Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
File:                     28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json)
Hash identifier:          5bANA0IVrgRy+UHWhMCgkuN0L8MoVqZu1S5vacVwYzk=
Subject key identifier:   67:20:76:C9:97:87:0A:0A:46:0E:F3:11:C0:62:D8:EC:CF:CC:ED:2B
Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC
Certificate issuer:       /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
Manifest number:          89
Signing time:             Sun 01 Mar 2026 08:53:03 +0000
Manifest this update:     Sun 01 Mar 2026 08:53:03 +0000
Manifest next update:     Sun 08 Mar 2026 08:53:03 +0000
Files and hashes:         1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: +rKJd8i1IC3HEKod8q308iIhGrSB1zfPzSj4TFReY4Q=)
                          2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: 0SuulOZroh5YKmFDmSJwtaMeguYZYVtHHGTdUFtkVFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl
                          rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC
        Validity
            Not Before: Mar  1 08:53:03 2026 GMT
            Not After : Mar  8 08:53:03 2026 GMT
        Subject: CN=69a3fe6f-25bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:d1:59:1c:db:e6:9b:8d:8f:af:af:0f:da:
                    ca:a0:f3:2c:06:e8:21:ce:2b:58:b7:ff:1f:dd:49:
                    25:43:11:df:6b:9b:58:6b:ec:c9:94:f9:41:10:78:
                    ca:5f:b2:4e:b6:28:a6:88:58:74:17:b3:ef:7e:0e:
                    1c:e0:da:72:0d:30:df:98:f4:42:9f:e8:05:30:91:
                    8a:24:1d:44:73:7c:b4:78:df:da:1b:32:73:49:c3:
                    a6:e1:8b:61:42:23:d0:93:a6:24:e5:3e:10:97:37:
                    53:cd:2b:c8:72:b8:b4:39:d4:db:bb:1a:b9:13:bf:
                    f1:58:55:25:5d:74:fd:ae:af:17:a2:f1:8c:20:24:
                    41:9d:85:b2:04:f1:7a:69:f6:5a:50:7a:7b:5a:2f:
                    36:7f:d3:17:d8:68:25:57:56:67:06:b9:ac:b8:7e:
                    98:8e:ec:61:e1:e8:c1:b4:3f:1b:15:a7:8b:34:43:
                    5b:0c:09:24:e1:bf:5c:73:c5:fd:71:7b:e5:f1:7a:
                    25:a8:ee:eb:7e:39:e1:2e:68:c2:5f:82:2e:63:f6:
                    e8:f8:eb:86:fc:27:37:d9:96:c0:34:29:db:de:76:
                    08:24:48:f3:91:c1:9b:d9:47:75:f9:b0:00:7c:4c:
                    ca:77:b6:53:29:08:4e:8d:e0:d8:40:a9:58:5e:19:
                    92:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:20:76:C9:97:87:0A:0A:46:0E:F3:11:C0:62:D8:EC:CF:CC:ED:2B
            X509v3 Authority Key Identifier:
                keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:53:79:d5:ce:4a:ec:c2:43:57:b8:96:a3:ea:10:0e:ab:fe:
         9f:e1:5a:38:d3:06:5b:be:d7:32:bd:25:d1:6c:18:7f:d5:94:
         2b:8c:af:38:a7:9c:8a:16:74:2b:c3:3c:cd:59:76:57:28:d4:
         38:5d:78:8a:6a:ac:b2:b6:14:1c:b6:a4:ab:ec:04:26:3d:00:
         8b:02:bf:3f:83:63:a6:d4:1e:34:28:61:1d:3c:dd:39:48:30:
         91:c0:f2:15:73:13:3e:0e:0f:1c:c1:68:91:22:68:39:88:78:
         be:b9:19:fb:cb:c3:cb:97:a3:ef:ce:d2:d9:09:a3:82:d6:6c:
         3f:53:43:88:9a:12:cd:6e:d1:3e:da:ef:b7:97:c9:6c:c4:2c:
         1e:b3:14:e6:f0:8a:73:fc:92:8c:69:54:c0:3d:e7:b9:70:dd:
         bd:3d:c5:5b:91:28:14:86:00:02:84:8e:59:9b:de:af:9c:d1:
         18:ae:0c:b8:40:69:f4:bd:25:fa:23:3d:2f:d4:7b:47:4c:d9:
         ae:00:95:79:44:6f:ee:93:e5:8b:76:1d:cc:2e:95:73:74:3c:
         df:33:4e:aa:67:e0:c7:f7:65:f7:51:19:b7:5c:49:af:7a:db:
         c1:e1:d7:1e:41:41:08:ef:98:55:31:e0:3f:82:3f:2c:ed:3d:
         88:76:ba:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ3OTAxMTAvBgNVBAUTKERCQzEyODQ1RjFGQUEzNUIzMkZFQ0RGNkEwRUQ0RDE0
NDI5MkM4Q0MwHhcNMjYwMzAxMDg1MzAzWhcNMjYwMzA4MDg1MzAzWjAYMRYwFAYD
VQQDEw02OWEzZmU2Zi0yNWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxSPRWRzb5puNj6+vD9rKoPMsBughzitYt/8f3UklQxHfa5tYa+zJlPlBEHjK
X7JOtiimiFh0F7Pvfg4c4NpyDTDfmPRCn+gFMJGKJB1Ec3y0eN/aGzJzScOm4Yth
QiPQk6Yk5T4QlzdTzSvIcri0OdTbuxq5E7/xWFUlXXT9rq8XovGMICRBnYWyBPF6
afZaUHp7Wi82f9MX2GglV1ZnBrmsuH6Yjuxh4ejBtD8bFaeLNENbDAkk4b9cc8X9
cXvl8XolqO7rfjnhLmjCX4IuY/bo+OuG/Cc32ZbANCnb3nYIJEjzkcGb2Ud1+bAA
fEzKd7ZTKQhOjeDYQKlYXhmSaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcgdsmX
hwoKRg7zEcBi2OzPzO0rMB8GA1UdIwQYMBaAFNvBKEXx+qNbMv7N9qDtTRRCksjM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDc5MC81MTMzRkVBQzQ0
RTkxMUYwOTFBOTZFNTNDNEY5QUUwMi8yOEVvUmZINm8xc3lfczMyb08xTkZFS1N5
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI4RW9SZkg2bzFzeV9zMzJvTzFORkVLU3lNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDc5MC81MTMzRkVBQzQ0RTkxMUYwOTFBOTZFNTNDNEY5QUUwMi8yOEVvUmZINm8x
c3lfczMyb08xTkZFS1N5TXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASFN51c5K7MJDV7iWo+oQDqv+n+FaONMGW77XMr0l0WwYf9WUK4yvOKecihZ0
K8M8zVl2VyjUOF14imqssrYUHLakq+wEJj0AiwK/P4NjptQeNChhHTzdOUgwkcDy
FXMTPg4PHMFokSJoOYh4vrkZ+8vDy5ej787S2QmjgtZsP1NDiJoSzW7RPtrvt5fJ
bMQsHrMU5vCKc/ySjGlUwD3nuXDdvT3FW5EoFIYAAoSOWZver5zRGK4MuEBp9L0l
+iM9L9R7R0zZrgCVeURv7pPli3YdzC6Vc3Q83zNOqmfgx/dl91EZt1xJr3rbweHX
HkFBCO+YVTHgP4I/LO09iHa6eQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:30 2026 by rpki-client