Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
File:                     aMIYjATCDkkjq7YttIckmDVLSv0.mft (raw, json)
Hash identifier:          7xByqtbvxPSRaqwnqG4dXPFt1b5ArxAe4fRcOMu3Slk=
Subject key identifier:   2F:98:CD:DC:C3:AF:ED:E8:8F:C4:C4:96:46:55:A4:80:E3:AA:42:91
Authority key identifier: 68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD
Certificate issuer:       /CN=A911750B/serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
Manifest number:          89
Signing time:             Sun 01 Mar 2026 08:54:30 +0000
Manifest this update:     Sun 01 Mar 2026 08:54:29 +0000
Manifest next update:     Sun 08 Mar 2026 08:54:29 +0000
Files and hashes:         1: aMIYjATCDkkjq7YttIckmDVLSv0.crl (hash: FvWWDGJ5gALfuGjb79ldTSNNKFxkqxXk4NEUq6FqLfM=)
                          2: CC9D872A468D11F0A82C5E5EC4F9AE02.roa (hash: 53IvHKTdXwEXSRnOFpf3vxlzT+INgjItjJHDBhfEtMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl
                          rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:54:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911750B, serialNumber=68C2188C04C20E4923ABB62DB4872498354B4AFD
        Validity
            Not Before: Mar  1 08:54:29 2026 GMT
            Not After : Mar  8 08:54:29 2026 GMT
        Subject: CN=69a3fec6-6f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a4:c6:3b:4a:7c:e5:b8:47:fb:8f:05:9f:19:
                    40:40:a9:a1:8b:f6:35:bc:30:0e:1a:b0:1b:bb:cf:
                    c4:49:45:99:3d:fd:d0:8a:26:73:59:01:c6:90:a0:
                    26:36:15:f0:2e:21:ce:b3:d7:98:03:86:03:c9:5c:
                    9e:07:5c:20:dc:e1:84:87:70:04:35:37:ac:41:58:
                    0a:72:9b:f4:e6:2e:33:77:7d:0a:85:c4:19:42:98:
                    af:6d:9d:20:54:68:9e:57:ce:cd:e6:4b:18:b2:45:
                    d4:16:14:75:4f:b6:cf:25:55:b1:db:1e:77:19:3a:
                    47:4d:9c:97:f5:36:38:9f:04:90:94:a7:90:87:9e:
                    f8:09:fd:c8:7f:7b:37:34:7a:f4:b4:c4:b0:9d:f0:
                    6b:5b:58:6a:bd:a6:41:46:4e:02:e5:b1:34:69:3f:
                    5e:ae:51:84:12:1c:05:90:51:b8:0b:31:8b:cc:f6:
                    e3:3d:7c:b3:08:32:01:97:ec:73:7b:d6:c4:0d:93:
                    0a:9d:dd:05:1d:f5:31:2c:77:32:30:1d:58:5e:bd:
                    13:54:30:61:59:90:93:3e:21:c5:93:f3:8a:45:8c:
                    1b:c0:f7:92:12:67:40:82:1b:63:93:e9:30:59:3f:
                    8d:f5:6c:b7:10:17:13:03:e9:b2:9c:84:25:ff:2a:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:98:CD:DC:C3:AF:ED:E8:8F:C4:C4:96:46:55:A4:80:E3:AA:42:91
            X509v3 Authority Key Identifier:
                keyid:68:C2:18:8C:04:C2:0E:49:23:AB:B6:2D:B4:87:24:98:35:4B:4A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aMIYjATCDkkjq7YttIckmDVLSv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911750B/5B1C1FAE468C11F084B6A539C4F9AE02/aMIYjATCDkkjq7YttIckmDVLSv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:90:65:0f:c5:7e:d9:c5:6f:63:f4:8e:e4:04:93:a6:90:ec:
         8d:c4:a8:ab:d4:b3:ab:37:17:0d:c8:37:4e:ff:d5:a4:d3:94:
         8e:b8:cc:16:95:6b:c2:47:60:2c:bc:a5:09:49:32:d4:a9:34:
         93:92:e6:3e:b9:39:e2:f1:10:0f:d4:67:5d:25:0f:74:2f:e7:
         e7:d2:20:7e:6a:b5:1a:c3:bf:23:1b:af:88:8b:bc:5b:6d:ea:
         9c:24:45:23:a8:26:84:13:98:fd:63:de:b6:5e:41:b5:ed:c2:
         9d:0e:65:96:01:9b:a1:f2:8c:d0:d4:a1:a3:32:e8:a9:a8:9b:
         e2:4b:7b:a0:3f:97:ac:f8:87:b1:5d:da:d7:bb:bc:40:21:7d:
         43:dd:11:cc:bf:df:bd:6e:27:90:cb:70:33:c6:3b:9f:4d:d8:
         fe:a8:93:5d:9f:95:61:41:90:18:9d:85:62:f7:70:7b:75:9d:
         b8:6e:a2:ff:90:67:14:1e:e1:2c:fa:82:bb:d1:c3:7f:49:af:
         a8:d0:25:1e:ec:2a:da:31:89:a4:ba:b4:ef:df:2b:88:09:a3:
         50:3a:c7:85:fa:7b:d8:61:81:60:3a:01:61:67:81:18:d6:0c:
         49:c0:5f:34:5e:f0:22:34:e9:56:6f:1e:b9:b6:d1:9d:b1:17:
         64:f6:eb:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc1MEIxMTAvBgNVBAUTKDY4QzIxODhDMDRDMjBFNDkyM0FCQjYyREI0ODcyNDk4
MzU0QjRBRkQwHhcNMjYwMzAxMDg1NDI5WhcNMjYwMzA4MDg1NDI5WjAYMRYwFAYD
VQQDEw02OWEzZmVjNi02ZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu6TGO0p85bhH+48FnxlAQKmhi/Y1vDAOGrAbu8/ESUWZPf3QiiZzWQHGkKAm
NhXwLiHOs9eYA4YDyVyeB1wg3OGEh3AENTesQVgKcpv05i4zd30KhcQZQpivbZ0g
VGieV87N5ksYskXUFhR1T7bPJVWx2x53GTpHTZyX9TY4nwSQlKeQh574Cf3If3s3
NHr0tMSwnfBrW1hqvaZBRk4C5bE0aT9erlGEEhwFkFG4CzGLzPbjPXyzCDIBl+xz
e9bEDZMKnd0FHfUxLHcyMB1YXr0TVDBhWZCTPiHFk/OKRYwbwPeSEmdAghtjk+kw
WT+N9Wy3EBcTA+mynIQl/yrTQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC+YzdzD
r+3oj8TElkZVpIDjqkKRMB8GA1UdIwQYMBaAFGjCGIwEwg5JI6u2LbSHJJg1S0r9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzUwQi81QjFDMUZBRTQ2
OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9hTUlZakFUQ0Rra2pxN1l0dElja21EVkxT
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2FNSVlqQVRDRGtranE3WXR0SWNrbURWTFN2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzUwQi81QjFDMUZBRTQ2OEMxMUYwODRCNkE1MzlDNEY5QUUwMi9hTUlZakFUQ0Rr
a2pxN1l0dElja21EVkxTdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvpBlD8V+2cVvY/SO5ASTppDsjcSoq9SzqzcXDcg3Tv/VpNOUjrjMFpVrwkdg
LLylCUky1Kk0k5LmPrk54vEQD9RnXSUPdC/n59Igfmq1GsO/IxuviIu8W23qnCRF
I6gmhBOY/WPetl5Bte3CnQ5llgGbofKM0NShozLoqaib4kt7oD+XrPiHsV3a17u8
QCF9Q90RzL/fvW4nkMtwM8Y7n03Y/qiTXZ+VYUGQGJ2FYvdwe3WduG6i/5BnFB7h
LPqCu9HDf0mvqNAlHuwq2jGJpLq0798riAmjUDrHhfp72GGBYDoBYWeBGNYMScBf
NF7wIjTpVm8eubbRnbEXZPbrvQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:01 2026 by rpki-client