Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
File:                     MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft (raw, json)
Hash identifier:          WrN2MuGLHMLIeESUsrjhvH9WVCLLrbm+56l94lGOPes=
Subject key identifier:   59:FA:94:04:F3:C5:02:8C:26:8C:C6:2D:00:AD:30:2F:38:D8:19:4A
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Certificate issuer:       /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
Manifest number:          01CE
Signing time:             Sun 01 Mar 2026 04:26:49 +0000
Manifest this update:     Sun 01 Mar 2026 04:26:49 +0000
Manifest next update:     Sun 08 Mar 2026 04:26:49 +0000
Files and hashes:         1: MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl (hash: ZxGijbqfMZ74UGoSF29/gi2ucBq6OS6vcEYr9WQuDZw=)
                          2: 5EF938889E9E11EE80C94682C4F9AE02.roa (hash: OT5YWlqkItHLi5bPmLASPXyr8A+gmfi7s/RtTm3IX1Y=)
                          3: 22613D48AC7311EE8A97A86FC4F9AE02.roa (hash: hZwCg3vX+8I7iA0U478ju0al4yPcr8BJq7DCP5lsMTw=)
                          4: 1E541192D5A111EE9D73FA44C4F9AE02.roa (hash: PkHoygrzgQXGcQmvLoQzO4hxoPzClFY6rUEoiklk2uM=)
                          5: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (hash: 0E5ZrcTf7DXMuz4aUd6Z4uT4t0ULuFOlqB89yxtXkyQ=)
                          6: 1B2EC2A457E411EEB143C80EC4F9AE02.roa (hash: PcZoN3ci4co6UnsxaZnIha4fixwPCG4/IAXAIlyDexU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
                          rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
        Validity
            Not Before: Mar  1 04:26:49 2026 GMT
            Not After : Mar  8 04:26:49 2026 GMT
        Subject: CN=69a3c009-7fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:12:5a:a5:2d:b2:e7:cf:fb:d2:06:0b:60:
                    3c:18:3c:8e:2a:a0:f7:83:3f:8a:de:61:02:3d:d6:
                    cc:1d:51:19:dd:20:ec:cb:de:d5:53:91:cf:35:7a:
                    b1:ca:5d:f8:a5:f1:3f:14:f7:14:e6:04:6b:7e:68:
                    7b:c7:36:4a:aa:59:35:e7:0e:f9:d3:2f:f6:80:7e:
                    f5:d6:e5:01:b6:7b:e9:8a:d9:93:08:ea:f6:fe:df:
                    05:49:f8:69:ed:de:54:e6:ba:cc:8f:62:e0:7a:61:
                    bd:f5:97:ff:0a:7a:bb:8d:20:85:40:84:8b:26:d7:
                    f5:cb:61:a4:06:53:64:a4:6e:35:5f:ba:66:ed:ac:
                    23:97:fb:a0:92:90:a8:34:39:1f:a1:f4:8e:b2:bb:
                    68:3b:57:ae:12:4e:3e:83:cc:ff:4b:1d:d6:6e:6f:
                    81:54:7a:7b:cb:ee:3e:e1:7e:e0:2d:94:1e:ae:c1:
                    bc:5f:35:31:fa:bd:31:a2:25:5a:49:f1:2a:50:b4:
                    81:64:86:bf:1d:16:5c:49:6f:39:b6:5e:8b:3b:7b:
                    97:be:c3:33:40:bb:c3:a2:b7:37:45:8c:58:a4:37:
                    e2:71:f9:0e:0b:24:82:41:5e:54:bc:33:6a:d1:d4:
                    16:2d:47:8b:95:48:95:dd:26:15:f9:7d:55:ea:06:
                    98:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FA:94:04:F3:C5:02:8C:26:8C:C6:2D:00:AD:30:2F:38:D8:19:4A
            X509v3 Authority Key Identifier:
                keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:dd:af:66:8e:97:d3:20:be:b1:14:0c:71:de:a7:f4:6a:26:
         2a:ee:32:ec:04:a1:aa:d1:d9:7b:10:b8:70:31:59:22:3b:81:
         45:40:38:12:fd:cd:04:50:dc:ef:7f:4c:cf:42:da:1e:67:ce:
         bd:42:e3:e2:9a:cc:c7:aa:5f:5e:45:be:5f:b7:59:e6:53:4d:
         91:51:69:15:7a:2b:28:ef:36:23:03:11:a9:a6:f9:12:cd:03:
         b9:b5:fd:21:69:43:a0:a7:8c:43:3d:8b:e3:87:77:57:d6:d4:
         eb:5e:e5:59:0b:34:d1:f7:5a:c5:a5:4f:fc:46:9b:f9:1e:17:
         ab:fd:49:c7:4b:29:5f:24:64:6f:af:74:80:a7:bb:ea:b5:d5:
         2a:5a:41:b5:ac:0b:54:2e:43:af:6d:dc:54:ea:83:79:4c:18:
         00:41:c4:6b:d2:7f:5c:a0:96:69:cc:9f:9a:ca:7c:93:76:a1:
         49:7d:5d:0c:52:19:30:91:1a:95:66:2c:82:43:f5:29:9c:fb:
         f3:6a:bd:e9:74:dc:a5:b4:0d:1e:e3:b2:3e:ed:4e:97:90:bd:
         0c:88:cb:76:78:61:53:62:b6:7d:56:3b:0d:c7:dc:ad:0d:dd:
         82:ab:6a:c3:7d:77:1f:a2:af:75:c4:42:b5:7d:cd:65:fa:c2:
         68:05:a3:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5
NUI5MDJBMjAwHhcNMjYwMzAxMDQyNjQ5WhcNMjYwMzA4MDQyNjQ5WjAYMRYwFAYD
VQQDDA02OWEzYzAwOS03ZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA04USWqUtsufP+9IGC2A8GDyOKqD3gz+K3mECPdbMHVEZ3SDsy97VU5HPNXqx
yl34pfE/FPcU5gRrfmh7xzZKqlk15w750y/2gH711uUBtnvpitmTCOr2/t8FSfhp
7d5U5rrMj2LgemG99Zf/Cnq7jSCFQISLJtf1y2GkBlNkpG41X7pm7awjl/ugkpCo
NDkfofSOsrtoO1euEk4+g8z/Sx3Wbm+BVHp7y+4+4X7gLZQersG8XzUx+r0xoiVa
SfEqULSBZIa/HRZcSW85tl6LO3uXvsMzQLvDorc3RYxYpDficfkOCySCQV5UvDNq
0dQWLUeLlUiV3SYV+X1V6gaYmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFn6lATz
xQKMJozGLQCtMC842BlKMB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3
REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUJDRS85MDA5OUM0MDU3REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1
U2QyQ3lDOS16ckNWdVFLaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmN2vZo6X0yC+sRQMcd6n9GomKu4y7AShqtHZexC4cDFZIjuBRUA4Ev3NBFDc
739Mz0LaHmfOvULj4prMx6pfXkW+X7dZ5lNNkVFpFXorKO82IwMRqab5Es0DubX9
IWlDoKeMQz2L44d3V9bU617lWQs00fdaxaVP/Eab+R4Xq/1Jx0spXyRkb690gKe7
6rXVKlpBtawLVC5Dr23cVOqDeUwYAEHEa9J/XKCWacyfmsp8k3ahSX1dDFIZMJEa
lWYsgkP1KZz782q96XTcpbQNHuOyPu1Ol5C9DIjLdnhhU2K2fVY7DcfcrQ3dgqtq
w313H6KvdcRCtX3NZfrCaAWj6g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:10 2026 by rpki-client