Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
File:                     v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json)
Hash identifier:          P31JxZapWpgOGlBb04s1DvYk4A2tBD428L5LCa6gYAs=
Subject key identifier:   05:42:D6:36:1F:1B:00:8A:43:C7:D9:3F:19:63:38:72:81:8B:F1:66
Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1
Certificate issuer:       /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
Certificate serial:       06C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
Manifest number:          06A9
Signing time:             Sat 28 Feb 2026 22:59:06 +0000
Manifest this update:     Sat 28 Feb 2026 22:59:06 +0000
Manifest next update:     Sat 07 Mar 2026 22:59:06 +0000
Files and hashes:         1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: B5HUt8yGfdUC1f3VTFE7NmHv0HIC7qwOEVYpOG0tvHQ=)
                          2: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: uGXjge9CsH2BuWapU4p6jWsjnIhzoNlCO58aodgIFbU=)
                          3: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: pU0n7jMcKJ3Hmwqjlz+gF8tnXYWfDpraK4RUA1H7STU=)
                          4: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: 1zGKSanRYzdd1uvjC8oX5IR7Ik+xWCoZQBkXShc1Gv8=)
                          5: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: Mcw+ISw7YJvGtHlK+uB6qdO+fvnSYwZzA7Ih3/bLd/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl
                          rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1737 (0x6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
        Validity
            Not Before: Feb 28 22:59:06 2026 GMT
            Not After : Mar  7 22:59:06 2026 GMT
        Subject: CN=69a3733a-41f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:70:f4:4d:18:09:62:05:dc:62:49:f6:09:b2:
                    c5:c8:9c:40:2a:38:3d:73:31:f8:af:b1:5a:cb:8f:
                    4d:6d:a1:15:4b:7e:63:4d:9c:01:9e:40:e1:2c:c2:
                    61:1e:e8:6f:fa:e2:6f:ca:b0:98:55:bd:24:fc:69:
                    70:5a:85:60:c6:2a:1f:57:d6:66:9d:5c:f9:c4:7f:
                    73:a6:93:26:bb:72:17:16:5b:a8:9d:ba:d4:68:54:
                    2c:83:c7:e5:3b:c2:fa:ed:55:e3:48:41:8c:51:64:
                    a5:98:23:10:77:e2:6e:65:df:af:94:3d:8e:42:92:
                    6d:c7:70:28:c7:94:76:03:df:34:e5:03:15:12:31:
                    ff:f9:da:92:45:7e:bd:23:04:ca:b3:b6:a2:67:f7:
                    9e:07:eb:ee:02:41:c5:3b:7d:1b:c0:47:7c:2b:5a:
                    d4:b7:a5:a9:f7:e0:72:07:9a:bc:cf:ee:56:66:c2:
                    57:c1:24:18:c1:4a:da:6d:18:64:f4:05:bc:5a:9c:
                    fc:ee:f4:71:19:ad:f1:81:51:6e:8b:e9:42:a9:cf:
                    30:74:cd:a7:eb:ec:cb:31:75:49:dd:45:69:9a:d1:
                    79:24:65:59:b8:4e:bd:a4:16:31:22:3e:b8:fb:b0:
                    bc:e3:f9:33:ef:41:82:46:bc:c8:19:91:70:0d:01:
                    03:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:42:D6:36:1F:1B:00:8A:43:C7:D9:3F:19:63:38:72:81:8B:F1:66
            X509v3 Authority Key Identifier:
                keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:2f:0e:46:d3:10:34:08:6d:b1:57:f8:97:95:f3:5d:78:23:
         d6:0d:a3:1b:a6:e9:86:3f:b3:cd:1a:48:df:88:55:58:f6:e8:
         9d:7d:e1:94:d4:99:b9:94:69:5d:94:8e:97:ea:b7:2d:6d:9d:
         ea:a9:12:06:1c:61:2c:c9:56:64:70:a2:23:c4:ff:ea:a1:96:
         06:36:e3:ba:c9:2d:99:7d:ae:a1:7b:c4:f5:24:af:c6:38:e6:
         9d:e0:6c:f0:10:bc:99:1d:b3:4f:57:1d:a2:e9:07:ac:b0:24:
         c7:c7:98:5f:62:95:34:78:ab:10:86:60:9f:6b:9d:9c:18:0c:
         65:f1:e8:4e:d3:c2:cd:8e:27:dc:7c:c5:b5:ee:a5:54:93:be:
         f1:0c:c4:89:63:51:42:ab:37:a0:4a:d8:ef:69:fd:6d:2d:4f:
         a1:f6:64:22:91:c2:8a:d5:85:55:39:4b:49:a8:46:ee:77:ae:
         30:4d:fd:10:81:81:cf:96:91:16:7f:f4:c9:7d:aa:e9:53:9e:
         a6:05:a7:f2:2d:50:4f:d0:c5:4e:6b:22:2b:1e:23:d7:4f:18:
         09:69:3e:ed:11:db:8e:9c:5e:80:b4:43:f8:8b:ba:ca:c6:03:
         d0:ed:75:d2:ce:2e:43:db:02:ff:95:89:34:03:71:6b:a6:7b:
         6f:6b:4a:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx
NzA1QUNGQzEwHhcNMjYwMjI4MjI1OTA2WhcNMjYwMzA3MjI1OTA2WjAYMRYwFAYD
VQQDDA02OWEzNzMzYS00MWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkXD0TRgJYgXcYkn2CbLFyJxAKjg9czH4r7Fay49NbaEVS35jTZwBnkDhLMJh
Huhv+uJvyrCYVb0k/GlwWoVgxiofV9ZmnVz5xH9zppMmu3IXFluonbrUaFQsg8fl
O8L67VXjSEGMUWSlmCMQd+JuZd+vlD2OQpJtx3Aox5R2A9805QMVEjH/+dqSRX69
IwTKs7aiZ/eeB+vuAkHFO30bwEd8K1rUt6Wp9+ByB5q8z+5WZsJXwSQYwUrabRhk
9AW8Wpz87vRxGa3xgVFui+lCqc8wdM2n6+zLMXVJ3UVpmtF5JGVZuE69pBYxIj64
+7C84/kz70GCRrzIGZFwDQED7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVC1jYf
GwCKQ8fZPxljOHKBi/FmMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3
MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjRENC8xQTZFNzUxQ0E3MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNp
NUxmLVFMYS16djBYQmF6OEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOi8ORtMQNAhtsVf4l5XzXXgj1g2jG6bphj+zzRpI34hVWPbonX3hlNSZuZRp
XZSOl+q3LW2d6qkSBhxhLMlWZHCiI8T/6qGWBjbjusktmX2uoXvE9SSvxjjmneBs
8BC8mR2zT1cdoukHrLAkx8eYX2KVNHirEIZgn2udnBgMZfHoTtPCzY4n3HzFte6l
VJO+8QzEiWNRQqs3oErY72n9bS1PofZkIpHCitWFVTlLSahG7neuME39EIGBz5aR
Fn/0yX2q6VOepgWn8i1QT9DFTmsiKx4j108YCWk+7RHbjpxegLRD+Iu6ysYD0O11
0s4uQ9sC/5WJNANxa6Z7b2tKwg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:42:20 2026 by rpki-client