Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
File:                     lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json)
Hash identifier:          BHY7wtkKSWGS7a49YUPykBeAm4ZyDc7SGyIZ9ArYPTA=
Subject key identifier:   D5:33:B1:53:6D:AC:C4:B3:38:91:20:2D:F0:6B:17:85:AE:BF:97:6D
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Certificate issuer:       /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
Manifest number:          B9
Signing time:             Sun 01 Mar 2026 08:28:00 +0000
Manifest this update:     Sun 01 Mar 2026 08:27:59 +0000
Manifest next update:     Sun 08 Mar 2026 08:27:59 +0000
Files and hashes:         1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: SE0tWDMt+5TaVD9KllMPcYQ3f+rO4zdNwYXCQANw3TU=)
                          2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: wfDreRJEGF1JW5W3fjwvAomrv9lvr6AoS+ZjgINTuCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
                          rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
        Validity
            Not Before: Mar  1 08:27:59 2026 GMT
            Not After : Mar  8 08:27:59 2026 GMT
        Subject: CN=69a3f890-695c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:ff:6c:ff:e2:31:ad:a0:28:f1:56:a9:42:
                    d7:36:5f:c5:86:78:4c:c8:e1:28:85:78:a3:6e:45:
                    ec:f1:9e:83:f7:df:8f:10:ea:97:df:d7:8c:86:e7:
                    97:b0:c2:5f:c7:45:1d:a5:76:3d:cb:45:6c:52:08:
                    14:7a:7f:4d:66:19:86:fc:00:a2:d9:10:13:2d:3c:
                    2b:d9:bf:8e:a2:31:d9:43:8f:42:16:c0:c6:2a:20:
                    9d:91:c5:e2:c8:fc:5b:5b:df:f2:1d:82:75:03:83:
                    44:ed:94:c9:23:89:33:e6:85:e6:d5:21:81:60:b7:
                    13:f1:64:d2:64:da:06:ba:23:e1:29:c5:98:b9:f7:
                    6f:8b:a4:33:a9:bd:76:f3:b6:c7:63:bd:c9:ff:5d:
                    e0:86:14:8a:f1:0d:05:e1:30:49:47:29:49:61:8c:
                    bd:ba:d9:54:2d:74:5d:d1:c8:cd:c9:b1:02:5b:84:
                    b1:e9:78:2c:db:5e:70:41:3d:8e:4d:d2:8b:13:f2:
                    83:c4:cb:43:40:d2:37:a4:56:79:5e:e3:c8:80:73:
                    a5:42:4c:8a:2d:7b:e2:9c:b7:21:7c:95:5d:80:3d:
                    3e:d2:0a:f3:15:b3:9a:ce:25:00:51:80:6f:66:24:
                    fa:05:fb:19:a3:28:b6:3f:b0:50:b2:3e:c8:72:0a:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:33:B1:53:6D:AC:C4:B3:38:91:20:2D:F0:6B:17:85:AE:BF:97:6D
            X509v3 Authority Key Identifier:
                keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2c:d6:35:91:a4:bb:68:da:dd:6a:74:fe:03:15:4c:c3:6a:
         f2:8a:a1:3c:02:e0:bc:aa:e5:51:92:dd:88:ce:e3:88:61:8a:
         bc:dd:7a:37:3b:0f:32:5e:f7:86:bb:12:5f:0a:48:d2:32:47:
         07:8d:23:12:17:8d:72:ac:7e:64:b8:14:86:66:f8:1d:de:41:
         c6:25:30:a3:8c:3e:45:ba:d7:ea:c4:52:56:fa:05:bb:5d:a2:
         b6:57:33:94:21:e1:6e:9c:5e:d1:c1:66:cb:61:db:8f:74:2d:
         c3:67:12:f4:67:ee:57:ea:d3:26:06:ee:50:aa:9d:91:0e:25:
         a1:42:c5:51:1c:ab:82:54:a3:8a:ce:2a:a1:2c:e7:06:c6:11:
         f8:e1:a3:3f:84:65:f2:d5:d3:d8:76:6a:4e:7b:fa:5e:b2:ac:
         c7:09:24:4a:58:73:6e:1e:98:27:af:6c:91:9f:69:eb:aa:89:
         1d:4a:6c:86:bd:a3:64:1d:ad:ca:7a:76:54:3e:aa:f7:b9:1b:
         29:c2:26:c6:a7:d6:ab:05:ba:e4:95:c6:56:fb:93:42:ab:be:
         17:34:4f:8b:d6:35:6a:62:f8:a4:19:90:cc:06:f0:61:a1:8c:
         86:46:98:d0:8f:cf:b5:97:0d:ff:41:80:01:b2:d0:fa:e7:93:
         a7:a5:67:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ0QzkxMTAvBgNVBAUTKDk1NzQ1MjkzQzg4QTI3MjZFMTBBNTdENThGNDJDQzMx
NjlCN0M5MjIwHhcNMjYwMzAxMDgyNzU5WhcNMjYwMzA4MDgyNzU5WjAYMRYwFAYD
VQQDEw02OWEzZjg5MC02OTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsPP/bP/iMa2gKPFWqULXNl/FhnhMyOEohXijbkXs8Z6D99+PEOqX39eMhueX
sMJfx0UdpXY9y0VsUggUen9NZhmG/ACi2RATLTwr2b+OojHZQ49CFsDGKiCdkcXi
yPxbW9/yHYJ1A4NE7ZTJI4kz5oXm1SGBYLcT8WTSZNoGuiPhKcWYufdvi6Qzqb12
87bHY73J/13ghhSK8Q0F4TBJRylJYYy9utlULXRd0cjNybECW4Sx6Xgs215wQT2O
TdKLE/KDxMtDQNI3pFZ5XuPIgHOlQkyKLXvinLchfJVdgD0+0grzFbOaziUAUYBv
ZiT6BfsZoyi2P7BQsj7IcgqMKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUzsVNt
rMSzOJEgLfBrF4Wuv5dtMB8GA1UdIwQYMBaAFJV0UpPIiicm4QpX1Y9CzDFpt8ki
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS84NDJGOTg5NDBF
QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5YmhDbGZWajBMTU1XbTN5
U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xYUlNrOGlLSnliaENsZlZqMExNTVdtM3lTSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDRDOS84NDJGOTg5NDBFQzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5
YmhDbGZWajBMTU1XbTN5U0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcSzWNZGku2ja3Wp0/gMVTMNq8oqhPALgvKrlUZLdiM7jiGGKvN16NzsPMl73
hrsSXwpI0jJHB40jEheNcqx+ZLgUhmb4Hd5BxiUwo4w+RbrX6sRSVvoFu12itlcz
lCHhbpxe0cFmy2Hbj3Qtw2cS9GfuV+rTJgbuUKqdkQ4loULFURyrglSjis4qoSzn
BsYR+OGjP4Rl8tXT2HZqTnv6XrKsxwkkSlhzbh6YJ69skZ9p66qJHUpshr2jZB2t
ynp2VD6q97kbKcImxqfWqwW65JXGVvuTQqu+FzRPi9Y1amL4pBmQzAbwYaGMhkaY
0I/PtZcN/0GAAbLQ+ueTp6VnzQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:27 2026 by rpki-client