Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
File:                     U1n0WpMqsOo84GFn1fzHBltN2IU.mft (raw, json)
Hash identifier:          7oH0c763bLattTAwSuuv3xhtedd+vQOup7QEH+AAnRY=
Subject key identifier:   6E:F7:0C:2E:96:35:AB:D5:4A:C7:DF:C2:B1:A2:15:E5:76:28:9A:01
Authority key identifier: 53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85
Certificate issuer:       /CN=A911367F/serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885
Certificate serial:       0CE6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
Manifest number:          0CDA
Signing time:             Sat 28 Feb 2026 18:23:14 +0000
Manifest this update:     Sat 28 Feb 2026 18:23:14 +0000
Manifest next update:     Sat 07 Mar 2026 18:23:14 +0000
Files and hashes:         1: U1n0WpMqsOo84GFn1fzHBltN2IU.crl (hash: +vMa3MCG/QJax4QPaARFFUZSKYEoaQAxyTAvsiGdA3c=)
                          2: 6751E26C415511ECA2FD715CC4F9AE02.roa (hash: NWXl0/HloQJgP5iTbQs1BacGndGc9HtR4LlBAy7UnRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl
                          rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3302 (0xce6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911367F, serialNumber=5359F45A932AB0EA3CE06167D5FCC7065B4DD885
        Validity
            Not Before: Feb 28 18:23:14 2026 GMT
            Not After : Mar  7 18:23:14 2026 GMT
        Subject: CN=69a33292-b365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:77:b8:1a:7f:23:15:da:56:cc:71:3b:5a:
                    15:db:88:6f:1d:48:3b:35:a6:7c:96:28:59:3c:86:
                    2e:5b:6f:53:7f:8c:56:de:1b:22:23:3a:ae:d7:fd:
                    c3:a6:d7:44:e7:b3:b1:67:55:b2:58:b9:f1:0b:cb:
                    71:b8:47:5d:26:8f:df:9d:c4:bc:96:a6:7d:18:ee:
                    e6:dc:25:6d:59:e7:35:dc:78:48:b0:fe:d2:aa:88:
                    99:0a:86:c1:53:ee:c7:fe:40:e9:4e:e0:9e:f1:ee:
                    b8:7f:80:d8:ed:1f:ca:0a:ca:35:39:f0:57:a8:33:
                    42:d9:91:36:ac:41:78:8a:cc:5b:76:39:29:c6:21:
                    c0:bf:33:80:4f:b9:c9:37:85:1f:0f:be:ba:67:4d:
                    53:13:9b:fb:9a:44:ee:27:56:b5:4c:09:e9:ec:98:
                    45:76:03:8a:5e:27:29:41:42:ec:d7:7f:60:8c:34:
                    94:a1:9c:db:40:85:11:fe:98:d2:9b:1f:b4:b5:a9:
                    8d:51:e2:f3:ee:1d:8f:3e:bd:15:ac:bb:92:1a:ed:
                    50:93:8e:c4:ab:00:30:1f:21:97:c0:36:c0:21:ac:
                    bd:dc:49:32:17:99:a6:3b:60:21:be:1a:c2:f4:4f:
                    d7:37:8b:54:a7:d3:81:e9:b1:34:93:10:54:16:9b:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F7:0C:2E:96:35:AB:D5:4A:C7:DF:C2:B1:A2:15:E5:76:28:9A:01
            X509v3 Authority Key Identifier:
                keyid:53:59:F4:5A:93:2A:B0:EA:3C:E0:61:67:D5:FC:C7:06:5B:4D:D8:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U1n0WpMqsOo84GFn1fzHBltN2IU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911367F/7A94D128046111EA9F0F4042C4F9AE02/U1n0WpMqsOo84GFn1fzHBltN2IU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:85:96:84:dd:42:66:7a:d4:fe:55:b1:30:ee:a3:e3:6a:
         82:dc:22:a4:2d:da:49:dd:86:5d:81:d8:c2:96:1a:46:b9:95:
         fb:8f:d8:66:e2:1c:01:64:f6:21:3e:69:15:01:63:bd:e0:eb:
         10:d3:d7:f4:fa:20:37:7a:17:9a:f2:5e:cf:b3:c8:07:0b:da:
         4c:61:33:e5:55:1c:3d:fc:b6:47:32:41:a9:f2:fe:6b:9e:7e:
         20:86:85:cc:b7:21:91:88:ae:e1:e0:0c:f8:b2:6e:1c:09:94:
         eb:fc:6e:31:24:65:45:68:e1:2d:80:bf:be:ab:7c:2e:64:d5:
         0d:0f:6a:b0:67:08:28:8a:07:f2:86:b1:a7:8e:0d:c0:37:99:
         0d:49:34:11:59:a4:3c:1e:91:a5:f5:9b:6a:b5:7a:c4:b6:80:
         56:fc:9f:43:d2:2b:df:7d:00:e4:de:74:99:e1:73:c1:09:90:
         03:96:e0:a5:d6:de:60:b2:dc:9f:10:a8:e8:8b:eb:f0:1a:43:
         c4:d7:e0:3d:d5:d8:fe:f5:3d:48:f4:8c:1b:a1:62:fe:62:df:
         ed:0a:f7:68:05:75:bd:ed:74:ce:c9:dc:13:59:58:dc:24:72:
         e1:3d:f4:dd:8f:ec:c7:7d:4e:ef:7f:f7:86:c7:61:bf:c4:03:
         6a:ad:38:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM2N0YxMTAvBgNVBAUTKDUzNTlGNDVBOTMyQUIwRUEzQ0UwNjE2N0Q1RkNDNzA2
NUI0REQ4ODUwHhcNMjYwMjI4MTgyMzE0WhcNMjYwMzA3MTgyMzE0WjAYMRYwFAYD
VQQDDA02OWEzMzI5Mi1iMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/53uBp/IxXaVsxxO1oV24hvHUg7NaZ8lihZPIYuW29Tf4xW3hsiIzqu1/3D
ptdE57OxZ1WyWLnxC8txuEddJo/fncS8lqZ9GO7m3CVtWec13HhIsP7SqoiZCobB
U+7H/kDpTuCe8e64f4DY7R/KCso1OfBXqDNC2ZE2rEF4isxbdjkpxiHAvzOAT7nJ
N4UfD766Z01TE5v7mkTuJ1a1TAnp7JhFdgOKXicpQULs139gjDSUoZzbQIUR/pjS
mx+0tamNUeLz7h2PPr0VrLuSGu1Qk47EqwAwHyGXwDbAIay93EkyF5mmO2AhvhrC
9E/XN4tUp9OB6bE0kxBUFpthqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG73DC6W
NavVSsffwrGiFeV2KJoBMB8GA1UdIwQYMBaAFFNZ9FqTKrDqPOBhZ9X8xwZbTdiF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzY3Ri83QTk0RDEyODA0
NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNPbzg0R0ZuMWZ6SEJsdE4y
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1UxbjBXcE1xc09vODRHRm4xZnpIQmx0TjJJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzY3Ri83QTk0RDEyODA0NjExMUVBOUYwRjQwNDJDNEY5QUUwMi9VMW4wV3BNcXNP
bzg0R0ZuMWZ6SEJsdE4ySVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ8CFloTdQmZ61P5VsTDuo+NqgtwipC3aSd2GXYHYwpYaRrmV+4/YZuIcAWT2
IT5pFQFjveDrENPX9PogN3oXmvJez7PIBwvaTGEz5VUcPfy2RzJBqfL+a55+IIaF
zLchkYiu4eAM+LJuHAmU6/xuMSRlRWjhLYC/vqt8LmTVDQ9qsGcIKIoH8oaxp44N
wDeZDUk0EVmkPB6RpfWbarV6xLaAVvyfQ9Ir330A5N50meFzwQmQA5bgpdbeYLLc
nxCo6Ivr8BpDxNfgPdXY/vU9SPSMG6Fi/mLf7Qr3aAV1ve10zsncE1lY3CRy4T30
3Y/sx31O73/3hsdhv8QDaq04zg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:04 2026 by rpki-client