Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
File:                     It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json)
Hash identifier:          ta9iXwrgLqYPlAw2DTnZ/NdRfBEDBui3WyHU8v9gHzY=
Subject key identifier:   66:3A:0D:A4:79:1A:5E:F1:84:89:54:89:DA:6F:79:72:79:5B:A7:A8
Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
Certificate issuer:       /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
Manifest number:          0144
Signing time:             Wed 13 May 2026 05:21:13 +0000
Manifest this update:     Wed 13 May 2026 05:21:13 +0000
Manifest next update:     Wed 20 May 2026 05:21:13 +0000
Files and hashes:         1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: scMg0rgpdMNHCaBeb12xqcQVnovY89PN3RYSlk7/QzE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
                          rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
        Validity
            Not Before: May 13 05:21:13 2026 GMT
            Not After : May 20 05:21:13 2026 GMT
        Subject: CN=6a040a49-af66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:41:eb:42:17:4e:d4:f0:fa:e1:0a:04:0e:16:
                    81:de:07:52:91:21:08:66:5c:11:d5:36:8e:0a:cb:
                    44:4b:ca:5f:16:51:f9:31:26:02:df:d8:ba:e5:fc:
                    fb:43:00:a1:9f:a0:d5:d1:c2:bd:c5:47:11:11:2e:
                    9d:b5:34:c2:97:3e:00:a5:7a:20:da:24:e1:41:14:
                    f6:94:f3:90:a0:59:f5:ed:9d:c5:8c:69:f1:a2:d8:
                    0e:f1:26:5b:ef:29:be:36:6b:ad:2e:df:90:79:01:
                    e6:bd:df:4e:87:10:00:fc:50:17:46:5d:91:81:e8:
                    4d:22:40:50:cd:00:93:a5:70:e4:78:58:18:4c:3b:
                    b1:8b:bb:e5:8f:bd:80:86:f7:d8:40:8d:e2:0a:b3:
                    98:b7:f3:11:18:0d:62:d3:6f:2f:ae:bd:21:7d:41:
                    b6:87:72:07:57:ba:5c:be:53:11:57:5b:df:b5:1b:
                    68:d2:d8:09:01:c9:d2:11:fe:c5:5f:18:c1:ed:1b:
                    65:3d:49:f3:0d:2e:aa:46:8c:12:be:f7:4a:14:2e:
                    30:ae:51:05:73:fc:f4:64:13:44:8c:0b:c5:aa:1e:
                    12:23:9d:b8:59:8a:b4:07:8d:cb:70:5f:0f:ec:73:
                    55:d3:3b:da:a1:03:2a:71:03:ae:cd:36:c6:fe:73:
                    43:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3A:0D:A4:79:1A:5E:F1:84:89:54:89:DA:6F:79:72:79:5B:A7:A8
            X509v3 Authority Key Identifier:
                keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:60:47:75:03:08:08:d0:49:24:cd:6f:26:30:c5:94:bd:11:
         13:19:21:39:8c:58:b8:43:6e:db:b5:bd:74:84:b7:8f:ea:26:
         ea:61:a7:be:c3:a6:e4:48:7e:95:2a:8e:aa:e7:42:69:f8:34:
         66:dc:2f:36:9f:c7:8b:0c:7d:b5:38:f9:f2:33:7f:33:9f:6f:
         f5:a3:b7:81:53:54:bc:30:b3:eb:42:9f:3f:60:e9:4c:62:31:
         5d:94:c7:a8:13:47:6d:1b:c1:c1:fd:8e:4d:55:ea:90:7b:ff:
         32:40:da:5f:a4:e9:90:83:d6:a4:5a:78:9d:99:f6:c0:5a:cf:
         cd:94:2e:c4:c0:c8:70:81:d6:d3:2f:04:8b:b2:7c:30:eb:05:
         f8:8f:92:db:b6:a2:5e:2f:c3:67:ba:b0:e1:d3:a6:62:d0:29:
         7d:bb:68:06:d4:40:4e:a9:55:1b:61:ff:e4:2f:bc:df:b4:91:
         be:d2:08:87:fb:1a:b8:52:f2:6f:a3:e2:50:31:14:9b:61:02:
         0b:24:75:d8:cd:54:ab:01:89:b1:99:61:9b:29:78:d9:32:8c:
         dd:d4:56:20:5d:1e:44:74:b1:c7:e2:60:f3:8e:f3:3f:15:19:
         aa:de:38:04:ab:d0:91:39:39:17:7a:df:3b:51:86:c1:dc:de:
         36:93:f4:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw
RUQwRDQ0MzYwHhcNMjYwNTEzMDUyMTEzWhcNMjYwNTIwMDUyMTEzWjAYMRYwFAYD
VQQDEw02YTA0MGE0OS1hZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxUHrQhdO1PD64QoEDhaB3gdSkSEIZlwR1TaOCstES8pfFlH5MSYC39i65fz7
QwChn6DV0cK9xUcRES6dtTTClz4ApXog2iThQRT2lPOQoFn17Z3FjGnxotgO8SZb
7ym+NmutLt+QeQHmvd9OhxAA/FAXRl2RgehNIkBQzQCTpXDkeFgYTDuxi7vlj72A
hvfYQI3iCrOYt/MRGA1i028vrr0hfUG2h3IHV7pcvlMRV1vftRto0tgJAcnSEf7F
XxjB7RtlPUnzDS6qRowSvvdKFC4wrlEFc/z0ZBNEjAvFqh4SI524WYq0B43LcF8P
7HNV0zvaoQMqcQOuzTbG/nND/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGY6DaR5
Gl7xhIlUidpveXJ5W6eoMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw
NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O
NmlJUi1idkpwMTBPME5SRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcmBHdQMICNBJJM1vJjDFlL0RExkhOYxYuENu27W9dIS3j+om6mGnvsOm5Eh+
lSqOqudCafg0ZtwvNp/Hiwx9tTj58jN/M59v9aO3gVNUvDCz60KfP2DpTGIxXZTH
qBNHbRvBwf2OTVXqkHv/MkDaX6TpkIPWpFp4nZn2wFrPzZQuxMDIcIHW0y8Ei7J8
MOsF+I+S27aiXi/DZ7qw4dOmYtApfbtoBtRATqlVG2H/5C+837SRvtIIh/sauFLy
b6PiUDEUm2ECCyR12M1UqwGJsZlhmyl42TKM3dRWIF0eRHSxx+Jg847zPxUZqt44
BKvQkTk5F3rfO1GGwdzeNpP0tg==
-----END CERTIFICATE-----
Generated at Wed May 13 13:10:39 2026 by rpki-client