Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
File:                     rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json)
Hash identifier:          +OzMrxtWMGPtc0cBpeQX08InMFUoRLYYPPlyjo7LUdI=
Subject key identifier:   EA:A1:94:BB:86:F0:11:AE:29:1C:B8:65:2C:F8:9B:FB:DE:0F:B0:7E
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Certificate issuer:       /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
Manifest number:          01A3
Signing time:             Mon 11 May 2026 04:16:49 +0000
Manifest this update:     Mon 11 May 2026 04:16:48 +0000
Manifest next update:     Mon 18 May 2026 04:16:48 +0000
Files and hashes:         1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: WIptang3bhFYlfMZJW6FsnUMEH7sFccflnDAaoaEaQ0=)
                          2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: zQuRWZynPjX+xVieuFFOjcx7urcSlA8n96bIrvyW0V4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
        Validity
            Not Before: May 11 04:16:48 2026 GMT
            Not After : May 18 04:16:48 2026 GMT
        Subject: CN=6a015830-fafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:30:95:7d:bd:0a:48:56:4f:1b:ad:6b:ab:7a:
                    22:eb:f6:c8:74:bd:c2:fc:49:a1:a5:b9:46:21:e5:
                    0a:ea:d2:ca:65:ba:d1:a0:fa:e9:b9:d3:e9:d1:1a:
                    63:51:fd:55:71:6b:b6:37:22:2d:15:7d:3e:14:e5:
                    ed:73:a4:2e:99:40:e4:4c:4d:ba:4f:8f:26:bf:df:
                    3a:70:af:16:0b:64:a5:14:b3:6c:4a:39:b1:f3:dc:
                    4f:d9:e2:69:9b:20:11:9b:53:8e:2e:e3:a2:3f:e8:
                    75:63:12:4e:5a:6e:a2:1a:a7:21:cd:57:e4:0d:68:
                    8e:04:3e:3e:74:39:1d:c6:b4:de:c2:0c:19:8a:4a:
                    35:2d:c4:ad:a4:57:f2:c1:ab:d2:f6:eb:23:12:dd:
                    27:cf:2e:de:85:12:d3:d3:65:83:78:ba:50:58:be:
                    02:9f:50:1a:38:15:43:3f:39:9f:1d:1f:da:85:50:
                    5d:0a:9f:a6:4a:b4:f3:07:fe:d8:5a:62:c1:0b:b2:
                    a1:7f:1f:14:95:85:5d:92:90:ab:20:6f:39:95:1f:
                    f0:d2:51:59:cf:64:ca:61:72:70:9b:e6:2a:dd:9e:
                    38:f2:1a:d6:20:8e:57:86:99:01:0a:ff:ff:06:9c:
                    ba:99:1f:a0:10:1d:3d:be:c3:74:66:7a:b6:de:57:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A1:94:BB:86:F0:11:AE:29:1C:B8:65:2C:F8:9B:FB:DE:0F:B0:7E
            X509v3 Authority Key Identifier:
                keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a1:f5:47:14:eb:2d:e8:c6:51:c6:70:30:da:93:6b:46:0a:
         9b:41:8d:e8:54:3b:b7:02:73:19:b3:29:7b:ad:c5:52:23:03:
         77:48:e9:da:24:99:81:8f:29:1b:70:3c:c4:de:64:dd:ea:20:
         30:12:b3:48:c9:29:66:2c:0b:a2:e5:03:f5:79:e9:53:6b:13:
         29:24:89:61:c5:84:0a:94:54:6f:84:8b:b3:7b:12:33:3c:81:
         bf:81:76:7f:e3:d2:fa:65:e9:d0:63:dd:0b:0b:b2:3e:f6:23:
         22:03:c6:80:0c:c7:43:c1:16:63:4b:28:93:91:35:1c:f4:a2:
         a4:b2:c7:aa:c0:82:50:3e:7c:c1:79:c8:ab:1d:eb:a3:9e:4e:
         95:c2:b3:ab:9c:2e:30:e5:3b:12:a4:e2:94:b2:a7:09:0b:34:
         18:b8:61:e0:e8:89:c5:3e:38:cd:fe:fe:af:0e:31:55:c1:7f:
         eb:cb:62:7d:0e:c2:86:4c:3a:8f:b3:57:98:15:bb:53:96:9b:
         9d:9a:ca:94:61:0b:1e:8e:41:72:20:0c:37:7c:ee:5a:65:d8:
         e7:8d:4b:2d:23:b4:22:e5:12:5c:60:e2:1a:0c:43:f2:3a:cf:
         48:5d:1a:b1:29:e3:6a:b1:a8:d6:5e:57:a9:67:75:d9:8a:e8:
         f2:10:a1:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyNDkxMTAvBgNVBAUTKEFDRTI4REFCRTUzNjQ5NjM3RkE2RTRFMzIxREUxQjYz
NDYzQjgzQ0YwHhcNMjYwNTExMDQxNjQ4WhcNMjYwNTE4MDQxNjQ4WjAYMRYwFAYD
VQQDEw02YTAxNTgzMC1mYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2TCVfb0KSFZPG61rq3oi6/bIdL3C/EmhpblGIeUK6tLKZbrRoPrpudPp0Rpj
Uf1VcWu2NyItFX0+FOXtc6QumUDkTE26T48mv986cK8WC2SlFLNsSjmx89xP2eJp
myARm1OOLuOiP+h1YxJOWm6iGqchzVfkDWiOBD4+dDkdxrTewgwZiko1LcStpFfy
wavS9usjEt0nzy7ehRLT02WDeLpQWL4Cn1AaOBVDPzmfHR/ahVBdCp+mSrTzB/7Y
WmLBC7Khfx8UlYVdkpCrIG85lR/w0lFZz2TKYXJwm+Yq3Z448hrWII5XhpkBCv//
Bpy6mR+gEB09vsN0Znq23lfQKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqhlLuG
8BGuKRy4ZSz4m/veD7B+MB8GA1UdIwQYMBaAFKzijavlNkljf6bk4yHeG2NGO4PP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS9BMUYyMzQzQ0Qx
NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNXTl9wdVRqSWQ0YlkwWTdn
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JPS05xLVUyU1dOX3B1VGpJZDRiWTBZN2c4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjI0OS9BMUYyMzQzQ0QxNzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNX
Tl9wdVRqSWQ0YlkwWTdnODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcqH1RxTrLejGUcZwMNqTa0YKm0GN6FQ7twJzGbMpe63FUiMDd0jp2iSZgY8p
G3A8xN5k3eogMBKzSMkpZiwLouUD9XnpU2sTKSSJYcWECpRUb4SLs3sSMzyBv4F2
f+PS+mXp0GPdCwuyPvYjIgPGgAzHQ8EWY0sok5E1HPSipLLHqsCCUD58wXnIqx3r
o55OlcKzq5wuMOU7EqTilLKnCQs0GLhh4OiJxT44zf7+rw4xVcF/68tifQ7Chkw6
j7NXmBW7U5abnZrKlGELHo5BciAMN3zuWmXY541LLSO0IuUSXGDiGgxD8jrPSF0a
sSnjarGo1l5XqWd12Yro8hChAQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:44:20 2026 by rpki-client