Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
File:                     IcuqoETeGlZkRp9Bi80Id7ITlzo.mft (raw, json)
Hash identifier:          VTAwooK+CTnwjTCV9bgEB8YfcKBuSZOt3OqGqffDFmo=
Subject key identifier:   82:CD:EE:6E:67:55:70:01:FD:0E:4F:F3:54:DB:7F:16:CA:21:0D:1C
Authority key identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A
Certificate issuer:       /CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
Certificate serial:       01D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
Manifest number:          01C9
Signing time:             Mon 02 Mar 2026 00:30:38 +0000
Manifest this update:     Mon 02 Mar 2026 00:30:36 +0000
Manifest next update:     Mon 09 Mar 2026 00:30:36 +0000
Files and hashes:         1: IcuqoETeGlZkRp9Bi80Id7ITlzo.crl (hash: DozNWN0Z1eyCoCKrXHPHKZHDGQJ1IO1LntEuklB4RPc=)
                          2: 6538D178628E11EEBF375134C4F9AE02.roa (hash: qVMa/Xz0rkX7Diy34qfbgTAPdgO1If06CjZkRcC7AXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl
                          rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911393B, serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
        Validity
            Not Before: Mar  2 00:30:36 2026 GMT
            Not After : Mar  9 00:30:36 2026 GMT
        Subject: CN=69a4da2e-7e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:12:75:5b:24:1e:be:d5:c7:9f:e1:bd:40:
                    2a:c2:38:f4:18:91:4f:43:bb:e4:72:bb:01:a1:51:
                    d1:d7:a8:6e:74:f2:f4:c4:60:b6:22:4b:c1:2c:4e:
                    3a:1b:4d:ac:3a:e0:9c:23:75:65:b9:83:83:b1:4e:
                    a3:d4:43:e2:bf:07:8b:8e:f1:e4:80:db:3b:fa:2c:
                    a5:52:b8:a8:e4:f5:34:94:8f:51:48:b7:ba:c1:ae:
                    81:aa:0a:a3:f1:46:86:f0:31:ef:40:0c:62:b2:d8:
                    e4:2e:c9:dc:9a:77:37:de:fc:26:af:d1:17:ff:f3:
                    48:67:c9:26:27:1c:c1:bc:94:8b:fc:06:7e:8f:8a:
                    dd:66:df:ba:f8:49:27:24:5a:97:8d:7f:cc:0a:7f:
                    e9:12:61:26:9c:cc:76:f7:df:06:b5:63:d3:01:8e:
                    ac:18:36:83:6a:c7:62:01:06:05:5b:33:a8:c1:03:
                    06:d6:43:62:1a:5a:17:0b:fe:7c:fe:fe:ea:67:5c:
                    2b:b4:c6:07:4b:02:b1:53:fd:39:cb:eb:00:eb:0e:
                    28:59:cd:04:49:9c:0c:a0:69:5a:e7:d2:d8:cd:7b:
                    ef:ac:f0:8a:b5:1e:de:b6:f5:f6:7c:51:01:b9:1b:
                    21:e5:20:00:8a:90:e5:81:a3:6a:5f:32:32:e0:48:
                    9a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CD:EE:6E:67:55:70:01:FD:0E:4F:F3:54:DB:7F:16:CA:21:0D:1C
            X509v3 Authority Key Identifier:
                keyid:21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:3a:e3:a0:3f:f5:f9:b2:1e:13:40:98:46:3e:20:a1:ac:ea:
         2a:c0:ff:4b:ad:08:d0:aa:32:67:e0:02:1f:0e:c7:e9:d6:de:
         df:d3:97:f4:ac:c0:05:97:55:c6:e4:4e:6d:3a:08:37:68:72:
         57:27:27:00:69:b4:26:a2:62:ea:59:49:b5:31:4c:bc:06:da:
         9c:2a:e6:b4:ff:53:13:9e:29:80:d8:0a:56:06:10:87:0a:77:
         bf:8e:7a:8d:80:14:4a:89:6b:7e:52:65:b2:6e:52:d1:8e:3f:
         5e:01:c0:4f:27:4d:df:0b:c1:0a:f7:db:cf:bd:51:11:8f:03:
         c7:50:0e:2e:5d:5c:a6:00:bc:a4:0d:08:c4:c5:35:69:f1:55:
         19:0b:ee:43:76:cb:52:71:1c:1d:ef:c1:44:01:fb:24:aa:5b:
         b3:23:26:1a:40:ed:5b:01:16:4f:28:1f:2c:51:26:12:69:39:
         83:3a:56:ed:e7:33:34:9c:2a:55:52:9a:3d:f4:1e:de:bc:08:
         6c:e1:98:8a:30:20:eb:64:99:1e:ef:59:37:4b:94:5a:e5:9a:
         5b:e6:c8:04:ce:63:37:32:e7:9c:48:e8:55:20:41:8f:15:9e:
         8e:d5:e6:5e:5f:37:dc:fb:a7:60:59:3c:ca:32:5a:6d:95:a4:
         e3:a7:dd:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM5M0IxMTAvBgNVBAUTKDIxQ0JBQUEwNDRERTFBNTY2NDQ2OUY0MThCQ0QwODc3
QjIxMzk3M0EwHhcNMjYwMzAyMDAzMDM2WhcNMjYwMzA5MDAzMDM2WjAYMRYwFAYD
VQQDEw02OWE0ZGEyZS03ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApoISdVskHr7Vx5/hvUAqwjj0GJFPQ7vkcrsBoVHR16hudPL0xGC2IkvBLE46
G02sOuCcI3VluYODsU6j1EPivweLjvHkgNs7+iylUrio5PU0lI9RSLe6wa6Bqgqj
8UaG8DHvQAxistjkLsncmnc33vwmr9EX//NIZ8kmJxzBvJSL/AZ+j4rdZt+6+Ekn
JFqXjX/MCn/pEmEmnMx2998GtWPTAY6sGDaDasdiAQYFWzOowQMG1kNiGloXC/58
/v7qZ1wrtMYHSwKxU/05y+sA6w4oWc0ESZwMoGla59LYzXvvrPCKtR7etvX2fFEB
uRsh5SAAipDlgaNqXzIy4EiaTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILN7m5n
VXAB/Q5P81TbfxbKIQ0cMB8GA1UdIwQYMBaAFCHLqqBE3hpWZEafQYvNCHeyE5c6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzkzQi82N0QwOEJBODYy
OEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUdsWmtScDlCaTgwSWQ3SVRs
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ljdXFvRVRlR2xaa1JwOUJpODBJZDdJVGx6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzkzQi82N0QwOEJBODYyOEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUds
WmtScDlCaTgwSWQ3SVRsem8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyjrjoD/1+bIeE0CYRj4goazqKsD/S60I0KoyZ+ACHw7H6dbe39OX9KzABZdV
xuRObToIN2hyVycnAGm0JqJi6llJtTFMvAbanCrmtP9TE54pgNgKVgYQhwp3v456
jYAUSolrflJlsm5S0Y4/XgHATydN3wvBCvfbz71REY8Dx1AOLl1cpgC8pA0IxMU1
afFVGQvuQ3bLUnEcHe/BRAH7JKpbsyMmGkDtWwEWTygfLFEmEmk5gzpW7eczNJwq
VVKaPfQe3rwIbOGYijAg62SZHu9ZN0uUWuWaW+bIBM5jNzLnnEjoVSBBjxWejtXm
Xl833PunYFk8yjJabZWk46fdnA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:11 2026 by rpki-client