Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
File:                     kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json)
Hash identifier:          5paP5DLxL3ffSOGYAmV9b2IcuB34OyPeA/P3svUnzP8=
Subject key identifier:   5A:81:BE:C2:6B:01:35:C2:CE:CE:C0:D6:B6:97:AC:03:E6:B0:C9:E8
Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
Certificate issuer:       /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Certificate serial:       027B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
Manifest number:          0264
Signing time:             Mon 02 Mar 2026 03:06:05 +0000
Manifest this update:     Mon 02 Mar 2026 03:06:02 +0000
Manifest next update:     Mon 09 Mar 2026 03:06:02 +0000
Files and hashes:         1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: pMzbZz3+fSC83CMdb2eHeaKFL/STMtp/pFNJE24Dvms=)
                          2: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: yctNWWiZhPVXhgLMblmsUERi9o24TYY6zYqQrUfyMsc=)
                          3: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: sa00jH8bw4HUITlYrffZw+f88KkU69vSq0M65+ZIMYI=)
                          4: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: 3uTrRG1V9dC0o0IOwmSmMEJhHbML0nSq3yiQY+3J84k=)
                          5: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: lyLkwnvPiADGaBvpMXNqGtu0ktHuqEPAoUGEfoeoW7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
                          rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
        Validity
            Not Before: Mar  2 03:06:02 2026 GMT
            Not After : Mar  9 03:06:02 2026 GMT
        Subject: CN=69a4fe9d-8eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:db:c6:e6:d4:5f:fb:3c:d9:86:cc:a9:da:d6:
                    1e:47:3b:15:89:f1:80:86:ee:38:08:c1:7a:d0:a8:
                    0a:94:b9:f1:b9:73:ba:27:3d:1e:d9:03:5c:82:05:
                    c7:5c:99:2e:bb:48:2b:07:77:8a:04:30:6f:31:f1:
                    8e:d2:e3:4a:c4:65:21:55:41:50:ea:11:b4:3d:55:
                    14:c0:7f:f2:07:c9:ba:97:25:26:ea:ba:c7:58:85:
                    4b:ff:18:79:86:51:44:59:35:2e:0e:03:cf:c2:ea:
                    8a:fd:37:79:5d:6d:98:72:91:79:26:6c:88:c4:ef:
                    64:da:13:ca:20:35:b5:c5:61:5c:fb:bc:a6:63:2c:
                    80:56:67:00:d7:8b:01:f5:a6:00:d6:c0:b8:54:2e:
                    16:9d:03:11:ae:f2:a0:59:59:91:f0:e3:93:ed:15:
                    46:a5:3b:15:c7:ed:fa:02:e3:85:a2:9d:a5:b1:d0:
                    6b:60:d9:9d:bf:97:7b:64:ef:f0:e2:c4:cf:03:26:
                    21:c0:db:03:a6:cb:b6:8f:d4:e5:7d:da:d9:d2:51:
                    42:ab:19:5c:a9:52:38:ba:3f:95:5a:2d:3b:24:d0:
                    92:b8:e1:b8:da:90:e3:f9:39:f2:40:be:1a:4b:87:
                    0b:6e:22:cc:d8:71:e2:f8:9f:63:3c:62:6f:3c:44:
                    53:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:81:BE:C2:6B:01:35:C2:CE:CE:C0:D6:B6:97:AC:03:E6:B0:C9:E8
            X509v3 Authority Key Identifier:
                keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ec:57:07:0f:bf:e6:d5:9e:4b:39:82:d4:58:75:50:73:e6:
         75:19:b6:93:45:24:9a:09:a2:38:21:cc:dd:77:94:56:cf:8a:
         f1:70:cf:30:9f:70:41:04:2b:39:9f:45:83:0e:b2:b9:19:7a:
         8b:33:28:21:bd:00:3e:9e:32:1b:93:e8:4c:ec:b2:3c:d5:f6:
         a7:0e:b8:d6:ab:54:7d:4f:06:56:9a:b5:25:59:67:4f:fb:0b:
         80:06:1b:45:e0:3d:3e:e5:b8:f2:e8:45:ef:81:90:37:1a:28:
         24:c2:5e:cd:25:7e:7c:dd:41:ff:fb:b2:b6:89:66:08:7e:8a:
         69:74:39:b0:d2:cb:40:8f:d8:78:d6:a4:ec:69:e4:26:34:87:
         f3:b4:f5:33:d0:67:c9:c7:58:4b:9f:03:1a:9f:91:9b:d7:ea:
         e1:7e:1b:25:f1:2f:91:3b:98:a0:cd:72:7c:43:16:f2:88:66:
         96:fd:47:a6:2b:aa:cf:eb:9d:67:41:a2:56:9b:a6:33:92:f4:
         ee:77:09:48:a5:6c:ce:9d:f9:d0:e9:2e:e0:a4:e1:78:1a:2b:
         15:7a:be:5a:51:71:b9:9a:36:8d:2b:ad:5d:6a:1e:72:b9:6c:
         53:23:c7:d7:c4:d8:17:10:cf:8b:42:f9:92:46:8d:83:5c:fb:
         75:06:64:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3
MUFDMkQ0REIwHhcNMjYwMzAyMDMwNjAyWhcNMjYwMzA5MDMwNjAyWjAYMRYwFAYD
VQQDEw02OWE0ZmU5ZC04ZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9dvG5tRf+zzZhsyp2tYeRzsVifGAhu44CMF60KgKlLnxuXO6Jz0e2QNcggXH
XJkuu0grB3eKBDBvMfGO0uNKxGUhVUFQ6hG0PVUUwH/yB8m6lyUm6rrHWIVL/xh5
hlFEWTUuDgPPwuqK/Td5XW2YcpF5JmyIxO9k2hPKIDW1xWFc+7ymYyyAVmcA14sB
9aYA1sC4VC4WnQMRrvKgWVmR8OOT7RVGpTsVx+36AuOFop2lsdBrYNmdv5d7ZO/w
4sTPAyYhwNsDpsu2j9TlfdrZ0lFCqxlcqVI4uj+VWi07JNCSuOG42pDj+TnyQL4a
S4cLbiLM2HHi+J9jPGJvPERT6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqBvsJr
ATXCzs7A1raXrAPmsMnoMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG
MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv
ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeexXBw+/5tWeSzmC1Fh1UHPmdRm2k0UkmgmiOCHM3XeUVs+K8XDPMJ9wQQQr
OZ9Fgw6yuRl6izMoIb0APp4yG5PoTOyyPNX2pw641qtUfU8GVpq1JVlnT/sLgAYb
ReA9PuW48uhF74GQNxooJMJezSV+fN1B//uytolmCH6KaXQ5sNLLQI/YeNak7Gnk
JjSH87T1M9BnycdYS58DGp+Rm9fq4X4bJfEvkTuYoM1yfEMW8ohmlv1Hpiuqz+ud
Z0GiVpumM5L07ncJSKVszp350Oku4KTheBorFXq+WlFxuZo2jSutXWoecrlsUyPH
18TYFxDPi0L5kkaNg1z7dQZkTg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:03 2026 by rpki-client