:68:01:6f:a9:5c:b3:9d:00:
                    3e:4d:55:0c:42:46:c0:7c:ad:f4:14:0f:7b:65:1b:
                    19:65:bc:67:70:11:c6:af:52:5c:1f:ec:a8:93:cc:
                    4a:17:df:09:ab:a3:49:c5:fb:63:29:50:c3:98:4b:
                    9d:ec:f5:03:85:17:90:95:c3:97:b4:14:ae:7d:fe:
                    07:6d:d3:b6:31:b6:d2:cc:86:c0:a5:f4:40:bd:78:
                    ef:87:8f:00:a6:17:f7:f7:8d:fd:96:3a:92:5f:9b:
                    49:4d:25:f6:13:b7:50:44:cc:b9:6c:c6:56:5e:3d:
                    ad:fb:ac:b1:1f:3d:3d:5e:c1:d4:f3:32:69:59:9f:
                    a7:96:6c:3b:ff:e2:6e:30:03:7f:32:0d:18:35:0b:
                    31:4d:a3:39:bb:3c:e5:c1:9f:ce:82:80:e5:ff:b7:
                    21:6c:04:25:f8:bc:a1:ae:0c:fa:d8:20:60:51:66:
                    00:3a:52:84:f2:14:2c:69:72:db:90:3a:e5:85:2d:
                    f6:27:9e:4e:f1:ec:6e:2a:83:94:d3:0b:7f:18:f2:
                    cd:43:0b:16:9d:f1:9f:02:09:f7:1e:1a:85:56:27:
                    f0:ae:9c:a0:c4:ea:a7:a0:12:a2:79:e8:42:59:1b:
                    b3:1e:43:df:ba:e7:5e:59:a3:e3:bd:19:69:21:a9:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6B:F1:B2:E6:1A:94:D0:ED:59:CA:98:A5:29:BE:50:31:44:ED:FA
            X509v3 Authority Key Identifier:
                keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:33:9f:0b:64:53:58:2c:19:eb:2d:11:6f:d2:43:23:8b:0a:
         68:2e:9a:83:cb:75:1b:55:01:b6:ab:7c:1e:d9:31:e0:52:c3:
         a0:27:44:8a:ce:ec:b6:89:11:ad:94:d6:0b:4d:47:45:5a:7e:
         6d:c4:1a:7e:b1:33:ef:93:b4:0b:9d:4a:70:3a:b3:8c:0c:fa:
         3d:db:1b:18:b2:96:2a:7f:01:de:8e:9b:60:71:b5:48:3f:ad:
         3a:bd:93:5d:ea:71:9f:75:eb:ab:f3:90:5a:6e:14:25:ef:5b:
         ca:4c:61:db:15:28:6c:2e:67:92:e6:78:dc:39:4c:97:b3:f3:
         46:8a:85:c0:ac:16:67:75:7d:ed:b2:14:ef:66:0a:53:3b:a0:
         d4:2a:52:12:ea:f0:4f:4b:6a:68:02:b8:6e:20:a7:2d:62:db:
         be:27:7d:52:ee:d6:06:c3:18:e6:ab:1c:7e:e5:63:58:f7:8f:
         6d:3a:e9:35:4d:a4:81:53:ba:bb:8e:6b:51:a8:24:32:1e:5c:
         b3:26:83:97:68:d0:35:ae:4a:ba:0b:fe:cb:d2:36:6f:70:9f:
         f9:f0:6c:08:a7:1e:61:65:d9:48:32:c7:11:1e:3f:33:2c:8f:
         34:74:66:19:04:50:68:8c:a5:57:15:7f:5a:99:4a:39:e1:75:
         c5:70:d3:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5
OTI1RkJENEYwHhcNMjYwNTEyMTgzMzQyWhcNMjYwNTE5MTgzMzQyWjAYMRYwFAYD
VQQDEw02YTAzNzI4Ny1hNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvFwkmcDPaAFvqVyznQA+TVUMQkbAfK30FA97ZRsZZbxncBHGr1JcH+yok8xK
F98Jq6NJxftjKVDDmEud7PUDhReQlcOXtBSuff4HbdO2MbbSzIbApfRAvXjvh48A
phf39439ljqSX5tJTSX2E7dQRMy5bMZWXj2t+6yxHz09XsHU8zJpWZ+nlmw7/+Ju
MAN/Mg0YNQsxTaM5uzzlwZ/OgoDl/7chbAQl+Lyhrgz62CBgUWYAOlKE8hQsaXLb
kDrlhS32J55O8exuKoOU0wt/GPLNQwsWnfGfAgn3HhqFVifwrpygxOqnoBKieehC
WRuzHkPfuudeWaPjvRlpIane9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZr8bLm
GpTQ7VnKmKUpvlAxRO36MB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0
MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2
VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj
TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoTOfC2RTWCwZ6y0Rb9JDI4sKaC6ag8t1G1UBtqt8Htkx4FLDoCdEis7stokR
rZTWC01HRVp+bcQafrEz75O0C51KcDqzjAz6PdsbGLKWKn8B3o6bYHG1SD+tOr2T
Xepxn3Xrq/OQWm4UJe9bykxh2xUobC5nkuZ43DlMl7PzRoqFwKwWZ3V97bIU72YK
Uzug1CpSEurwT0tqaAK4biCnLWLbvid9Uu7WBsMY5qscfuVjWPePbTrpNU2kgVO6
u45rUagkMh5csyaDl2jQNa5Kugv+y9I2b3Cf+fBsCKceYWXZSDLHER4/MyyPNHRm
GQRQaIylVxV/WplKOeF1xXDTdw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:12:48 2026 by rpki-client