Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
File:                     _2UQNIiSuqqxtzMf9wTDQbiaGHY.mft (raw, json)
Hash identifier:          usIdmt/WmX5rsV64N8D4pg5ZCnOitdfLBVKJNglxcgQ=
Subject key identifier:   8D:5D:42:57:23:2C:14:6B:B5:3B:29:5D:D8:65:D5:7E:4B:B6:08:6F
Authority key identifier: FF:65:10:34:88:92:BA:AA:B1:B7:33:1F:F7:04:C3:41:B8:9A:18:76
Certificate issuer:       /CN=A9189C03/serialNumber=FF6510348892BAAAB1B7331FF704C341B89A1876
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
Manifest number:          37
Signing time:             Wed 13 May 2026 08:43:25 +0000
Manifest this update:     Wed 13 May 2026 08:43:25 +0000
Manifest next update:     Wed 20 May 2026 08:43:25 +0000
Files and hashes:         1: _2UQNIiSuqqxtzMf9wTDQbiaGHY.crl (hash: GUKqaHbQiiJSkgl342dKx96vH/sKMAjs2BYwzDt48BA=)
                          2: C0B4841002B011F19551BA913E3D8C67.roa (hash: mlBDMtNCdtUEDeCgXegQmevuYhexij5GGyJcwWWK/bM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.crl
                          rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189C03, serialNumber=FF6510348892BAAAB1B7331FF704C341B89A1876
        Validity
            Not Before: May 13 08:43:25 2026 GMT
            Not After : May 20 08:43:25 2026 GMT
        Subject: CN=6a0439ad-b52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:4f:21:1b:a9:3c:8a:66:ce:cc:13:4f:92:
                    2b:b8:41:9c:38:3f:84:f3:ff:e4:85:bf:42:35:df:
                    24:ff:20:d1:f9:2d:54:8f:38:b3:4c:2b:fb:78:fb:
                    97:39:36:1d:b3:d9:bf:8c:c0:81:12:4f:54:1f:1f:
                    a8:91:fe:2f:ae:7e:ed:0a:88:dd:fe:03:62:22:6f:
                    85:d8:46:16:8e:3e:39:25:fb:7b:34:92:31:5d:a9:
                    6a:36:4c:3f:37:2d:32:4f:af:66:8f:3e:1e:0f:99:
                    96:f2:5c:52:f6:ba:40:07:67:6c:59:8b:34:3b:de:
                    f9:ff:ce:b3:e2:c4:6c:30:cb:96:74:c7:6e:dc:91:
                    b5:15:69:66:c9:c5:3e:c7:27:4f:4e:2d:fe:71:02:
                    9e:de:30:c9:f0:6b:1d:c9:05:15:77:4d:81:9a:6b:
                    48:ea:c8:25:4d:f9:5a:93:7d:8d:9b:d2:b5:fe:eb:
                    2f:cc:df:3a:2e:79:b0:1c:31:6c:ec:69:1b:3f:c5:
                    a8:a3:81:16:04:f1:09:6a:86:ea:51:54:7c:05:13:
                    90:58:cd:04:0f:cd:1c:dd:12:df:a0:ee:f0:8c:93:
                    31:5d:81:a3:a5:61:2b:cb:99:07:d0:e6:c5:3f:20:
                    79:3b:8e:4e:e3:ef:31:2a:75:28:ea:86:db:d1:d4:
                    ae:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5D:42:57:23:2C:14:6B:B5:3B:29:5D:D8:65:D5:7E:4B:B6:08:6F
            X509v3 Authority Key Identifier:
                keyid:FF:65:10:34:88:92:BA:AA:B1:B7:33:1F:F7:04:C3:41:B8:9A:18:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:27:4d:52:e8:a4:78:a2:22:32:b3:42:cc:7c:d5:b3:af:9d:
         9d:5d:d5:43:68:5c:09:75:71:af:09:38:7e:f2:ab:3d:c6:fe:
         45:8e:dc:6e:16:db:5f:ac:7d:dc:16:41:c8:34:02:70:0e:93:
         43:4e:93:87:0f:d5:60:c0:a7:98:08:6f:08:13:6f:38:c2:93:
         5f:15:fe:11:c5:a6:bd:8c:f8:1c:e2:f3:32:d0:78:96:0c:74:
         40:26:f4:ac:dc:aa:c9:aa:4a:93:a0:46:1f:e6:9d:28:76:59:
         92:49:40:fe:48:8e:57:d0:f5:b7:dd:bb:bd:94:28:8c:c7:56:
         d1:11:43:ef:86:c7:18:9f:ba:66:13:ee:b2:d9:74:e6:79:1e:
         db:68:89:7d:b4:16:e0:74:13:db:65:d0:68:47:f8:72:78:e0:
         da:f2:56:e7:e0:f5:f3:7a:6b:3c:a9:d7:50:bd:45:29:c6:d3:
         3d:45:ae:78:f7:19:2b:7e:4e:e0:26:13:cc:7d:8a:67:90:0c:
         09:8e:76:bd:83:ef:1e:4b:ea:c0:e1:e7:9f:1d:9e:ac:c0:bd:
         b6:7f:07:25:55:1d:c5:f1:f8:fe:30:de:65:f0:82:cc:17:4a:
         9e:02:70:09:ce:fc:df:70:f2:02:d2:0f:8e:92:54:f2:aa:ea:
         67:ee:73:35
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
OUMwMzExMC8GA1UEBRMoRkY2NTEwMzQ4ODkyQkFBQUIxQjczMzFGRjcwNEMzNDFC
ODlBMTg3NjAeFw0yNjA1MTMwODQzMjVaFw0yNjA1MjAwODQzMjVaMBgxFjAUBgNV
BAMTDTZhMDQzOWFkLWI1MmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFHU8hG6k8imbOzBNPkiu4QZw4P4Tz/+SFv0I13yT/INH5LVSPOLNMK/t4+5c5
Nh2z2b+MwIEST1QfH6iR/i+ufu0KiN3+A2Iib4XYRhaOPjkl+3s0kjFdqWo2TD83
LTJPr2aPPh4PmZbyXFL2ukAHZ2xZizQ73vn/zrPixGwwy5Z0x27ckbUVaWbJxT7H
J09OLf5xAp7eMMnwax3JBRV3TYGaa0jqyCVN+VqTfY2b0rX+6y/M3zouebAcMWzs
aRs/xaijgRYE8QlqhupRVHwFE5BYzQQPzRzdEt+g7vCMkzFdgaOlYSvLmQfQ5sU/
IHk7jk7j7zEqdSjqhtvR1K6fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjV1CVyMs
FGu1Oyld2GXVfku2CG8wHwYDVR0jBBgwFoAU/2UQNIiSuqqxtzMf9wTDQbiaGHYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5QzAzL0RCNjkxRDBBMDE2
ODExRjE4MEUzOEZEMzU5NkY1NkJDL18yVVFOSWlTdXFxeHR6TWY5d1REUWJpYUdI
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvXzJVUU5JaVN1cXF4dHpNZjl3VERRYmlhR0hZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5
QzAzL0RCNjkxRDBBMDE2ODExRjE4MEUzOEZEMzU5NkY1NkJDL18yVVFOSWlTdXFx
eHR6TWY5d1REUWJpYUdIWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAYJ01S6KR4oiIys0LMfNWzr52dXdVDaFwJdXGvCTh+8qs9xv5FjtxuFttfrH3c
FkHINAJwDpNDTpOHD9VgwKeYCG8IE284wpNfFf4Rxaa9jPgc4vMy0HiWDHRAJvSs
3KrJqkqToEYf5p0odlmSSUD+SI5X0PW33bu9lCiMx1bREUPvhscYn7pmE+6y2XTm
eR7baIl9tBbgdBPbZdBoR/hyeODa8lbn4PXzems8qddQvUUpxtM9Ra549xkrfk7g
JhPMfYpnkAwJjna9g+8eS+rA4eefHZ6swL22fwclVR3F8fj+MN5l8ILMF0qeAnAJ
zvzfcPIC0g+OklTyqupn7nM1
-----END CERTIFICATE-----
Generated at Wed May 13 13:01:30 2026 by rpki-client