Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
File:                     Qf4dQTWrLWdiPnYIM5hGitT6odw.mft (raw, json)
Hash identifier:          9t4uBQIgUEYE5uH4Dt/EzLXOjn96QGhhJsGvpcbNodI=
Subject key identifier:   FC:E4:B2:DD:D7:AF:7D:CA:76:5E:E8:2D:CA:70:BF:20:C4:B4:64:F0
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Certificate issuer:       /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial:       1C8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
Manifest number:          1C57
Signing time:             Sat 28 Feb 2026 16:15:45 +0000
Manifest this update:     Sat 28 Feb 2026 16:15:45 +0000
Manifest next update:     Sat 07 Mar 2026 16:15:45 +0000
Files and hashes:         1: Qf4dQTWrLWdiPnYIM5hGitT6odw.crl (hash: CtteTrMXP2MV2UD32EF8GwAW39dXf61KcjTwsrFG3MM=)
                          2: E007C458C1F111F0BF3C4B61C4F9AE02.roa (hash: syr5keE2kGwUDFJmQwSmPdSjoefEMhtzkVJ4glu0DSA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
                          rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7309 (0x1c8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
        Validity
            Not Before: Feb 28 16:15:45 2026 GMT
            Not After : Mar  7 16:15:45 2026 GMT
        Subject: CN=69a314b1-9e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:b7:b2:0f:fd:85:58:78:8d:7f:68:be:f4:
                    bc:ba:70:47:4f:38:6f:39:79:65:e5:fe:a8:b1:f7:
                    d1:b4:c3:9c:7c:73:4c:52:ab:73:6c:3e:d1:0b:5d:
                    2a:52:2a:c7:03:18:ad:ee:55:51:34:8e:18:02:a7:
                    c0:a0:c3:94:f3:b2:19:78:48:4d:f6:9f:39:c9:ad:
                    74:ff:49:f1:1d:2d:64:ed:61:e1:a2:a9:f9:f9:c2:
                    74:ce:ee:95:dd:9c:93:4d:9d:ec:d0:45:10:43:ff:
                    eb:53:f7:79:a0:a0:d1:ce:90:b9:61:5f:bb:12:a9:
                    0c:9a:d7:da:52:2d:a8:83:af:14:39:ee:57:39:41:
                    30:21:75:0e:a5:66:3d:4f:68:2f:08:94:9b:1c:8b:
                    fb:dc:6a:de:2b:55:ad:85:4a:b4:b0:64:93:2d:76:
                    ca:51:9f:90:c8:e8:51:01:97:f1:07:dc:dc:ac:4e:
                    31:36:60:ac:7f:f5:4b:7a:02:09:76:66:fd:9a:0d:
                    d2:1b:77:8c:6e:a9:e2:5f:cf:e7:80:90:d4:04:8f:
                    25:0d:ed:a3:c2:39:8c:6c:df:cd:78:bf:13:ca:83:
                    be:4c:87:99:13:93:84:4e:18:12:bf:f8:c9:a3:1d:
                    2c:7b:9b:03:c5:2d:7d:55:52:fb:2c:14:10:5d:c9:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E4:B2:DD:D7:AF:7D:CA:76:5E:E8:2D:CA:70:BF:20:C4:B4:64:F0
            X509v3 Authority Key Identifier:
                keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:7a:5f:81:f2:e9:6f:77:a4:38:1c:c3:07:47:9e:9f:5e:68:
         ca:b7:8b:1c:5b:31:a9:60:6f:8e:e9:0b:a5:9d:b8:07:53:6c:
         41:2e:88:15:93:97:bd:e5:b8:85:1d:f2:97:48:5b:97:7a:22:
         cf:e2:8a:0b:e4:0e:68:eb:9f:41:14:0e:dd:ba:e3:a5:76:ae:
         5e:7a:6b:5c:e0:4f:80:f3:70:3f:a1:47:53:d3:96:a1:cf:30:
         e7:10:bd:5d:ab:a8:2b:97:10:df:bf:f9:01:2f:98:f3:d3:b5:
         9f:f9:54:46:62:56:b7:85:a6:a9:e0:c3:ed:0b:30:22:30:51:
         bd:bd:c7:51:86:2a:f5:67:38:f7:96:c3:c7:5e:ce:d1:ef:7a:
         86:07:82:87:6e:3b:45:5d:2d:48:6a:02:45:ad:91:8b:1f:3e:
         bd:32:db:4a:f1:dc:b0:e7:13:58:ba:21:94:ba:c5:18:eb:07:
         64:ac:fa:cd:3f:d4:b0:f0:f3:74:55:1b:0b:63:0a:61:1e:5d:
         96:b9:bd:ad:b7:48:64:00:51:4d:60:a7:4b:34:b7:70:ac:3b:
         d3:82:e2:3a:7c:0f:e0:7f:52:bb:bc:bd:64:ea:01:e8:e5:a6:
         19:b4:73:da:70:84:70:e7:41:72:19:c0:67:a2:de:ab:df:d8:
         d1:26:5d:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI1RDcxMTAvBgNVBAUTKDQxRkUxRDQxMzVBQjJENjc2MjNFNzYwODMzOTg0NjhB
RDRGQUExREMwHhcNMjYwMjI4MTYxNTQ1WhcNMjYwMzA3MTYxNTQ1WjAYMRYwFAYD
VQQDDA02OWEzMTRiMS05ZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7y3sg/9hVh4jX9ovvS8unBHTzhvOXll5f6osffRtMOcfHNMUqtzbD7RC10q
UirHAxit7lVRNI4YAqfAoMOU87IZeEhN9p85ya10/0nxHS1k7WHhoqn5+cJ0zu6V
3ZyTTZ3s0EUQQ//rU/d5oKDRzpC5YV+7EqkMmtfaUi2og68UOe5XOUEwIXUOpWY9
T2gvCJSbHIv73GreK1WthUq0sGSTLXbKUZ+QyOhRAZfxB9zcrE4xNmCsf/VLegIJ
dmb9mg3SG3eMbqniX8/ngJDUBI8lDe2jwjmMbN/NeL8TyoO+TIeZE5OEThgSv/jJ
ox0se5sDxS19VVL7LBQQXckUuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzkst3X
r33Kdl7oLcpwvyDEtGTwMB8GA1UdIwQYMBaAFEH+HUE1qy1nYj52CDOYRorU+qHc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVENy8yNTg3MkJCRTAz
QjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxXZGlQbllJTTVoR2l0VDZv
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FmNGRRVFdyTFdkaVBuWUlNNWhHaXRUNm9kdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjVENy8yNTg3MkJCRTAzQjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxX
ZGlQbllJTTVoR2l0VDZvZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzHpfgfLpb3ekOBzDB0een15oyreLHFsxqWBvjukLpZ24B1NsQS6IFZOXveW4
hR3yl0hbl3oiz+KKC+QOaOufQRQO3brjpXauXnprXOBPgPNwP6FHU9OWoc8w5xC9
XauoK5cQ37/5AS+Y89O1n/lURmJWt4WmqeDD7QswIjBRvb3HUYYq9Wc495bDx17O
0e96hgeCh247RV0tSGoCRa2Rix8+vTLbSvHcsOcTWLohlLrFGOsHZKz6zT/UsPDz
dFUbC2MKYR5dlrm9rbdIZABRTWCnSzS3cKw704LiOnwP4H9Su7y9ZOoB6OWmGbRz
2nCEcOdBchnAZ6Leq9/Y0SZdXQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:12:57 2026 by rpki-client