Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
File:                     PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json)
Hash identifier:          vmJSIVIwStbtPGHd7RH1t+WVaYwlmuRFmBHdMoNy8E0=
Subject key identifier:   09:0D:A9:25:DB:0E:CC:F6:DB:02:AD:80:28:B0:72:F1:10:BE:31:04
Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1
Certificate issuer:       /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
Certificate serial:       0C05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
Manifest number:          0BFA
Signing time:             Sun 01 Mar 2026 23:45:49 +0000
Manifest this update:     Sun 01 Mar 2026 23:45:47 +0000
Manifest next update:     Sun 08 Mar 2026 23:45:47 +0000
Files and hashes:         1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: shqDPfMqnqACx6I8BWCtFjO9W/+lhbE7wC095HYDL0A=)
                          2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: CX6yXnKGdi8jjMTybg2rPNEGWkbIU8U8qz9wOXbOt/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl
                          rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3077 (0xc05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
        Validity
            Not Before: Mar  1 23:45:47 2026 GMT
            Not After : Mar  8 23:45:47 2026 GMT
        Subject: CN=69a4cfac-ee5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:e4:ba:e7:d0:cc:e9:31:57:86:c9:f4:7d:
                    b0:d0:f3:8d:3e:47:a9:04:e5:09:af:fa:f1:9d:0f:
                    77:e2:8b:d7:64:cd:9c:a9:61:d3:40:38:bd:b7:7e:
                    f4:14:01:09:22:ef:8b:f1:6a:85:03:fe:b5:c0:1e:
                    b3:1e:4b:23:e3:f7:ed:89:85:9a:a5:d5:33:77:f2:
                    31:02:bf:93:58:3d:00:73:93:70:19:44:4f:1b:9f:
                    62:b2:ea:26:21:d4:2a:cd:43:19:1f:21:bd:4b:13:
                    c9:05:ff:19:f6:a0:e5:e0:32:c5:e7:64:fe:85:ae:
                    b4:ed:02:5d:77:65:c9:10:1b:5c:ef:f5:bd:80:fb:
                    df:53:1b:b3:99:a8:a0:5c:65:e2:72:d9:91:3b:5f:
                    23:05:f1:29:3c:04:01:c4:9f:06:fa:03:77:36:67:
                    5f:cf:1e:56:1c:da:ca:8e:7c:c9:93:0f:14:76:db:
                    9f:3e:4c:1f:4a:11:63:ed:e0:df:fb:4c:ae:c9:d9:
                    ff:87:ca:f6:60:61:27:f9:a4:a4:f0:4d:10:cb:4f:
                    31:3a:a4:92:df:9a:7b:54:f5:fa:be:e4:e3:65:82:
                    c3:c3:c9:e4:35:11:36:c1:87:38:bf:66:c0:75:ee:
                    93:ee:ae:8e:69:ce:b6:fd:ce:a0:05:bd:d5:8f:31:
                    01:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0D:A9:25:DB:0E:CC:F6:DB:02:AD:80:28:B0:72:F1:10:BE:31:04
            X509v3 Authority Key Identifier:
                keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:de:38:ab:fb:3f:22:1d:3d:be:32:54:3a:a0:66:ef:e0:be:
         ae:8c:86:63:9d:44:81:ef:44:4d:91:35:24:0d:e3:17:ce:c7:
         c7:58:a0:69:5c:82:23:87:7c:05:b2:10:6f:78:87:a5:23:0d:
         af:85:d8:a6:13:79:34:ac:31:8d:be:c7:a3:79:67:d7:90:24:
         08:0c:20:8d:05:e6:70:d9:c8:cc:e3:f2:3a:85:10:ad:3e:32:
         5c:96:a0:d5:a2:55:10:3a:db:60:64:3d:7e:1d:51:97:32:44:
         a2:80:72:6c:48:4c:f4:11:ae:af:81:86:f1:67:ff:58:33:db:
         69:36:91:65:cf:65:53:b7:45:fa:03:0a:f7:62:19:d1:41:c1:
         72:a3:af:c1:4b:89:1b:87:7a:16:c2:37:3e:8b:c1:df:8e:4e:
         b6:2e:5c:07:2e:e3:17:05:4e:17:1f:0e:b5:6b:b1:b2:72:f6:
         ac:8e:21:fc:63:0f:bc:2f:f2:1a:3c:ca:e7:c9:3b:e0:33:34:
         86:04:29:50:08:48:d1:3e:74:9f:fe:1e:e5:73:fd:57:29:74:
         4c:29:ff:4f:a9:3d:16:5a:e3:b7:b6:29:7b:c9:56:ff:69:b6:
         b8:f8:6d:35:b5:0b:78:6b:51:28:e8:e4:c0:f2:f9:11:9a:50:
         02:07:2d:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF
MUMzOTBFQTEwHhcNMjYwMzAxMjM0NTQ3WhcNMjYwMzA4MjM0NTQ3WjAYMRYwFAYD
VQQDEw02OWE0Y2ZhYy1lZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1GTkuufQzOkxV4bJ9H2w0PONPkepBOUJr/rxnQ934ovXZM2cqWHTQDi9t370
FAEJIu+L8WqFA/61wB6zHksj4/ftiYWapdUzd/IxAr+TWD0Ac5NwGURPG59isuom
IdQqzUMZHyG9SxPJBf8Z9qDl4DLF52T+ha607QJdd2XJEBtc7/W9gPvfUxuzmaig
XGXictmRO18jBfEpPAQBxJ8G+gN3Nmdfzx5WHNrKjnzJkw8UdtufPkwfShFj7eDf
+0yuydn/h8r2YGEn+aSk8E0Qy08xOqSS35p7VPX6vuTjZYLDw8nkNRE2wYc4v2bA
de6T7q6Oac62/c6gBb3VjzEBgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAkNqSXb
Dsz22wKtgCiwcvEQvjEEMB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG
NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE
cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjE0Qi9GMkE0OTI0RTJGNzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZz
bHU2dXpaaV9YVlBodzVEcUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh944q/s/Ih09vjJUOqBm7+C+royGY51Ege9ETZE1JA3jF87Hx1igaVyCI4d8
BbIQb3iHpSMNr4XYphN5NKwxjb7Ho3ln15AkCAwgjQXmcNnIzOPyOoUQrT4yXJag
1aJVEDrbYGQ9fh1RlzJEooBybEhM9BGur4GG8Wf/WDPbaTaRZc9lU7dF+gMK92IZ
0UHBcqOvwUuJG4d6FsI3PovB345Oti5cBy7jFwVOFx8OtWuxsnL2rI4h/GMPvC/y
GjzK58k74DM0hgQpUAhI0T50n/4e5XP9Vyl0TCn/T6k9Flrjt7Ype8lW/2m2uPht
NbULeGtRKOjkwPL5EZpQAgct+w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:30 2026 by rpki-client