Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
File:                     1m4Cgid2-1UUPQyeVJAyhlal4I0.mft (raw, json)
Hash identifier:          6sPUeSeInBtWzC4LwgkiX0qtxPEjJ6E2MdmCeMGMLig=
Subject key identifier:   0F:D3:56:EB:7D:80:5F:7C:60:D6:53:4B:0C:CD:BA:E8:0D:68:5D:97
Authority key identifier: D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D
Certificate issuer:       /CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D
Certificate serial:       0CD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
Manifest number:          0CC6
Signing time:             Mon 02 Mar 2026 02:10:27 +0000
Manifest this update:     Mon 02 Mar 2026 02:10:26 +0000
Manifest next update:     Mon 09 Mar 2026 02:10:26 +0000
Files and hashes:         1: 1m4Cgid2-1UUPQyeVJAyhlal4I0.crl (hash: mTQVIMIFpUimpKQa5HhP9r5rXLY2Pr3c/WHlNmvoKrI=)
                          2: 0EE3438A07FC11EABAD90A47C4F9AE02.roa (hash: MsSst93R2N7mg9PwvaaO00iOqWPQd/MBvSgtfftl+bo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl
                          rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3281 (0xcd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123180, serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D
        Validity
            Not Before: Mar  2 02:10:26 2026 GMT
            Not After : Mar  9 02:10:26 2026 GMT
        Subject: CN=69a4f193-cde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:2c:1d:5e:49:03:89:39:94:7a:f8:16:01:
                    ba:37:15:40:0b:df:40:fc:93:ec:16:22:7d:95:f6:
                    72:39:56:79:f2:f7:89:60:4c:cd:f0:32:11:70:d8:
                    a7:92:87:eb:14:6b:fc:df:6f:8c:03:42:fd:21:96:
                    f2:e2:9f:51:90:7e:f7:0d:5e:d7:87:de:ca:ac:18:
                    f7:ee:e6:c1:a2:b3:cc:94:20:49:41:4e:cb:3d:33:
                    a6:af:e6:48:e3:62:1b:de:63:9f:3d:71:63:c6:73:
                    ea:c2:ac:45:b8:0e:10:88:43:5b:db:66:81:ef:b7:
                    6e:58:a8:6e:9e:48:65:48:a4:51:d5:32:22:1b:95:
                    5f:a2:db:ed:32:68:cf:a7:cc:79:6d:cc:fe:fb:87:
                    ad:3a:17:f9:45:bc:41:a5:ce:8a:d4:5f:fb:72:f6:
                    c3:e5:46:0e:b4:98:e0:63:68:f3:ed:a1:97:6e:31:
                    8f:d2:c7:7d:32:9f:bc:1a:62:31:58:0e:0c:60:d8:
                    8d:8e:8c:d6:72:d5:7e:08:27:4f:75:a1:7a:a0:88:
                    d1:c3:60:e8:9a:b2:80:89:a1:74:86:22:ba:38:c0:
                    7f:6b:13:6b:0e:f0:fb:3b:a6:71:db:b6:5c:75:98:
                    e6:78:13:c1:da:17:ce:d1:71:af:c8:76:29:9b:39:
                    de:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D3:56:EB:7D:80:5F:7C:60:D6:53:4B:0C:CD:BA:E8:0D:68:5D:97
            X509v3 Authority Key Identifier:
                keyid:D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:04:66:5d:ea:f1:43:7a:d6:78:27:a4:20:31:08:3c:39:94:
         4d:d7:b5:b5:52:3d:e8:ba:71:e3:2d:67:4f:03:4f:ff:48:10:
         ad:6b:21:a3:7e:d1:b0:00:e5:93:88:b6:75:cb:87:c8:d9:d6:
         79:c7:c0:79:2e:0e:d5:5d:b0:06:f6:a1:39:b3:c1:10:38:3f:
         77:61:bd:4c:65:3b:28:ab:1a:48:42:29:f8:ed:67:26:5f:86:
         54:eb:4c:ed:e7:4e:e7:7a:0e:f7:c7:77:04:22:98:42:d3:b1:
         03:0f:f5:85:1c:89:17:fa:23:d7:75:01:49:4e:c8:c1:bd:73:
         12:46:bb:6a:31:b9:68:3a:89:37:07:61:b7:01:07:9f:c5:68:
         f3:95:1d:5d:05:70:3b:5b:59:50:7e:97:be:d0:bf:bc:cc:e6:
         90:6e:8c:9a:1c:69:25:d4:7d:79:61:55:85:ed:59:ab:62:f2:
         c4:f8:b6:a4:a1:1b:a1:ca:fd:c4:24:81:9a:21:9c:16:f4:6d:
         66:74:c5:f0:e8:ae:b2:31:1e:8f:a5:56:a0:17:66:cc:6f:90:
         54:bb:24:64:ce:89:02:2b:86:78:65:2c:66:1d:ac:27:63:ec:
         85:1c:f9:4e:d8:eb:1f:55:99:cd:d9:f6:dc:95:01:01:68:4b:
         a5:c1:1d:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMxODAxMTAvBgNVBAUTKEQ2NkUwMjgyMjc3NkZCNTUxNDNEMEM5RTU0OTAzMjg2
NTZBNUUwOEQwHhcNMjYwMzAyMDIxMDI2WhcNMjYwMzA5MDIxMDI2WjAYMRYwFAYD
VQQDEw02OWE0ZjE5My1jZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtMQsHV5JA4k5lHr4FgG6NxVAC99A/JPsFiJ9lfZyOVZ58veJYEzN8DIRcNin
kofrFGv832+MA0L9IZby4p9RkH73DV7Xh97KrBj37ubBorPMlCBJQU7LPTOmr+ZI
42Ib3mOfPXFjxnPqwqxFuA4QiENb22aB77duWKhunkhlSKRR1TIiG5VfotvtMmjP
p8x5bcz++4etOhf5RbxBpc6K1F/7cvbD5UYOtJjgY2jz7aGXbjGP0sd9Mp+8GmIx
WA4MYNiNjozWctV+CCdPdaF6oIjRw2DomrKAiaF0hiK6OMB/axNrDvD7O6Zx27Zc
dZjmeBPB2hfO0XGvyHYpmznePQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/TVut9
gF98YNZTSwzNuugNaF2XMB8GA1UdIwQYMBaAFNZuAoIndvtVFD0MnlSQMoZWpeCN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE4MC8zMDU2OURCMDA3
RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0xVVVQUXllVkpBeWhsYWw0
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFtNENnaWQyLTFVVVBReWVWSkF5aGxhbDRJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzE4MC8zMDU2OURCMDA3RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0x
VVVQUXllVkpBeWhsYWw0STAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjgRmXerxQ3rWeCekIDEIPDmUTde1tVI96Lpx4y1nTwNP/0gQrWsho37RsADl
k4i2dcuHyNnWecfAeS4O1V2wBvahObPBEDg/d2G9TGU7KKsaSEIp+O1nJl+GVOtM
7edO53oO98d3BCKYQtOxAw/1hRyJF/oj13UBSU7Iwb1zEka7ajG5aDqJNwdhtwEH
n8Vo85UdXQVwO1tZUH6XvtC/vMzmkG6MmhxpJdR9eWFVhe1Zq2LyxPi2pKEbocr9
xCSBmiGcFvRtZnTF8OiusjEej6VWoBdmzG+QVLskZM6JAiuGeGUsZh2sJ2PshRz5
TtjrH1WZzdn23JUBAWhLpcEdyg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:41 2026 by rpki-client