Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
File:                     D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft (raw, json)
Hash identifier:          gRSLCD+ab3v+XjoT8uBQguJHAj+u+XHZu3qO6YXBgr4=
Subject key identifier:   49:20:6B:52:26:B5:3F:A4:54:E5:DD:DC:9A:55:60:A2:EE:88:B7:F6
Authority key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
Certificate issuer:       /CN=A911E0B4/serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
Manifest number:          ED
Signing time:             Sun 01 Mar 2026 07:31:19 +0000
Manifest this update:     Sun 01 Mar 2026 07:31:18 +0000
Manifest next update:     Sun 08 Mar 2026 07:31:18 +0000
Files and hashes:         1: D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl (hash: cPE9E9+rCXJc5Ct7iceVSeN0nI78iD2hz6qFQLWrN4s=)
                          2: 5AF3ECBEAFBA11EF91955453C4F9AE02.roa (hash: 1NC7oxcWCYbSrIDO89YNV0w8KqRVSyDIVR5Yl6QmGd0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
                          rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
        Validity
            Not Before: Mar  1 07:31:18 2026 GMT
            Not After : Mar  8 07:31:18 2026 GMT
        Subject: CN=69a3eb47-3a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:67:85:c8:5e:3f:aa:74:7c:9f:b8:72:3b:
                    dd:0f:97:48:63:74:d5:2a:79:b6:ab:00:17:21:94:
                    4d:39:e9:a3:21:92:84:35:79:63:48:93:70:9a:b6:
                    65:7f:43:c0:f7:b8:5e:a8:fd:0a:f1:9a:cd:a4:89:
                    e4:ae:3c:d1:4c:f0:25:e1:f9:8f:b1:7e:cc:bb:0a:
                    55:db:28:ae:3e:03:56:00:61:be:24:d3:44:5d:60:
                    a5:fe:e4:ec:0c:85:ea:11:1c:75:63:fe:d1:c7:f1:
                    25:e6:f9:b6:33:10:db:8c:c2:43:ea:3d:00:75:56:
                    d3:44:5d:d9:f7:38:bf:27:7d:df:ea:31:0a:a3:b6:
                    30:49:c8:34:92:d0:7d:eb:37:89:46:fe:43:b9:ae:
                    aa:cc:9b:5d:bd:d4:6d:0b:e5:0b:b4:1d:db:f9:31:
                    5b:51:a1:88:99:cd:d9:46:3e:14:f1:08:df:b6:2f:
                    a7:10:04:d4:b5:de:e7:9f:ce:0c:27:6a:96:21:db:
                    2c:77:61:fd:a1:32:15:11:3e:58:dd:66:29:c3:25:
                    67:40:43:e7:e4:98:ee:a6:0f:7d:7a:9e:16:31:6b:
                    67:a3:6b:a6:3e:6e:fa:8b:a5:88:3b:97:5d:d8:d5:
                    63:d4:b2:6d:70:0f:19:68:8e:fe:7d:fc:0e:eb:84:
                    27:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:20:6B:52:26:B5:3F:A4:54:E5:DD:DC:9A:55:60:A2:EE:88:B7:F6
            X509v3 Authority Key Identifier:
                keyid:0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:64:54:27:3c:c5:16:5c:df:04:0e:da:bd:ac:94:be:0e:57:
         5d:f2:0a:de:68:18:2f:12:ad:e3:2a:92:a8:19:76:f0:b1:8a:
         98:21:f5:b6:76:37:97:8f:4d:ba:6c:f5:94:02:7e:c6:14:6a:
         07:a9:15:a7:0e:53:20:cb:82:bc:2d:ae:57:57:d8:ad:08:2d:
         1b:db:b1:0f:9b:f4:1b:12:f1:48:f5:5c:b5:ea:50:1b:57:b3:
         b8:01:c1:1c:e4:ff:9a:1a:ae:1d:51:66:ea:c3:50:5f:99:6f:
         14:34:c7:10:a9:fc:db:6e:ff:e8:4b:03:ec:d5:b1:a2:fc:42:
         06:5e:9b:41:04:68:fe:3f:8d:7c:ba:1e:76:35:6a:9d:ac:f6:
         64:2b:6a:c9:f8:62:93:de:7c:e2:35:c6:e6:a5:ce:83:b4:b7:
         0d:f3:77:de:85:02:82:c5:64:f3:38:a9:d0:f9:4d:2b:26:ea:
         3e:a2:89:c5:e5:a1:7a:4b:f2:cf:5b:dc:74:03:69:7d:72:84:
         05:72:dc:0f:56:73:7a:9b:97:cb:ad:2e:a8:bf:44:d8:af:6b:
         70:89:d5:d3:ad:99:94:bb:5a:ad:4d:84:c4:56:5c:1f:0c:81:
         5c:23:f0:45:26:05:a7:6e:82:da:16:bb:83:90:f4:f4:77:3f:
         38:84:51:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUUwQjQxMTAvBgNVBAUTKDBGRDQ0Mzc1MjFEQjVDMEJDOTlFNDVCNTk3NTRGRjdC
NjcxRjg2RjMwHhcNMjYwMzAxMDczMTE4WhcNMjYwMzA4MDczMTE4WjAYMRYwFAYD
VQQDEw02OWEzZWI0Ny0zYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0nNnhcheP6p0fJ+4cjvdD5dIY3TVKnm2qwAXIZRNOemjIZKENXljSJNwmrZl
f0PA97heqP0K8ZrNpInkrjzRTPAl4fmPsX7MuwpV2yiuPgNWAGG+JNNEXWCl/uTs
DIXqERx1Y/7Rx/El5vm2MxDbjMJD6j0AdVbTRF3Z9zi/J33f6jEKo7YwScg0ktB9
6zeJRv5Dua6qzJtdvdRtC+ULtB3b+TFbUaGImc3ZRj4U8Qjfti+nEATUtd7nn84M
J2qWIdssd2H9oTIVET5Y3WYpwyVnQEPn5Jjupg99ep4WMWtno2umPm76i6WIO5dd
2NVj1LJtcA8ZaI7+ffwO64QnGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkga1Im
tT+kVOXd3JpVYKLuiLf2MB8GA1UdIwQYMBaAFA/UQ3Uh21wLyZ5FtZdU/3tnH4bz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9FOTY0ODlBRUFG
MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9EOVJEZFNIYlhBdkpua1cxbDFUX2UyY2Zo
dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Q5UkRkU0hiWEF2Sm5rVzFsMVRfZTJjZmh2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTBCNC9FOTY0ODlBRUFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9EOVJEZFNIYlhB
dkpua1cxbDFUX2UyY2Zodk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi2RUJzzFFlzfBA7avayUvg5XXfIK3mgYLxKt4yqSqBl28LGKmCH1tnY3l49N
umz1lAJ+xhRqB6kVpw5TIMuCvC2uV1fYrQgtG9uxD5v0GxLxSPVctepQG1ezuAHB
HOT/mhquHVFm6sNQX5lvFDTHEKn8227/6EsD7NWxovxCBl6bQQRo/j+NfLoedjVq
naz2ZCtqyfhik9584jXG5qXOg7S3DfN33oUCgsVk8zip0PlNKybqPqKJxeWhekvy
z1vcdANpfXKEBXLcD1ZzepuXy60uqL9E2K9rcInV062ZlLtarU2ExFZcHwyBXCPw
RSYFp26C2ha7g5D09Hc/OIRRkA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:06 2026 by rpki-client