Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
File:                     s-lBocVdFIOrV5HZSYdQ492t7cw.mft (raw, json)
Hash identifier:          R88fcAp0yj0AyfLyCqg2fs3hpbOnBzigMhgEr/lCoQ8=
Subject key identifier:   E5:4C:C6:A7:A8:A6:82:BD:A9:A8:EA:CC:74:C7:A9:94:53:EB:63:61
Authority key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Certificate issuer:       /CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
Manifest number:          0183
Signing time:             Sun 01 Mar 2026 05:30:01 +0000
Manifest this update:     Sun 01 Mar 2026 05:30:01 +0000
Manifest next update:     Sun 08 Mar 2026 05:30:01 +0000
Files and hashes:         1: s-lBocVdFIOrV5HZSYdQ492t7cw.crl (hash: ReFXNxkTQlZoTlggPKmAE1lHkg/S0poXqDWZUFCmtDQ=)
                          2: 8B097276C5F911EE8D0FDF82C4F9AE02.roa (hash: QrzwJxlir4B2krIHjpPVgw+slUiaV2KTpSu9bAjDzKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
                          rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B018, serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
        Validity
            Not Before: Mar  1 05:30:01 2026 GMT
            Not After : Mar  8 05:30:01 2026 GMT
        Subject: CN=69a3ced9-d58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b2:e6:a2:ac:e1:29:1a:74:15:b2:bb:73:ce:
                    e9:74:43:d9:65:fc:24:cf:f5:f2:b5:b9:d6:7e:15:
                    c7:0e:06:7a:d7:4e:dd:77:70:05:e9:6a:7c:32:d6:
                    0d:c1:3b:3a:3e:e9:31:44:a0:18:87:1b:ad:53:7a:
                    90:f7:a0:bc:94:1c:d7:b2:02:11:4d:fd:d3:41:a1:
                    e3:68:cb:3c:3b:fd:50:30:c8:e6:3b:c7:76:c7:35:
                    1a:10:dd:10:ec:70:7f:08:43:b0:fa:60:4a:b9:6d:
                    92:c5:82:48:31:a1:19:b7:8f:49:6f:83:22:13:d1:
                    65:60:39:84:37:ce:a7:ed:25:3d:4b:94:1b:11:2a:
                    dc:7a:d9:eb:65:84:17:03:e3:ed:87:51:b2:37:be:
                    12:91:b9:8a:b2:2d:24:a5:d1:2b:48:37:04:71:b4:
                    50:a9:c6:fd:ef:b2:8a:89:c5:0e:01:9f:e2:e9:80:
                    35:9b:2d:0e:b7:e0:51:43:36:c6:8b:2b:a3:69:e5:
                    71:31:de:6b:ae:4b:bc:0a:3f:2f:cc:30:4e:51:a2:
                    3e:52:70:db:6d:61:25:ba:e8:61:c6:59:5c:e3:13:
                    02:78:21:fe:27:f6:df:50:e7:f2:95:a8:68:6c:20:
                    d9:4f:a9:28:69:e1:bc:49:f6:17:04:f4:2e:7c:c3:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4C:C6:A7:A8:A6:82:BD:A9:A8:EA:CC:74:C7:A9:94:53:EB:63:61
            X509v3 Authority Key Identifier:
                keyid:B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bc:f4:b4:4f:23:70:f6:01:8f:75:ec:d2:c7:d4:96:d9:7a:
         20:65:d9:00:8e:28:cb:da:b3:06:99:f1:99:ca:a2:c6:5f:ae:
         75:78:a1:8d:86:75:0d:86:74:c2:81:d3:b5:db:4f:1a:02:d4:
         f3:52:35:c1:9e:fc:39:01:3f:cd:91:b0:a3:58:19:aa:0a:3b:
         ff:5b:81:87:e0:b9:2b:1f:c6:44:57:a9:dc:73:40:9e:73:bb:
         63:2d:a8:06:37:bb:67:ce:23:ec:94:d1:d3:a1:b9:ef:42:66:
         49:f5:fa:3e:17:55:d3:dc:2a:1a:31:61:2a:0c:18:71:e3:d0:
         6f:75:d4:8b:61:f3:53:23:e4:12:a9:ab:2c:49:cb:4c:45:7f:
         89:43:5c:2c:73:f5:08:b6:1b:08:4e:24:7a:ad:f4:64:6d:d0:
         7e:70:28:64:2b:1f:cb:0a:d8:a8:ce:8e:77:bc:5b:0b:8e:80:
         fb:fe:d0:43:aa:40:ca:b5:f5:b2:7e:2f:dd:74:3c:66:49:88:
         f7:05:23:6a:e2:48:d5:91:73:0b:fd:a8:2f:9c:b6:45:70:a3:
         4a:2b:44:d4:57:84:2e:3b:76:0f:51:26:9b:c7:0d:62:f3:44:
         17:2f:20:f0:d0:62:3d:ef:8e:d3:87:4a:01:d6:92:d4:98:8b:
         03:dc:08:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IwMTgxMTAvBgNVBAUTKEIzRTk0MUExQzU1RDE0ODNBQjU3OTFEOTQ5ODc1MEUz
RERBREVEQ0MwHhcNMjYwMzAxMDUzMDAxWhcNMjYwMzA4MDUzMDAxWjAYMRYwFAYD
VQQDEw02OWEzY2VkOS1kNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2rLmoqzhKRp0FbK7c87pdEPZZfwkz/XytbnWfhXHDgZ6107dd3AF6Wp8MtYN
wTs6PukxRKAYhxutU3qQ96C8lBzXsgIRTf3TQaHjaMs8O/1QMMjmO8d2xzUaEN0Q
7HB/CEOw+mBKuW2SxYJIMaEZt49Jb4MiE9FlYDmEN86n7SU9S5QbESrcetnrZYQX
A+Pth1GyN74SkbmKsi0kpdErSDcEcbRQqcb977KKicUOAZ/i6YA1my0Ot+BRQzbG
iyujaeVxMd5rrku8Cj8vzDBOUaI+UnDbbWEluuhhxllc4xMCeCH+J/bfUOfylaho
bCDZT6koaeG8SfYXBPQufMPqwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVMxqeo
poK9qajqzHTHqZRT62NhMB8GA1UdIwQYMBaAFLPpQaHFXRSDq1eR2UmHUOPdre3M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zMDc5RDgxMkM1
RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi9zLWxCb2NWZEZJT3JWNUhaU1lkUTQ5MnQ3
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3MtbEJvY1ZkRklPclY1SFpTWWRRNDkydDdjdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjAxOC8zMDc5RDgxMkM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi9zLWxCb2NWZEZJ
T3JWNUhaU1lkUTQ5MnQ3Y3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAULz0tE8jcPYBj3Xs0sfUltl6IGXZAI4oy9qzBpnxmcqixl+udXihjYZ1DYZ0
woHTtdtPGgLU81I1wZ78OQE/zZGwo1gZqgo7/1uBh+C5Kx/GRFep3HNAnnO7Yy2o
Bje7Z84j7JTR06G570JmSfX6PhdV09wqGjFhKgwYcePQb3XUi2HzUyPkEqmrLEnL
TEV/iUNcLHP1CLYbCE4keq30ZG3QfnAoZCsfywrYqM6Od7xbC46A+/7QQ6pAyrX1
sn4v3XQ8ZkmI9wUjauJI1ZFzC/2oL5y2RXCjSitE1FeELjt2D1Emm8cNYvNEFy8g
8NBiPe+O04dKAdaS1JiLA9wI2w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:58 2026 by rpki-client