Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
File:                     oiK21tBSghQiHUrOpH4axhHvQno.mft (raw, json)
Hash identifier:          t3lXWprRhYYlZ1eOX++UIxCYIG2H9PdKl3oeN4zMte4=
Subject key identifier:   53:3C:D5:20:46:27:A1:E9:03:88:11:1C:9E:9C:6F:3B:AD:C7:CB:BB
Authority key identifier: A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A
Certificate issuer:       /CN=A911F177/serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
Certificate serial:       0822
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
Manifest number:          081A
Signing time:             Sun 01 Mar 2026 23:11:41 +0000
Manifest this update:     Sun 01 Mar 2026 23:11:40 +0000
Manifest next update:     Sun 08 Mar 2026 23:11:40 +0000
Files and hashes:         1: oiK21tBSghQiHUrOpH4axhHvQno.crl (hash: RR1Fkn3KVllS0pB7hShzTSC7uWnKokd1Dp9wgEVPEW4=)
                          2: 90203ACEDEE811EBA82BEF41C4F9AE02.roa (hash: oot2eMtZy8Bb20t9t+iEwLkFtUPz+/MiX0LVfUtGAbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl
                          rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2082 (0x822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F177, serialNumber=A222B6D6D0528214221D4ACEA47E1AC611EF427A
        Validity
            Not Before: Mar  1 23:11:40 2026 GMT
            Not After : Mar  8 23:11:40 2026 GMT
        Subject: CN=69a4c7ad-2822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:96:31:a3:33:90:0a:ab:b6:35:76:be:7d:e9:
                    68:75:70:56:54:c4:eb:8e:de:e1:d1:a1:53:33:a4:
                    12:ea:ea:93:ba:8f:fd:81:30:80:3f:3f:82:b5:30:
                    25:ec:24:42:da:93:33:8b:29:3a:45:32:67:76:29:
                    9a:69:e7:7e:13:89:83:ad:4b:dc:ff:f6:7e:88:9b:
                    75:19:4f:0a:cc:85:33:98:4c:0c:83:79:95:88:17:
                    5c:4b:22:dc:04:26:17:0a:0f:7b:66:ef:07:be:89:
                    e8:c5:b1:af:be:5b:8b:ba:4a:78:00:6c:c9:0e:ba:
                    63:5d:0c:30:35:d2:70:52:42:45:8d:e4:02:8c:96:
                    5a:b9:ad:a9:0b:e2:18:50:92:a3:87:c0:b9:be:c0:
                    bb:aa:5d:d1:e3:cc:ce:ed:a0:c1:84:e9:7d:54:14:
                    42:85:75:62:ed:dd:b5:f8:5b:9d:e2:cb:26:f3:53:
                    37:ab:ed:1e:2c:86:ca:ea:11:55:a6:88:bc:fd:02:
                    38:6f:f9:dc:87:c0:b2:b1:bb:15:31:33:5b:a9:51:
                    53:c9:29:83:59:1c:89:35:7c:b3:b9:9d:82:44:40:
                    79:66:51:29:10:af:09:79:51:ce:ff:40:86:8f:b3:
                    72:ba:97:fd:1e:e5:1f:39:e1:bb:4c:46:ad:8f:98:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3C:D5:20:46:27:A1:E9:03:88:11:1C:9E:9C:6F:3B:AD:C7:CB:BB
            X509v3 Authority Key Identifier:
                keyid:A2:22:B6:D6:D0:52:82:14:22:1D:4A:CE:A4:7E:1A:C6:11:EF:42:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiK21tBSghQiHUrOpH4axhHvQno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F177/82EE58260E0611EB86876E53C4F9AE02/oiK21tBSghQiHUrOpH4axhHvQno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d2:4c:fe:14:20:25:60:9c:db:b6:3d:d9:c3:e4:13:c0:e8:
         d7:52:63:04:1d:c8:f0:65:ab:55:73:c4:ca:ef:a9:c8:04:ce:
         53:b5:b5:6b:06:1e:f2:7a:7b:9d:e6:c2:c7:1f:62:b8:21:e8:
         85:54:5e:c7:01:b3:2d:a6:61:22:ac:b4:e5:38:c7:69:8e:17:
         6a:7e:96:bb:c8:f9:d7:35:0e:33:10:87:92:f0:d2:8a:62:00:
         c3:0f:74:2b:97:75:ec:45:50:85:50:ea:44:45:f0:a8:93:56:
         82:74:9d:54:d6:74:ad:78:b7:32:91:07:47:71:7d:56:21:fb:
         15:0f:35:f8:14:b1:b6:c2:e9:85:35:9d:c1:62:c4:5d:b7:a3:
         17:ec:a7:0b:66:eb:87:60:a8:d4:19:a1:3f:ef:94:32:3e:8a:
         bb:c7:d9:9d:1d:c9:2e:87:90:f8:50:01:32:37:b5:88:eb:e8:
         07:25:94:db:3f:9c:3e:16:95:60:9b:f9:ae:95:ee:62:50:1d:
         5b:c6:17:fd:17:03:8a:dd:ce:f6:95:3a:f3:e7:8f:03:26:53:
         8f:55:7a:8c:2b:d4:4f:c0:72:d3:e7:f4:e6:1f:16:7b:8e:a5:
         56:8a:a4:57:da:5e:df:06:36:fe:53:16:4b:d8:bf:ea:8c:cb:
         0a:5a:93:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUYxNzcxMTAvBgNVBAUTKEEyMjJCNkQ2RDA1MjgyMTQyMjFENEFDRUE0N0UxQUM2
MTFFRjQyN0EwHhcNMjYwMzAxMjMxMTQwWhcNMjYwMzA4MjMxMTQwWjAYMRYwFAYD
VQQDEw02OWE0YzdhZC0yODIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAipYxozOQCqu2NXa+felodXBWVMTrjt7h0aFTM6QS6uqTuo/9gTCAPz+CtTAl
7CRC2pMziyk6RTJndimaaed+E4mDrUvc//Z+iJt1GU8KzIUzmEwMg3mViBdcSyLc
BCYXCg97Zu8HvonoxbGvvluLukp4AGzJDrpjXQwwNdJwUkJFjeQCjJZaua2pC+IY
UJKjh8C5vsC7ql3R48zO7aDBhOl9VBRChXVi7d21+Fud4ssm81M3q+0eLIbK6hFV
poi8/QI4b/nch8CysbsVMTNbqVFTySmDWRyJNXyzuZ2CREB5ZlEpEK8JeVHO/0CG
j7Nyupf9HuUfOeG7TEatj5h/wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFM81SBG
J6HpA4gRHJ6cbzutx8u7MB8GA1UdIwQYMBaAFKIittbQUoIUIh1KzqR+GsYR70J6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjE3Ny84MkVFNTgyNjBF
MDYxMUVCODY4NzZFNTNDNEY5QUUwMi9vaUsyMXRCU2doUWlIVXJPcEg0YXhoSHZR
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29pSzIxdEJTZ2hRaUhVck9wSDRheGhIdlFuby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjE3Ny84MkVFNTgyNjBFMDYxMUVCODY4NzZFNTNDNEY5QUUwMi9vaUsyMXRCU2do
UWlIVXJPcEg0YXhoSHZRbm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV9JM/hQgJWCc27Y92cPkE8Do11JjBB3I8GWrVXPEyu+pyATOU7W1awYe8np7
nebCxx9iuCHohVRexwGzLaZhIqy05TjHaY4Xan6Wu8j51zUOMxCHkvDSimIAww90
K5d17EVQhVDqREXwqJNWgnSdVNZ0rXi3MpEHR3F9ViH7FQ81+BSxtsLphTWdwWLE
XbejF+ynC2brh2Co1BmhP++UMj6Ku8fZnR3JLoeQ+FABMje1iOvoByWU2z+cPhaV
YJv5rpXuYlAdW8YX/RcDit3O9pU68+ePAyZTj1V6jCvUT8By0+f05h8We46lVoqk
V9pe3wY2/lMWS9i/6ozLClqTEw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:02 2026 by rpki-client