Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft
File:                     6zLfknQ0rG06hoR937o9LoEAETE.mft (raw, json)
Hash identifier:          k+f5ItlgZ1CniyldEXw7+hpZLJEjgECm9aG/Tl8Lex8=
Subject key identifier:   FB:1D:94:96:F1:ED:58:A8:60:D3:56:98:84:0F:03:7A:38:AA:EE:7E
Authority key identifier: EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31
Certificate issuer:       /CN=A911945B/serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft
Manifest number:          0153
Signing time:             Mon 02 Mar 2026 02:48:12 +0000
Manifest this update:     Mon 02 Mar 2026 02:48:12 +0000
Manifest next update:     Mon 09 Mar 2026 02:48:12 +0000
Files and hashes:         1: 6zLfknQ0rG06hoR937o9LoEAETE.crl (hash: ra6h+csmeKMu0wt+DMs35IssN7LKeOgjzJHXUSFb7ZU=)
                          2: C562775017FD11EF9A320864C4F9AE02.roa (hash: t/VPDZPwjX46Y0N/pV8me1AYQj95BNCK+h88qNvXGWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl
                          rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911945B, serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131
        Validity
            Not Before: Mar  2 02:48:12 2026 GMT
            Not After : Mar  9 02:48:12 2026 GMT
        Subject: CN=69a4fa6c-bb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:be:05:8e:a1:f3:17:a8:e4:12:85:a4:db:d8:
                    4a:f9:a9:34:05:cb:b0:0b:84:ac:46:25:1e:e8:1a:
                    a4:f5:06:82:ba:cb:58:3f:6f:8a:7c:0c:d3:ff:64:
                    53:ca:c9:8a:bb:92:db:29:ac:cc:8e:86:a9:5a:61:
                    9f:c0:cb:d7:34:0b:b5:a6:88:35:1b:d8:b5:b2:00:
                    31:d1:94:08:73:b6:bc:41:51:c8:d2:2a:42:60:ba:
                    4d:7d:4f:64:b9:88:a5:b8:1e:35:22:ab:84:89:8a:
                    aa:7d:cc:02:81:fa:b2:34:bd:33:03:de:aa:ae:48:
                    05:36:b5:ae:32:bb:5c:c4:f7:43:0d:80:a8:81:5c:
                    d8:c2:78:7d:3a:13:75:69:bc:71:81:f9:1d:52:8c:
                    b9:9a:e6:ab:df:64:46:5f:dd:12:26:51:17:cb:1f:
                    37:d8:08:d7:26:d5:67:de:5a:66:82:f6:4c:e8:9e:
                    7d:4a:d5:a2:9f:77:d1:45:03:4a:01:24:52:91:48:
                    7a:c9:18:02:87:87:b8:94:d7:d3:76:6c:2c:21:82:
                    f3:af:4c:57:e9:94:71:8e:20:06:8b:54:16:f5:29:
                    43:e1:f7:a2:7a:47:39:07:62:92:a7:45:99:1d:57:
                    fa:40:3b:5b:14:49:07:b1:89:0a:a1:33:e9:4d:f9:
                    92:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1D:94:96:F1:ED:58:A8:60:D3:56:98:84:0F:03:7A:38:AA:EE:7E
            X509v3 Authority Key Identifier:
                keyid:EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:54:c5:25:5f:47:e3:07:e5:39:f4:88:4b:9f:52:09:38:39:
         ff:b0:ed:39:5b:a5:4d:95:4f:f8:96:4a:f9:a8:b1:0f:e3:ac:
         88:f0:62:4f:e6:8c:e8:56:81:bd:81:7a:ab:03:8e:15:8e:2b:
         f4:05:c3:12:78:f4:74:3f:37:51:59:9e:bc:48:9b:c6:c6:49:
         07:a8:26:39:3a:95:71:80:7d:78:f6:1d:ae:33:bd:1d:a3:00:
         58:28:56:a7:15:ce:ee:73:cb:19:f4:c6:2e:47:b4:47:7d:2e:
         86:4e:b8:b6:10:87:cc:58:3d:31:e0:38:b0:36:62:53:58:f5:
         ff:f1:c8:35:72:09:0e:3a:79:24:c8:9a:e0:f6:18:5e:30:dd:
         9f:dd:23:eb:c7:27:0a:ba:e5:09:16:4b:b8:ee:1b:2b:0d:f9:
         8f:b9:68:3f:09:94:f0:4b:52:fc:d5:e8:d7:c0:45:f3:84:16:
         fa:e3:18:e8:d7:10:f6:64:27:3b:83:d9:a8:fa:f9:59:03:7c:
         9f:5a:ba:b9:49:25:2a:e0:da:d3:99:ac:04:e4:21:c4:40:c2:
         cc:8e:bd:a6:99:62:06:6c:b9:c9:32:27:19:d9:48:df:e2:31:
         95:65:b9:87:0f:d5:25:f3:2d:98:47:eb:19:b7:c8:d0:1b:ca:
         db:73:25:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk0NUIxMTAvBgNVBAUTKEVCMzJERjkyNzQzNEFDNkQzQTg2ODQ3RERGQkEzRDJF
ODEwMDExMzEwHhcNMjYwMzAyMDI0ODEyWhcNMjYwMzA5MDI0ODEyWjAYMRYwFAYD
VQQDEw02OWE0ZmE2Yy1iYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA274FjqHzF6jkEoWk29hK+ak0BcuwC4SsRiUe6Bqk9QaCustYP2+KfAzT/2RT
ysmKu5LbKazMjoapWmGfwMvXNAu1pog1G9i1sgAx0ZQIc7a8QVHI0ipCYLpNfU9k
uYiluB41IquEiYqqfcwCgfqyNL0zA96qrkgFNrWuMrtcxPdDDYCogVzYwnh9OhN1
abxxgfkdUoy5muar32RGX90SJlEXyx832AjXJtVn3lpmgvZM6J59StWin3fRRQNK
ASRSkUh6yRgCh4e4lNfTdmwsIYLzr0xX6ZRxjiAGi1QW9SlD4feiekc5B2KSp0WZ
HVf6QDtbFEkHsYkKoTPpTfmSvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPsdlJbx
7VioYNNWmIQPA3o4qu5+MB8GA1UdIwQYMBaAFOsy35J0NKxtOoaEfd+6PS6BABEx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ1Qi8zQUNGNzBDMDE3
RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJHMDZob1I5MzdvOUxvRUFF
VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6TGZrblEwckcwNmhvUjkzN285TG9FQUVURS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTQ1Qi8zQUNGNzBDMDE3RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJH
MDZob1I5MzdvOUxvRUFFVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUVTFJV9H4wflOfSIS59SCTg5/7DtOVulTZVP+JZK+aixD+OsiPBiT+aM6FaB
vYF6qwOOFY4r9AXDEnj0dD83UVmevEibxsZJB6gmOTqVcYB9ePYdrjO9HaMAWChW
pxXO7nPLGfTGLke0R30uhk64thCHzFg9MeA4sDZiU1j1//HINXIJDjp5JMia4PYY
XjDdn90j68cnCrrlCRZLuO4bKw35j7loPwmU8EtS/NXo18BF84QW+uMY6NcQ9mQn
O4PZqPr5WQN8n1q6uUklKuDa05msBOQhxEDCzI69ppliBmy5yTInGdlI3+IxlWW5
hw/VJfMtmEfrGbfI0BvK23MlKg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:51 2026 by rpki-client