Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
File:                     dRH-79yX09DgVRW7QMF431FGqcQ.mft (raw, json)
Hash identifier:          9RnGhinCJD2qi5ANE3mFH0fy9266JQcvIh4PE8FkqLA=
Subject key identifier:   B5:68:E1:FE:5A:7A:CA:F5:1F:99:94:0E:FF:40:DE:F5:B3:C8:CB:9D
Authority key identifier: 75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4
Certificate issuer:       /CN=A9131F8A/serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4
Certificate serial:       0EF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
Manifest number:          0EDE
Signing time:             Sat 28 Feb 2026 17:47:16 +0000
Manifest this update:     Sat 28 Feb 2026 17:47:16 +0000
Manifest next update:     Sat 07 Mar 2026 17:47:16 +0000
Files and hashes:         1: dRH-79yX09DgVRW7QMF431FGqcQ.crl (hash: nvmHal77IcRrRrHsSBLrfzOOQJc+aTHXyCPzGD909nE=)
                          2: 251E7880A1FA11E9AF723E1BC4F9AE02.roa (hash: SiSZPb6OU1yb02rlPI3Xfw0RamQv0tvW/lv+NHaB0e8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl
                          rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3825 (0xef1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131F8A, serialNumber=7511FEEFDC97D3D0E05515BB40C178DF5146A9C4
        Validity
            Not Before: Feb 28 17:47:16 2026 GMT
            Not After : Mar  7 17:47:16 2026 GMT
        Subject: CN=69a32a24-d9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:81:ac:e8:f9:83:7f:18:01:19:4b:ff:8c:
                    a6:3e:03:80:d4:ff:96:f5:c7:18:f5:1a:ca:6f:6c:
                    86:70:20:e8:4f:e1:a5:19:13:b2:6e:b7:ed:10:61:
                    ef:40:95:76:00:d9:7b:76:7e:d2:5f:68:77:49:3f:
                    0b:cb:4b:d7:b0:47:96:20:7f:b6:89:f6:46:f2:86:
                    5f:55:6e:13:36:0a:fd:c7:ab:dc:57:c4:e9:32:f8:
                    7a:98:2c:d6:73:70:6d:1e:c1:7c:43:67:2b:ba:9c:
                    9e:db:db:00:29:35:b5:97:10:ad:fb:03:86:ee:9e:
                    b5:a7:4b:b9:f0:7b:cd:6a:1d:71:46:43:f3:46:07:
                    e6:2a:76:1d:9e:80:6a:41:be:54:93:20:e4:0f:3d:
                    98:55:da:fa:62:94:7a:47:23:38:a4:a2:2b:52:83:
                    dd:e5:5e:95:d5:12:eb:98:0e:0b:e6:19:1b:fe:bc:
                    b5:65:f6:1a:0a:1a:b6:e0:b0:8f:92:99:3f:2b:c6:
                    3c:09:b4:a0:97:6e:8c:e6:9d:8b:49:45:cf:79:6b:
                    ac:21:18:67:fb:75:db:45:14:9a:2d:5d:85:07:21:
                    aa:ef:61:03:3e:5b:c3:15:2b:e0:c0:dd:d3:df:0a:
                    19:ba:f1:09:11:ba:ba:f5:94:92:66:16:8a:4a:8f:
                    a7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:68:E1:FE:5A:7A:CA:F5:1F:99:94:0E:FF:40:DE:F5:B3:C8:CB:9D
            X509v3 Authority Key Identifier:
                keyid:75:11:FE:EF:DC:97:D3:D0:E0:55:15:BB:40:C1:78:DF:51:46:A9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRH-79yX09DgVRW7QMF431FGqcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131F8A/4127CE3EA1F811E9A1883F17C4F9AE02/dRH-79yX09DgVRW7QMF431FGqcQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b1:8b:18:ad:f4:03:2c:cb:89:60:98:e1:b5:f0:74:32:5e:
         b2:81:84:7d:07:72:40:e3:40:14:9f:5a:25:c7:f3:3a:5e:2b:
         a4:f8:49:9d:e8:64:6c:9d:42:a3:86:bf:96:3f:cc:9b:bf:12:
         f4:aa:20:a5:39:ad:96:0f:c3:39:07:c0:47:73:61:45:44:d7:
         5f:90:28:c1:5a:2a:c9:80:b4:d4:bd:72:90:81:28:f7:75:6a:
         55:fb:6c:63:ed:7b:dc:6a:fb:72:0d:26:c6:ec:c1:2b:fd:41:
         31:fa:97:ce:24:ae:d3:6a:25:ce:26:92:a6:da:cd:96:6d:77:
         af:75:f7:33:56:52:57:c9:82:da:3c:99:78:f5:78:1c:c5:91:
         42:a0:c1:c2:16:be:ea:ab:ee:a9:cf:f4:0d:d9:70:6e:cd:85:
         ae:2c:ad:a4:2f:e3:35:e8:74:63:b7:ff:44:9e:3f:91:ce:02:
         c3:7a:cf:70:d6:71:e6:33:9b:61:59:81:12:db:b0:c7:ce:87:
         03:3f:80:e3:e3:3f:67:55:43:b7:a0:33:e6:14:47:9a:78:c5:
         b6:95:13:5a:33:ea:ed:f1:92:d7:ff:81:92:68:18:92:df:99:
         28:99:24:b4:d6:76:77:18:95:c6:85:a9:ae:7a:67:75:ae:81:
         16:a7:67:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFGOEExMTAvBgNVBAUTKDc1MTFGRUVGREM5N0QzRDBFMDU1MTVCQjQwQzE3OERG
NTE0NkE5QzQwHhcNMjYwMjI4MTc0NzE2WhcNMjYwMzA3MTc0NzE2WjAYMRYwFAYD
VQQDDA02OWEzMmEyNC1kOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAopWBrOj5g38YARlL/4ymPgOA1P+W9ccY9RrKb2yGcCDoT+GlGROybrftEGHv
QJV2ANl7dn7SX2h3ST8Ly0vXsEeWIH+2ifZG8oZfVW4TNgr9x6vcV8TpMvh6mCzW
c3BtHsF8Q2crupye29sAKTW1lxCt+wOG7p61p0u58HvNah1xRkPzRgfmKnYdnoBq
Qb5UkyDkDz2YVdr6YpR6RyM4pKIrUoPd5V6V1RLrmA4L5hkb/ry1ZfYaChq24LCP
kpk/K8Y8CbSgl26M5p2LSUXPeWusIRhn+3XbRRSaLV2FByGq72EDPlvDFSvgwN3T
3woZuvEJEbq69ZSSZhaKSo+nDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVo4f5a
esr1H5mUDv9A3vWzyMudMB8GA1UdIwQYMBaAFHUR/u/cl9PQ4FUVu0DBeN9RRqnE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUY4QS80MTI3Q0UzRUEx
RjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5RGdWUlc3UU1GNDMxRkdx
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RSSC03OXlYMDlEZ1ZSVzdRTUY0MzFGR3FjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MUY4QS80MTI3Q0UzRUExRjgxMUU5QTE4ODNGMTdDNEY5QUUwMi9kUkgtNzl5WDA5
RGdWUlc3UU1GNDMxRkdxY1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwLGLGK30AyzLiWCY4bXwdDJesoGEfQdyQONAFJ9aJcfzOl4rpPhJnehkbJ1C
o4a/lj/Mm78S9KogpTmtlg/DOQfAR3NhRUTXX5AowVoqyYC01L1ykIEo93VqVfts
Y+173Gr7cg0mxuzBK/1BMfqXziSu02olziaSptrNlm13r3X3M1ZSV8mC2jyZePV4
HMWRQqDBwha+6qvuqc/0Ddlwbs2FriytpC/jNeh0Y7f/RJ4/kc4Cw3rPcNZx5jOb
YVmBEtuwx86HAz+A4+M/Z1VDt6Az5hRHmnjFtpUTWjPq7fGS1/+BkmgYkt+ZKJkk
tNZ2dxiVxoWprnpnda6BFqdnWQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:02:31 2026 by rpki-client