Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
File:                     rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft (raw, json)
Hash identifier:          xPi3+bo65pwxTDarY3WhHCTmXwdRoO9nkPNiWEzWKJE=
Subject key identifier:   F0:02:A1:FC:9C:75:8C:84:DC:6A:DF:71:98:5D:D9:C4:FD:77:D1:76
Authority key identifier: AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04
Certificate issuer:       /CN=A911A69A/serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
Manifest number:          0127
Signing time:             Sun 01 Mar 2026 06:38:53 +0000
Manifest this update:     Sun 01 Mar 2026 06:38:52 +0000
Manifest next update:     Sun 08 Mar 2026 06:38:52 +0000
Files and hashes:         1: rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl (hash: G4s7czDiOH6PpgSuS4AYbPAFwk3FozM+A0Ei73MVdGU=)
                          2: 39E76DD0589311EF88BF4665C4F9AE02.roa (hash: t3nWUOarrxhEFD60ip2NaXslcMEcqGLVxqGfot6fF3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl
                          rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A69A, serialNumber=AE658EA377EA11840B08EA6C88D9090E8B6C5204
        Validity
            Not Before: Mar  1 06:38:52 2026 GMT
            Not After : Mar  8 06:38:52 2026 GMT
        Subject: CN=69a3defd-f180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c6:66:7a:af:d6:9b:8d:28:32:1e:0d:50:09:
                    90:83:a4:0e:7b:c2:6d:75:a4:48:45:f6:00:82:6a:
                    18:fe:52:13:45:af:fc:d9:4b:46:1e:7b:cb:cd:65:
                    73:18:36:44:68:a6:09:62:2d:1b:71:91:17:17:eb:
                    cb:a6:5d:97:ee:28:92:b8:9a:14:29:59:11:df:05:
                    f5:ce:b2:3f:1a:50:96:7c:74:fc:02:bf:f1:51:2e:
                    93:f7:87:e3:5f:2a:05:74:99:ce:e3:69:a6:50:09:
                    74:45:6d:a1:a1:b6:4d:5c:f0:b8:56:20:fd:81:5d:
                    ce:29:44:0e:a5:8a:9f:e0:a3:ba:e0:18:57:b4:99:
                    b2:17:3b:8f:50:16:e6:88:ec:e5:fb:05:4f:7e:c9:
                    d3:86:64:68:c4:04:32:37:05:55:75:02:40:e7:6b:
                    91:08:31:c6:a3:ed:ec:4b:09:63:62:32:f8:1a:f0:
                    68:16:28:22:04:91:cf:d3:da:95:af:f0:f9:f9:91:
                    b9:cf:b1:c5:f6:0f:de:e7:25:72:29:ec:5b:2f:3d:
                    4b:d6:20:2f:b7:54:84:d3:5f:06:97:65:91:36:8c:
                    7c:75:92:54:9e:ac:89:0b:e2:7b:2e:e4:c0:7d:86:
                    9b:e0:ab:e4:a9:73:b5:94:2b:1d:a2:34:bb:f8:0a:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:02:A1:FC:9C:75:8C:84:DC:6A:DF:71:98:5D:D9:C4:FD:77:D1:76
            X509v3 Authority Key Identifier:
                keyid:AE:65:8E:A3:77:EA:11:84:0B:08:EA:6C:88:D9:09:0E:8B:6C:52:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rmWOo3fqEYQLCOpsiNkJDotsUgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A69A/8B0E7380589211EF86B12564C4F9AE02/rmWOo3fqEYQLCOpsiNkJDotsUgQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:51:4d:f9:03:2b:5b:74:ec:db:8b:51:b9:7f:9b:d2:6b:08:
         17:51:c3:5a:7c:fb:f6:a4:d0:08:7a:65:83:cc:78:64:7d:45:
         dc:3a:56:31:1b:6e:66:03:cd:9b:43:9f:53:69:c6:f9:d3:6e:
         ba:d1:9c:f2:a1:d1:fb:8e:ad:24:5e:9d:58:23:32:99:fa:14:
         2e:3d:f2:57:1d:a4:cf:33:ee:09:1c:03:3f:57:d4:e0:a3:38:
         15:18:1b:44:b3:df:6a:db:2d:0a:de:1d:f5:91:f0:50:3e:d4:
         69:08:76:9c:8e:a9:28:95:89:e6:da:47:d7:0a:7f:20:77:25:
         a0:34:0c:8c:1d:c5:e1:29:c2:0e:f0:33:82:c0:fa:48:f1:dc:
         c0:da:24:c3:dc:6c:90:96:13:97:ad:4b:7d:6b:af:e0:20:74:
         8e:bf:2f:26:bc:4f:d0:64:7c:c5:cf:ed:7f:47:f1:75:3a:87:
         e1:cb:da:ee:35:9d:84:35:44:c1:bd:cc:c7:b6:90:87:bb:77:
         e6:c2:a0:e3:e8:f9:87:e4:98:3b:cf:77:33:5e:42:0a:9f:4a:
         28:0d:a4:fd:ac:66:97:d4:84:67:3e:2a:b3:24:3f:e3:19:67:
         9d:6a:07:db:3c:9f:ab:65:bf:6e:74:27:d3:6d:fc:cf:8c:8b:
         3f:5f:61:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUE2OUExMTAvBgNVBAUTKEFFNjU4RUEzNzdFQTExODQwQjA4RUE2Qzg4RDkwOTBF
OEI2QzUyMDQwHhcNMjYwMzAxMDYzODUyWhcNMjYwMzA4MDYzODUyWjAYMRYwFAYD
VQQDEw02OWEzZGVmZC1mMTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA38Zmeq/Wm40oMh4NUAmQg6QOe8JtdaRIRfYAgmoY/lITRa/82UtGHnvLzWVz
GDZEaKYJYi0bcZEXF+vLpl2X7iiSuJoUKVkR3wX1zrI/GlCWfHT8Ar/xUS6T94fj
XyoFdJnO42mmUAl0RW2hobZNXPC4ViD9gV3OKUQOpYqf4KO64BhXtJmyFzuPUBbm
iOzl+wVPfsnThmRoxAQyNwVVdQJA52uRCDHGo+3sSwljYjL4GvBoFigiBJHP09qV
r/D5+ZG5z7HF9g/e5yVyKexbLz1L1iAvt1SE018Gl2WRNox8dZJUnqyJC+J7LuTA
fYab4KvkqXO1lCsdojS7+Ap+2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPACofyc
dYyE3GrfcZhd2cT9d9F2MB8GA1UdIwQYMBaAFK5ljqN36hGECwjqbIjZCQ6LbFIE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTY5QS84QjBFNzM4MDU4
OTIxMUVGODZCMTI1NjRDNEY5QUUwMi9ybVdPbzNmcUVZUUxDT3BzaU5rSkRvdHNV
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JtV09vM2ZxRVlRTENPcHNpTmtKRG90c1VnUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QTY5QS84QjBFNzM4MDU4OTIxMUVGODZCMTI1NjRDNEY5QUUwMi9ybVdPbzNmcUVZ
UUxDT3BzaU5rSkRvdHNVZ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR1FN+QMrW3Ts24tRuX+b0msIF1HDWnz79qTQCHplg8x4ZH1F3DpWMRtuZgPN
m0OfU2nG+dNuutGc8qHR+46tJF6dWCMymfoULj3yVx2kzzPuCRwDP1fU4KM4FRgb
RLPfatstCt4d9ZHwUD7UaQh2nI6pKJWJ5tpH1wp/IHcloDQMjB3F4SnCDvAzgsD6
SPHcwNokw9xskJYTl61LfWuv4CB0jr8vJrxP0GR8xc/tf0fxdTqH4cva7jWdhDVE
wb3Mx7aQh7t35sKg4+j5h+SYO893M15CCp9KKA2k/axml9SEZz4qsyQ/4xlnnWoH
2zyfq2W/bnQn0238z4yLP19h3w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:56 2026 by rpki-client