Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft
File:                     hM4p-GFBrPuKdekE8CcjhS3mMzg.mft (raw, json)
Hash identifier:          KR8AejWJoDa4bVQt8AiIr3oM5XU40A6rO7l1UHPFFbw=
Subject key identifier:   EC:E3:B5:F0:0F:09:78:9E:00:9D:6A:C1:CD:AC:21:23:C7:A8:08:CD
Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38
Certificate issuer:       /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338
Certificate serial:       0AC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft
Manifest number:          0AB8
Signing time:             Mon 02 Mar 2026 02:15:47 +0000
Manifest this update:     Mon 02 Mar 2026 02:15:45 +0000
Manifest next update:     Mon 09 Mar 2026 02:15:45 +0000
Files and hashes:         1: hM4p-GFBrPuKdekE8CcjhS3mMzg.crl (hash: GIId+pss9Dkg0RNI9Nbu1bYOid3z2tJNML33ArVEqts=)
                          2: 267A24046E7D11EAADB09659C4F9AE02.roa (hash: Rc31mOjrd8TQ2Wg72zaALLhrVFIwej72vnE0huDI83E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl
                          rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2754 (0xac2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114FFB, serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338
        Validity
            Not Before: Mar  2 02:15:45 2026 GMT
            Not After : Mar  9 02:15:45 2026 GMT
        Subject: CN=69a4f2d2-19b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d7:db:aa:18:e3:8f:88:2a:b0:38:c8:0d:ca:
                    11:06:e4:d8:6c:60:62:6c:54:a1:52:ba:b1:03:8d:
                    87:dd:88:7f:84:65:51:b7:43:da:c1:b3:1d:e6:27:
                    e0:f0:60:c6:df:7f:35:22:fd:ec:56:fd:3b:cc:4c:
                    ee:9e:45:33:4b:c8:8a:4b:f8:9c:5d:88:fc:c6:d7:
                    d0:35:af:83:66:ad:dc:ee:24:13:df:9d:e7:54:89:
                    79:8a:ca:86:a2:4a:83:54:96:40:57:68:ac:cc:09:
                    f7:c3:69:0d:79:58:e2:0c:e8:50:50:22:6a:b5:0e:
                    ca:f3:a5:f8:6f:8b:e6:a8:78:a9:fc:01:1c:dd:6d:
                    92:62:64:00:bb:ea:61:5e:28:0c:48:82:41:2d:26:
                    97:02:29:ac:40:15:a5:e3:57:0b:ff:61:f8:f0:b0:
                    29:3d:42:d3:b6:02:a4:aa:8b:e2:e3:dc:79:ae:73:
                    8f:ec:3d:bf:7e:21:09:22:d3:54:1e:3c:8f:f9:20:
                    9f:50:86:85:2e:ec:7c:b6:d2:ee:f5:81:2c:28:10:
                    e5:be:39:76:0c:4e:56:4a:c9:06:c2:12:8e:e7:2e:
                    0a:5e:07:18:72:72:4c:3d:29:ec:d4:26:07:33:85:
                    db:da:99:c1:ea:ed:70:2b:94:9c:48:b6:20:34:b7:
                    56:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E3:B5:F0:0F:09:78:9E:00:9D:6A:C1:CD:AC:21:23:C7:A8:08:CD
            X509v3 Authority Key Identifier:
                keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b1:3f:e0:32:de:d1:35:8d:96:0d:13:91:74:80:2c:35:eb:
         71:3c:9e:e5:a4:b2:4e:2a:30:dd:b3:6f:ea:7b:ff:2a:49:62:
         c7:10:75:aa:d0:75:9a:ba:44:1c:2d:e3:b5:5c:16:02:b7:54:
         81:0d:f1:59:01:23:be:b4:20:93:10:07:36:35:49:9d:a1:84:
         3b:e1:93:26:10:b9:83:bf:29:2e:b6:b9:b1:3f:f8:2b:b9:f8:
         c6:a9:3e:f5:d8:77:53:fb:09:5e:2d:32:86:ce:e1:a6:0a:13:
         7e:c5:c6:d2:69:90:d9:72:80:9a:d9:bb:bd:06:ee:f1:47:36:
         5a:2a:b1:4f:ff:cd:69:76:5f:c9:36:e7:42:7a:0a:e1:45:b1:
         98:b3:c2:20:81:27:f6:22:86:31:25:e8:f8:a5:b4:12:58:e7:
         52:9f:76:51:a0:be:c1:29:48:3e:4a:9e:ff:bb:89:78:40:30:
         f3:ed:95:8f:9d:2c:d2:b6:f0:af:7d:d1:e4:c6:41:d8:26:1a:
         2e:dd:74:63:4f:d4:68:d2:3c:b6:a4:07:06:3e:4f:7f:fc:16:
         57:cf:c7:40:51:d3:b8:56:67:2e:3d:1c:a9:2a:f3:30:78:8a:
         27:21:80:cd:09:c1:93:26:a4:1b:61:5c:6c:12:02:b1:ca:04:
         e4:9c:65:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTRGRkIxMTAvBgNVBAUTKDg0Q0UyOUY4NjE0MUFDRkI4QTc1RTkwNEYwMjcyMzg1
MkRFNjMzMzgwHhcNMjYwMzAyMDIxNTQ1WhcNMjYwMzA5MDIxNTQ1WjAYMRYwFAYD
VQQDEw02OWE0ZjJkMi0xOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Nfbqhjjj4gqsDjIDcoRBuTYbGBibFShUrqxA42H3Yh/hGVRt0PawbMd5ifg
8GDG3381Iv3sVv07zEzunkUzS8iKS/icXYj8xtfQNa+DZq3c7iQT353nVIl5isqG
okqDVJZAV2iszAn3w2kNeVjiDOhQUCJqtQ7K86X4b4vmqHip/AEc3W2SYmQAu+ph
XigMSIJBLSaXAimsQBWl41cL/2H48LApPULTtgKkqovi49x5rnOP7D2/fiEJItNU
HjyP+SCfUIaFLux8ttLu9YEsKBDlvjl2DE5WSskGwhKO5y4KXgcYcnJMPSns1CYH
M4Xb2pnB6u1wK5ScSLYgNLdW+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzjtfAP
CXieAJ1qwc2sISPHqAjNMB8GA1UdIwQYMBaAFITOKfhhQaz7inXpBPAnI4Ut5jM4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZGQi82QUMxRjE2QTZF
N0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQdUtkZWtFOENjamhTM21N
emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hNNHAtR0ZCclB1S2Rla0U4Q2NqaFMzbU16Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEZGQi82QUMxRjE2QTZFN0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQ
dUtkZWtFOENjamhTM21NemcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ7E/4DLe0TWNlg0TkXSALDXrcTye5aSyTiow3bNv6nv/KklixxB1qtB1mrpE
HC3jtVwWArdUgQ3xWQEjvrQgkxAHNjVJnaGEO+GTJhC5g78pLra5sT/4K7n4xqk+
9dh3U/sJXi0yhs7hpgoTfsXG0mmQ2XKAmtm7vQbu8Uc2WiqxT//NaXZfyTbnQnoK
4UWxmLPCIIEn9iKGMSXo+KW0EljnUp92UaC+wSlIPkqe/7uJeEAw8+2Vj50s0rbw
r33R5MZB2CYaLt10Y0/UaNI8tqQHBj5Pf/wWV8/HQFHTuFZnLj0cqSrzMHiKJyGA
zQnBkyakG2FcbBICscoE5Jxl6w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:11:55 2026 by rpki-client