Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
File:                     Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft (raw, json)
Hash identifier:          ZgLUbYMrWvj4NIBhPYv74Yx2wkAUUACXXiWUH3UzbWY=
Subject key identifier:   D6:6C:D0:79:43:A7:2C:74:B6:F8:FB:8D:C0:64:D4:3C:22:86:A6:20
Authority key identifier: 26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70
Certificate issuer:       /CN=A9131157/serialNumber=262EC20D32BC132D7D204C34482229792421CF70
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
Manifest number:          BC
Signing time:             Sun 01 Mar 2026 08:23:11 +0000
Manifest this update:     Sun 01 Mar 2026 08:23:11 +0000
Manifest next update:     Sun 08 Mar 2026 08:23:11 +0000
Files and hashes:         1: Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl (hash: 4pj++QTrIk41TW+xlOQ62ThvUq37M8Myf7Ji3D4Rqyc=)
                          2: 2264A3AC083911F0B331A472C4F9AE02.roa (hash: DGQrXw5BAaskh3lKufBpujj+CdSrnpOApsgDYgF8MOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl
                          rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131157, serialNumber=262EC20D32BC132D7D204C34482229792421CF70
        Validity
            Not Before: Mar  1 08:23:11 2026 GMT
            Not After : Mar  8 08:23:11 2026 GMT
        Subject: CN=69a3f76f-b323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:89:ea:88:03:c6:20:f0:5c:d5:05:f4:2d:48:
                    d4:84:8b:4f:04:f7:38:13:d6:a5:05:ba:65:8b:06:
                    8e:78:70:d5:13:e7:f9:c8:70:43:90:d0:90:51:c9:
                    7a:c8:fe:93:e5:bc:6a:76:21:b4:11:83:ad:74:c3:
                    1b:9e:55:e7:ab:b6:99:72:18:6a:2c:82:4e:f7:8d:
                    09:e9:85:f7:06:89:4e:9a:b5:15:22:64:da:8e:44:
                    ec:ec:48:9d:f7:af:8b:60:c6:c2:de:4c:65:e0:68:
                    74:45:48:50:ff:28:2a:da:fa:c2:76:58:e7:0c:b6:
                    26:cb:73:0b:29:35:d2:00:85:0f:5a:07:81:20:a3:
                    2e:9e:87:54:46:8b:a1:d7:bc:a8:92:18:58:ce:ff:
                    ab:27:a9:00:81:f0:99:2c:8c:66:ba:cc:90:a5:99:
                    84:d4:79:80:2e:04:d3:78:e3:cf:36:1c:fe:4f:50:
                    49:93:98:48:6b:5b:bd:ad:30:ac:ec:68:0b:0c:7b:
                    c3:6d:d9:70:6d:43:08:c8:62:49:94:cc:8f:51:28:
                    e0:61:b4:14:ba:3b:bf:51:75:44:1b:d1:36:6c:db:
                    6a:d3:7a:fb:25:3f:26:bd:1e:6d:ed:3b:57:20:ea:
                    18:f8:2b:72:e0:26:f3:43:88:d6:11:e6:43:92:73:
                    02:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6C:D0:79:43:A7:2C:74:B6:F8:FB:8D:C0:64:D4:3C:22:86:A6:20
            X509v3 Authority Key Identifier:
                keyid:26:2E:C2:0D:32:BC:13:2D:7D:20:4C:34:48:22:29:79:24:21:CF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131157/06B2B8E2072611F083F3FC75C4F9AE02/Ji7CDTK8Ey19IEw0SCIpeSQhz3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:4b:6d:dc:d2:42:e3:92:f7:26:b3:a2:13:d3:75:f0:83:b2:
         f3:27:a9:a1:fb:f2:70:3a:cd:d8:50:8e:c9:1a:70:a4:d2:b4:
         aa:a2:45:aa:02:56:e2:8b:d9:ff:d8:35:f0:bf:09:83:8e:1c:
         5c:7e:d5:a8:df:b9:74:8d:23:bc:d7:4e:7c:f7:03:01:75:7c:
         a0:32:9a:2d:89:cb:1a:de:dd:2c:25:48:0e:6d:27:c8:5a:06:
         4e:c5:24:57:b3:96:be:f3:14:14:ec:ba:be:b2:03:df:87:46:
         da:8d:e7:fb:db:1b:ee:66:bf:42:b2:68:97:55:4c:96:14:08:
         b9:71:c3:c7:3f:0a:d6:44:6d:01:7b:3d:7f:eb:b9:ad:bf:f4:
         85:d9:7b:6d:20:41:84:a7:0d:3c:0f:92:6d:85:db:34:2a:70:
         2f:b5:4d:64:a6:0d:9e:86:4a:4e:28:e3:c8:4e:53:c9:bf:ab:
         ea:ee:36:69:2d:33:dc:0f:84:54:a6:62:93:51:37:31:44:56:
         0d:3a:90:77:f1:80:71:b4:4d:32:b7:af:1a:ae:c2:6d:6d:0e:
         26:37:ec:e8:10:91:9f:97:68:c8:e7:cc:a3:84:01:6f:e1:9b:
         b4:8e:d1:6c:3f:f9:65:e4:0e:91:f9:d1:18:33:80:e2:f7:55:
         7a:e4:f6:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzExNTcxMTAvBgNVBAUTKDI2MkVDMjBEMzJCQzEzMkQ3RDIwNEMzNDQ4MjIyOTc5
MjQyMUNGNzAwHhcNMjYwMzAxMDgyMzExWhcNMjYwMzA4MDgyMzExWjAYMRYwFAYD
VQQDEw02OWEzZjc2Zi1iMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA44nqiAPGIPBc1QX0LUjUhItPBPc4E9alBbpliwaOeHDVE+f5yHBDkNCQUcl6
yP6T5bxqdiG0EYOtdMMbnlXnq7aZchhqLIJO940J6YX3BolOmrUVImTajkTs7Eid
96+LYMbC3kxl4Gh0RUhQ/ygq2vrCdljnDLYmy3MLKTXSAIUPWgeBIKMunodURouh
17yokhhYzv+rJ6kAgfCZLIxmusyQpZmE1HmALgTTeOPPNhz+T1BJk5hIa1u9rTCs
7GgLDHvDbdlwbUMIyGJJlMyPUSjgYbQUuju/UXVEG9E2bNtq03r7JT8mvR5t7TtX
IOoY+Cty4CbzQ4jWEeZDknMC8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZs0HlD
pyx0tvj7jcBk1DwihqYgMB8GA1UdIwQYMBaAFCYuwg0yvBMtfSBMNEgiKXkkIc9w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTE1Ny8wNkIyQjhFMjA3
MjYxMUYwODNGM0ZDNzVDNEY5QUUwMi9KaTdDRFRLOEV5MTlJRXcwU0NJcGVTUWh6
M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ppN0NEVEs4RXkxOUlFdzBTQ0lwZVNRaHozQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTE1Ny8wNkIyQjhFMjA3MjYxMUYwODNGM0ZDNzVDNEY5QUUwMi9KaTdDRFRLOEV5
MTlJRXcwU0NJcGVTUWh6M0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfktt3NJC45L3JrOiE9N18IOy8yepofvycDrN2FCOyRpwpNK0qqJFqgJW4ovZ
/9g18L8Jg44cXH7VqN+5dI0jvNdOfPcDAXV8oDKaLYnLGt7dLCVIDm0nyFoGTsUk
V7OWvvMUFOy6vrID34dG2o3n+9sb7ma/QrJol1VMlhQIuXHDxz8K1kRtAXs9f+u5
rb/0hdl7bSBBhKcNPA+SbYXbNCpwL7VNZKYNnoZKTijjyE5Tyb+r6u42aS0z3A+E
VKZik1E3MURWDTqQd/GAcbRNMrevGq7CbW0OJjfs6BCRn5doyOfMo4QBb+GbtI7R
bD/5ZeQOkfnRGDOA4vdVeuT22Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:10 2026 by rpki-client