Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft
File:                     X9vV31MtLFYgb3sRLnu7MFejmZA.mft (raw, json)
Hash identifier:          NdeJo5AP2bCLSzeUUrPYjL08kBnlG08a9C9o3RIHqys=
Subject key identifier:   EE:C1:66:9A:F0:EB:47:D2:1B:62:57:14:09:5E:F8:30:CF:DB:70:A5
Authority key identifier: 5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90
Certificate issuer:       /CN=A9196296/serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft
Manifest number:          019F
Signing time:             Wed 25 Mar 2026 03:29:12 +0000
Manifest this update:     Wed 25 Mar 2026 03:29:11 +0000
Manifest next update:     Wed 01 Apr 2026 03:29:11 +0000
Files and hashes:         1: X9vV31MtLFYgb3sRLnu7MFejmZA.crl (hash: KjxbiOgbxtrANnMTFA5QbXzeYlC6BlcsYyHHfwuRwjM=)
                          2: 9A28A416AF5B11EE9B50AD27C4F9AE02.roa (hash: NNMJEwajRGyGNObx6qqodqRkuqhktQjk2L5j1hukx9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl
                          rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196296, serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990
        Validity
            Not Before: Mar 25 03:29:11 2026 GMT
            Not After : Apr  1 03:29:11 2026 GMT
        Subject: CN=69c35688-a46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:b2:15:c5:da:8d:81:96:d7:b9:11:80:9d:
                    36:00:ea:4b:b9:95:3e:45:f5:5e:59:ce:d1:4d:8d:
                    9b:b3:d5:fb:9f:87:23:9f:b9:2f:68:45:6c:d6:b1:
                    8a:d0:e1:4e:94:9e:50:c7:e9:b1:5a:67:32:66:32:
                    55:3a:9f:26:ae:e6:9a:4b:6d:dc:92:7b:23:7e:f6:
                    f9:08:eb:34:1c:d4:7d:35:14:ed:94:76:50:54:ac:
                    ce:39:99:a4:c8:a0:b5:eb:48:c2:eb:19:ed:5f:4c:
                    a2:98:bf:7f:ca:b5:d8:09:55:8f:3d:71:58:5d:f4:
                    73:74:99:0c:aa:4c:28:10:ec:13:21:59:c9:12:e8:
                    26:ec:40:ba:02:d4:76:73:91:aa:ab:37:95:c9:83:
                    c3:9c:f0:50:b8:e4:4d:9d:3c:24:89:5b:20:1c:7f:
                    f1:4e:59:73:87:32:8e:36:c3:61:20:29:0c:a6:07:
                    4e:7e:13:d5:f5:49:90:49:a2:54:a5:2a:33:cd:06:
                    83:b0:18:23:45:9d:56:28:bf:b5:50:e7:ec:ac:0c:
                    b9:fa:79:25:93:bd:39:80:85:aa:1d:78:08:c7:19:
                    8c:87:d8:6b:6b:2b:29:fb:ac:55:50:f8:cb:57:ee:
                    77:06:5d:ec:d8:be:ee:0c:80:e8:57:62:38:b6:39:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C1:66:9A:F0:EB:47:D2:1B:62:57:14:09:5E:F8:30:CF:DB:70:A5
            X509v3 Authority Key Identifier:
                keyid:5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f6:2b:2e:2a:2a:18:ed:a2:54:fb:2c:52:87:cc:ee:db:d6:
         e5:a9:e3:b8:0a:87:f5:3f:d6:41:cb:7a:c6:f2:f1:6e:92:c0:
         ab:10:bd:78:57:a7:3e:54:6e:aa:87:23:4b:c3:d0:00:09:82:
         de:09:9e:1f:87:3d:ef:57:7d:73:4b:0e:fb:4a:4e:fd:2d:bf:
         bb:93:0a:0b:0d:c8:df:c2:81:c5:bc:1a:fb:b3:87:de:10:25:
         5d:9d:c6:89:6f:9a:f9:c9:12:cc:88:2d:53:18:8d:1c:a1:f8:
         d8:55:b1:ee:21:ed:07:26:4d:56:16:6e:08:2c:c1:5e:17:c3:
         18:06:dc:c8:89:37:7d:88:b1:d3:d2:59:bc:49:c2:d7:1d:87:
         87:91:6b:05:c5:dd:d3:2b:d0:6f:4c:57:7e:70:8e:87:0f:1a:
         da:c6:95:f8:06:04:21:b6:70:d3:3b:9d:a1:4b:ba:db:fe:34:
         8f:25:51:0a:57:b7:fa:82:8e:be:e3:bb:d7:b7:bd:38:a0:c0:
         8f:0d:64:8b:a9:b5:e7:fb:de:4f:fa:dd:8d:24:96:2c:39:12:
         e0:1c:08:06:fe:5f:0c:b1:e1:0c:5c:e7:bc:8d:15:64:c3:db:
         d9:5a:b8:49:38:28:13:b9:a5:00:3b:0a:35:7d:54:2b:19:50:
         26:89:23:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTYyOTYxMTAvBgNVBAUTKDVGREJENURGNTMyRDJDNTYyMDZGN0IxMTJFN0JCQjMw
NTdBMzk5OTAwHhcNMjYwMzI1MDMyOTExWhcNMjYwNDAxMDMyOTExWjAYMRYwFAYD
VQQDEw02OWMzNTY4OC1hNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBeyFcXajYGW17kRgJ02AOpLuZU+RfVeWc7RTY2bs9X7n4cjn7kvaEVs1rGK
0OFOlJ5Qx+mxWmcyZjJVOp8mruaaS23cknsjfvb5COs0HNR9NRTtlHZQVKzOOZmk
yKC160jC6xntX0yimL9/yrXYCVWPPXFYXfRzdJkMqkwoEOwTIVnJEugm7EC6AtR2
c5GqqzeVyYPDnPBQuORNnTwkiVsgHH/xTllzhzKONsNhICkMpgdOfhPV9UmQSaJU
pSozzQaDsBgjRZ1WKL+1UOfsrAy5+nklk705gIWqHXgIxxmMh9hraysp+6xVUPjL
V+53Bl3s2L7uDIDoV2I4tjkQpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7BZprw
60fSG2JXFAle+DDP23ClMB8GA1UdIwQYMBaAFF/b1d9TLSxWIG97ES57uzBXo5mQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjI5Ni80MkEwQjcxQUFG
NUIxMUVFQjYwRDA1MjdDNEY5QUUwMi9YOXZWMzFNdExGWWdiM3NSTG51N01GZWpt
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1g5dlYzMU10TEZZZ2Izc1JMbnU3TUZlam1aQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NjI5Ni80MkEwQjcxQUFGNUIxMUVFQjYwRDA1MjdDNEY5QUUwMi9YOXZWMzFNdExG
WWdiM3NSTG51N01GZWptWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuPYrLioqGO2iVPssUofM7tvW5anjuAqH9T/WQct6xvLxbpLAqxC9eFenPlRu
qocjS8PQAAmC3gmeH4c971d9c0sO+0pO/S2/u5MKCw3I38KBxbwa+7OH3hAlXZ3G
iW+a+ckSzIgtUxiNHKH42FWx7iHtByZNVhZuCCzBXhfDGAbcyIk3fYix09JZvEnC
1x2Hh5FrBcXd0yvQb0xXfnCOhw8a2saV+AYEIbZw0zudoUu62/40jyVRCle3+oKO
vuO717e9OKDAjw1ki6m15/veT/rdjSSWLDkS4BwIBv5fDLHhDFznvI0VZMPb2Vq4
STgoE7mlADsKNX1UKxlQJokjtQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:58 2026 by rpki-client