Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
File:                     ioDqhWIqoHAhvfSshBiw2aU5rOE.mft (raw, json)
Hash identifier:          s3y0nKHKdoxacDFDYd5AfrrJjG1uyf0YRD1xLa9uM6s=
Subject key identifier:   78:88:D1:24:E1:10:2F:D1:A5:14:8E:01:9C:B4:8D:7E:AB:8B:8D:25
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Certificate issuer:       /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial:       05A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
Manifest number:          0596
Signing time:             Sat 28 Feb 2026 23:50:23 +0000
Manifest this update:     Sat 28 Feb 2026 23:50:22 +0000
Manifest next update:     Sat 07 Mar 2026 23:50:22 +0000
Files and hashes:         1: ioDqhWIqoHAhvfSshBiw2aU5rOE.crl (hash: XyYHNAvd/em8vDFlXZdaoN6Xak5kYb7+a3tS6DTeSlM=)
                          2: 3A549A1EB00211F0A3A86535C4F9AE02.roa (hash: O1i4s2Zr51Hi0mPfbBoKpN4N/jUayIwH+cV3RnZNMM4=)
                          3: DA0AD156799211EFADCD2257C4F9AE02.roa (hash: knZ5ekXVEf4sYcirbL+CCT4b4jXdUdcrAEg+dwXTAho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
                          rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
        Validity
            Not Before: Feb 28 23:50:22 2026 GMT
            Not After : Mar  7 23:50:22 2026 GMT
        Subject: CN=69a37f3e-43df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:e0:53:59:1b:b4:2d:a9:f9:2a:c8:0d:56:
                    82:db:ea:f0:39:60:69:4e:da:b5:3c:28:8c:79:95:
                    3a:e0:a7:1d:16:1d:3b:36:1b:f5:7c:3e:2b:86:8a:
                    5c:fb:34:a7:38:52:e4:c5:79:74:8e:cd:2f:b9:52:
                    75:68:a6:7a:ba:30:6f:9d:c4:5c:9d:d9:44:e5:5a:
                    53:2d:0d:76:19:0c:b9:8c:88:7c:2a:f4:27:57:52:
                    fb:3a:2c:ef:f1:15:98:52:e2:3d:b0:7e:0e:95:ca:
                    30:b1:37:06:a0:3f:47:81:53:93:48:59:54:1a:f6:
                    bf:3e:4c:61:78:39:bc:4e:22:3a:b2:3b:35:8f:bc:
                    83:16:9e:f1:93:a9:1a:57:7e:98:c1:94:83:95:a7:
                    d5:e2:b8:28:1f:5e:d1:5d:dd:ed:02:f2:31:3d:68:
                    12:4b:4f:a1:e1:13:75:df:ff:f0:53:20:9d:65:41:
                    0a:09:6a:49:15:ce:0a:6a:62:27:9f:e9:f5:25:2e:
                    a9:12:17:f7:b0:cf:cb:ee:5d:8c:b5:43:5d:3b:02:
                    9c:e9:2d:e4:21:15:f5:c8:ed:1e:ec:a1:9e:a9:8b:
                    ae:6e:ae:e3:5f:9d:e8:a0:66:19:d1:81:ec:83:a2:
                    0b:11:c2:af:2c:9f:a5:0e:5e:1b:0b:36:c5:56:8f:
                    f6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:88:D1:24:E1:10:2F:D1:A5:14:8E:01:9C:B4:8D:7E:AB:8B:8D:25
            X509v3 Authority Key Identifier:
                keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e9:6e:b7:1c:e9:a8:2d:e5:63:2f:1b:87:3a:a3:5a:58:56:
         e9:0f:8d:88:d8:a6:ae:18:52:6e:f5:20:ad:83:5e:ed:88:d3:
         7e:7d:e6:1b:21:cb:c3:af:f3:b1:e7:8c:8a:37:66:91:0c:60:
         45:58:63:95:1c:9a:0b:5f:d4:e9:3a:68:87:89:e6:50:80:49:
         72:f3:27:03:a1:cb:f2:ae:6a:a5:a1:8e:ec:35:f2:d2:78:36:
         cd:5d:29:53:57:00:03:d1:26:8c:0c:60:26:83:0a:87:b9:d9:
         d1:c4:fb:67:45:1b:2f:eb:31:ca:b5:36:74:28:34:ef:1c:9f:
         fe:d4:ae:59:8f:fe:3f:be:b0:dc:65:bc:7a:3f:01:5b:99:0e:
         d8:ba:e1:82:0a:41:01:8f:cd:1e:c2:8e:6d:23:e5:c9:bc:35:
         94:5a:35:51:ff:91:9b:eb:d6:5b:f5:dc:dc:ad:73:94:a5:16:
         6a:e6:1d:7b:0d:81:b7:2a:dc:08:81:f9:38:42:95:67:bf:6a:
         39:ad:fa:ea:01:36:49:07:60:81:78:b3:d7:86:03:12:cf:fb:
         15:3a:69:c9:c6:a1:03:b6:35:14:c6:ec:fb:97:fe:4c:ca:a2:
         b6:7f:2b:8a:0d:30:31:93:8b:11:05:09:14:5b:0d:9c:04:56:
         4f:5a:0f:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5
QTUzOUFDRTEwHhcNMjYwMjI4MjM1MDIyWhcNMjYwMzA3MjM1MDIyWjAYMRYwFAYD
VQQDDA02OWEzN2YzZS00M2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyaTgU1kbtC2p+SrIDVaC2+rwOWBpTtq1PCiMeZU64KcdFh07Nhv1fD4rhopc
+zSnOFLkxXl0js0vuVJ1aKZ6ujBvncRcndlE5VpTLQ12GQy5jIh8KvQnV1L7Oizv
8RWYUuI9sH4OlcowsTcGoD9HgVOTSFlUGva/PkxheDm8TiI6sjs1j7yDFp7xk6ka
V36YwZSDlafV4rgoH17RXd3tAvIxPWgSS0+h4RN13//wUyCdZUEKCWpJFc4KamIn
n+n1JS6pEhf3sM/L7l2MtUNdOwKc6S3kIRX1yO0e7KGeqYuubq7jX53ooGYZ0YHs
g6ILEcKvLJ+lDl4bCzbFVo/2AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHiI0STh
EC/RpRSOAZy0jX6ri40lMB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx
N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDlCRS9CMDlDM0NFMjExN0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9I
QWh2ZlNzaEJpdzJhVTVyT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWOlutxzpqC3lYy8bhzqjWlhW6Q+NiNimrhhSbvUgrYNe7YjTfn3mGyHLw6/z
seeMijdmkQxgRVhjlRyaC1/U6Tpoh4nmUIBJcvMnA6HL8q5qpaGO7DXy0ng2zV0p
U1cAA9EmjAxgJoMKh7nZ0cT7Z0UbL+sxyrU2dCg07xyf/tSuWY/+P76w3GW8ej8B
W5kO2LrhggpBAY/NHsKObSPlybw1lFo1Uf+Rm+vWW/Xc3K1zlKUWauYdew2Btyrc
CIH5OEKVZ79qOa366gE2SQdggXiz14YDEs/7FTppycahA7Y1FMbs+5f+TMqitn8r
ig0wMZOLEQUJFFsNnARWT1oPjA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:43 2026 by rpki-client