Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
File:                     _I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft (raw, json)
Hash identifier:          8QjAovwXCNJctqhVglSmjIZ2YJRnSzInMSyoh/q0V1k=
Subject key identifier:   D6:2C:86:F2:43:0B:A5:0D:A1:C6:12:28:48:BB:B5:BC:3C:85:1E:16
Authority key identifier: FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03
Certificate issuer:       /CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503
Certificate serial:       08C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
Manifest number:          08BB
Signing time:             Mon 02 Mar 2026 02:35:32 +0000
Manifest this update:     Mon 02 Mar 2026 02:35:29 +0000
Manifest next update:     Mon 09 Mar 2026 02:35:29 +0000
Files and hashes:         1: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl (hash: +9Sfo81VeK2TnOZWiR6kEPGUalyExgeudQ0hobDHDJ4=)
                          2: 22FDFFE88DF511EFB5AC9269C4F9AE02.roa (hash: aH5SgttT3yBxPoJZcOUIaaeUL8JdCzJhMaUjR/JZqLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl
                          rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2249 (0x8c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91226E9, serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503
        Validity
            Not Before: Mar  2 02:35:29 2026 GMT
            Not After : Mar  9 02:35:29 2026 GMT
        Subject: CN=69a4f773-4283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:20:0f:a0:9b:b5:74:47:d3:89:b0:22:63:
                    96:9d:42:1c:29:17:a9:69:1a:6c:e9:86:3f:9c:41:
                    b4:9e:17:f7:b7:20:db:c0:e3:0c:72:27:d6:89:a2:
                    25:3f:84:54:4e:fc:4c:6a:b9:53:fc:72:63:42:23:
                    b0:a1:96:af:8e:af:05:78:16:a6:26:ef:ac:80:2e:
                    42:da:75:5e:96:e1:f3:82:f0:0d:cf:be:12:b3:b0:
                    af:7a:e9:ab:a3:a6:09:e8:d7:4d:b0:70:bc:9f:53:
                    47:e8:f1:ca:db:8e:77:45:82:2e:8d:5c:39:62:f7:
                    f0:b3:62:a0:4f:47:c1:73:9d:05:ad:0b:a6:33:f1:
                    32:79:d6:67:5e:f0:dd:df:7d:65:24:08:3c:49:c2:
                    b5:93:fc:68:ab:d6:40:9f:b2:9b:d1:44:65:72:5a:
                    8e:23:58:04:a0:7f:be:8f:0c:3d:f5:1c:d4:dc:c2:
                    00:67:0e:11:89:30:f8:3f:d2:1f:e1:8a:40:b9:22:
                    18:03:85:29:3b:ec:f7:c1:2e:6d:47:a2:38:00:64:
                    ed:c7:06:be:58:58:8d:78:eb:f5:c9:bd:26:07:09:
                    ee:18:e8:2e:fa:cf:1b:70:e9:34:06:ef:83:d6:11:
                    4c:cf:26:00:36:9c:f6:a1:04:6c:b4:6c:c0:dc:e2:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2C:86:F2:43:0B:A5:0D:A1:C6:12:28:48:BB:B5:BC:3C:85:1E:16
            X509v3 Authority Key Identifier:
                keyid:FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:7d:ee:4b:26:af:94:c9:b0:a7:72:97:e2:db:39:c3:bb:fd:
         fe:8b:53:31:3b:7c:e6:27:4e:8c:56:f1:63:6b:81:cc:55:00:
         bd:11:ca:5f:91:d7:69:0a:0a:11:ad:bd:c4:5b:e6:46:c1:5f:
         82:db:6d:f2:c3:c8:5e:71:26:67:bb:ba:b0:30:71:a7:3b:c4:
         cf:1b:e8:9a:06:2c:47:75:c2:3a:97:6b:46:1d:ee:8b:7c:8c:
         17:5a:09:6b:27:ed:05:62:b5:6e:1b:69:ef:75:bb:98:92:b7:
         bc:ec:09:62:c5:57:57:5a:8f:9a:15:b5:8f:91:6b:2e:1c:d0:
         44:ce:d0:cd:52:be:2f:c7:f5:36:d4:44:ed:17:2d:f6:86:8d:
         4a:73:b8:88:26:00:de:5e:e5:a4:59:6f:35:aa:5f:cf:6d:c6:
         5a:d4:7d:cd:ef:c0:02:dd:8f:29:1b:14:eb:8d:3d:8c:53:3f:
         95:12:6e:bc:b1:53:93:14:4d:56:c3:3f:2d:68:b6:32:33:16:
         4b:60:5c:0e:2f:d2:f5:10:9e:45:1c:00:aa:02:84:31:38:6d:
         53:92:1b:00:dc:c8:36:48:23:a1:51:ad:b0:3c:96:35:70:a3:
         a3:98:75:6b:46:ec:e1:b6:8f:5a:05:d6:ab:25:0a:97:61:65:
         04:63:74:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjI2RTkxMTAvBgNVBAUTKEZDOEVEMDhGQzkyMzAxNzRFMzExOTBFREFENTg1MkFD
NDVDMzg1MDMwHhcNMjYwMzAyMDIzNTI5WhcNMjYwMzA5MDIzNTI5WjAYMRYwFAYD
VQQDEw02OWE0Zjc3My00MjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvS0gD6CbtXRH04mwImOWnUIcKRepaRps6YY/nEG0nhf3tyDbwOMMcifWiaIl
P4RUTvxMarlT/HJjQiOwoZavjq8FeBamJu+sgC5C2nVeluHzgvANz74Ss7Cveumr
o6YJ6NdNsHC8n1NH6PHK2453RYIujVw5Yvfws2KgT0fBc50FrQumM/EyedZnXvDd
331lJAg8ScK1k/xoq9ZAn7Kb0URlclqOI1gEoH++jww99RzU3MIAZw4RiTD4P9If
4YpAuSIYA4UpO+z3wS5tR6I4AGTtxwa+WFiNeOv1yb0mBwnuGOgu+s8bcOk0Bu+D
1hFMzyYANpz2oQRstGzA3OIGrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYshvJD
C6UNocYSKEi7tbw8hR4WMB8GA1UdIwQYMBaAFPyO0I/JIwF04xGQ7a1YUqxFw4UD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjZFOS84M0RFNjg3OEQx
RjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFYVGpFWkR0clZoU3JFWERo
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19JN1FqOGtqQVhUakVaRHRyVmhTckVYRGhRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjZFOS84M0RFNjg3OEQxRjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFY
VGpFWkR0clZoU3JFWERoUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV33uSyavlMmwp3KX4ts5w7v9/otTMTt85idOjFbxY2uBzFUAvRHKX5HXaQoK
Ea29xFvmRsFfgttt8sPIXnEmZ7u6sDBxpzvEzxvomgYsR3XCOpdrRh3ui3yMF1oJ
ayftBWK1bhtp73W7mJK3vOwJYsVXV1qPmhW1j5FrLhzQRM7QzVK+L8f1NtRE7Rct
9oaNSnO4iCYA3l7lpFlvNapfz23GWtR9ze/AAt2PKRsU6409jFM/lRJuvLFTkxRN
VsM/LWi2MjMWS2BcDi/S9RCeRRwAqgKEMThtU5IbANzINkgjoVGtsDyWNXCjo5h1
a0bs4baPWgXWqyUKl2FlBGN0Rw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:40 2026 by rpki-client