Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
File:                     NJajCV1HiwJuR1VeusUdjgorO5Y.mft (raw, json)
Hash identifier:          vQwMx/Yu+rg8K51bt7eucgScVM97sqcQr71DKG3d5/8=
Subject key identifier:   E3:B2:76:C7:58:13:71:37:5A:93:80:C8:B1:67:88:FF:19:6E:94:61
Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96
Certificate issuer:       /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
Certificate serial:       0612
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
Manifest number:          060D
Signing time:             Sat 28 Feb 2026 23:24:05 +0000
Manifest this update:     Sat 28 Feb 2026 23:24:05 +0000
Manifest next update:     Sat 07 Mar 2026 23:24:05 +0000
Files and hashes:         1: NJajCV1HiwJuR1VeusUdjgorO5Y.crl (hash: CA0o9xM7+8B70P/UepEgbIBEcU4N+draop4uFFZovIs=)
                          2: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (hash: J5jgYUR9UX4U3661KuIFfEO7PQhAAk/pGUJOgrFfgBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1554 (0x612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96
        Validity
            Not Before: Feb 28 23:24:05 2026 GMT
            Not After : Mar  7 23:24:05 2026 GMT
        Subject: CN=69a37915-fb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:c1:7d:16:d1:09:db:1a:74:2c:82:5a:e3:
                    76:e3:af:42:2b:91:38:4e:65:44:87:dd:70:f2:1b:
                    63:02:d3:87:86:d8:8a:51:05:25:40:9c:cd:f8:0f:
                    b9:0f:26:80:3b:24:a8:24:23:ad:42:4c:24:64:b0:
                    a8:5e:08:b0:7b:ab:8c:40:6a:68:d6:8f:12:77:63:
                    d7:ad:6c:08:0a:e7:b8:90:1d:48:8f:7f:bd:44:b0:
                    76:73:11:d4:ef:26:e6:e5:d5:45:fc:fb:0d:83:8c:
                    6f:57:53:d9:c5:f2:c2:f5:fd:c9:eb:ea:52:a5:2b:
                    33:c4:b8:05:cd:00:84:d0:8f:a2:c6:b3:4d:f3:1a:
                    be:cb:9f:6c:d3:25:d4:0e:5c:3b:d0:b4:4b:6f:3d:
                    ae:f1:c1:dc:5e:cc:81:cf:d3:4f:44:15:35:83:c6:
                    65:5d:4c:32:c7:de:23:41:f6:c6:3b:38:06:1e:02:
                    92:6e:61:a0:78:ed:6f:e4:47:ec:d2:a4:d6:c3:18:
                    3d:0f:23:34:73:9e:bc:1e:84:54:0d:18:11:a3:f0:
                    4c:a8:0d:6f:76:b3:8a:69:4c:55:21:73:3b:0a:70:
                    5d:7c:2b:95:83:6d:a5:64:7f:1b:65:0e:86:af:af:
                    95:a9:98:19:46:ef:a7:e6:b4:a6:a3:a7:c2:26:89:
                    92:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B2:76:C7:58:13:71:37:5A:93:80:C8:B1:67:88:FF:19:6E:94:61
            X509v3 Authority Key Identifier:
                keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:1f:00:70:e1:c5:e5:81:51:f0:71:74:a8:af:a0:1c:e2:
         e5:00:8f:cd:b1:4a:02:e6:81:a4:fb:1d:a0:4e:d9:d8:d5:a8:
         53:86:c6:7b:f7:bf:8d:79:07:84:e5:d0:19:0b:45:54:3e:f3:
         0d:e9:bb:b7:fd:a6:fe:bc:05:0e:dd:35:90:2f:89:ea:d8:fc:
         d0:ac:e7:23:76:60:67:98:d3:bf:75:d2:e7:ec:78:aa:e4:e5:
         f7:e2:a4:fe:40:d5:a7:99:0b:2d:e6:24:77:01:95:c8:4d:70:
         0f:e9:29:a5:57:48:99:d5:c7:09:26:be:35:5f:17:38:01:72:
         dd:f4:eb:bf:59:22:9a:53:87:e1:6b:9f:30:75:86:99:76:7b:
         88:8f:aa:8b:81:b7:ee:5e:d5:68:37:54:0e:de:49:60:b1:86:
         89:4b:7e:02:d8:38:d3:4b:30:ef:f0:12:bb:21:b1:04:ac:b5:
         90:64:28:3e:2e:ed:53:2e:8b:3f:a6:ba:77:42:1c:56:cc:3f:
         06:e5:04:38:29:45:e0:7b:23:95:1b:20:01:9b:1c:51:0d:19:
         6d:2a:ce:d5:dc:b6:36:e2:02:51:c4:6f:c7:83:3e:87:df:90:
         e2:3d:67:88:25:ff:f2:a0:98:a4:2e:b0:ea:d2:4c:78:29:fc:
         98:b3:3b:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF
MEEyQjNCOTYwHhcNMjYwMjI4MjMyNDA1WhcNMjYwMzA3MjMyNDA1WjAYMRYwFAYD
VQQDDA02OWEzNzkxNS1mYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsgrBfRbRCdsadCyCWuN2469CK5E4TmVEh91w8htjAtOHhtiKUQUlQJzN+A+5
DyaAOySoJCOtQkwkZLCoXgiwe6uMQGpo1o8Sd2PXrWwICue4kB1Ij3+9RLB2cxHU
7ybm5dVF/PsNg4xvV1PZxfLC9f3J6+pSpSszxLgFzQCE0I+ixrNN8xq+y59s0yXU
Dlw70LRLbz2u8cHcXsyBz9NPRBU1g8ZlXUwyx94jQfbGOzgGHgKSbmGgeO1v5Efs
0qTWwxg9DyM0c568HoRUDRgRo/BMqA1vdrOKaUxVIXM7CnBdfCuVg22lZH8bZQ6G
r6+VqZgZRu+n5rSmo6fCJomSLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOOydsdY
E3E3WpOAyLFniP8ZbpRhMB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB
MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTJDMS84NkFCNjYyNERBMkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3
SnVSMVZldXNVZGpnb3JPNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAALcfAHDhxeWBUfBxdKivoBzi5QCPzbFKAuaBpPsdoE7Z2NWoU4bGe/e/jXkH
hOXQGQtFVD7zDem7t/2m/rwFDt01kC+J6tj80KznI3ZgZ5jTv3XS5+x4quTl9+Kk
/kDVp5kLLeYkdwGVyE1wD+kppVdImdXHCSa+NV8XOAFy3fTrv1kimlOH4WufMHWG
mXZ7iI+qi4G37l7VaDdUDt5JYLGGiUt+Atg400sw7/ASuyGxBKy1kGQoPi7tUy6L
P6a6d0IcVsw/BuUEOClF4HsjlRsgAZscUQ0ZbSrO1dy2NuICUcRvx4M+h9+Q4j1n
iCX/8qCYpC6w6tJMeCn8mLM75A==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:56 2026 by rpki-client