Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
File:                     sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft (raw, json)
Hash identifier:          6ixynmasJn3G9K7UOGlpq3QoYUCZ2TAEiuH+BBlgric=
Subject key identifier:   F1:0F:A6:5E:92:28:06:79:FC:99:8E:13:44:66:62:55:9D:49:29:15
Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
Certificate issuer:       /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Certificate serial:       1002
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
Manifest number:          0FEA
Signing time:             Sat 28 Feb 2026 17:35:36 +0000
Manifest this update:     Sat 28 Feb 2026 17:35:35 +0000
Manifest next update:     Sat 07 Mar 2026 17:35:35 +0000
Files and hashes:         1: sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl (hash: my2Ln6jZgj1NNIi4WUp4ZIwD7zO+xJKK/1NFDjv4tRc=)
                          2: 8EF29168D1ED11F08D3A6B3CC4F9AE02.roa (hash: U9eaM1MuTBE4HxyD+oWfbdyrqKzDocKO0zCYwSqP5pQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
                          rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4098 (0x1002)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BF1E, serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
        Validity
            Not Before: Feb 28 17:35:35 2026 GMT
            Not After : Mar  7 17:35:35 2026 GMT
        Subject: CN=69a32768-7516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:8b:67:80:ab:5f:5c:f9:dc:99:bb:36:cc:
                    5e:16:fa:a4:52:dd:1a:8b:5d:89:96:39:0c:0f:d4:
                    b5:d3:de:6d:3e:b6:4d:7e:e9:d6:91:87:fe:e5:28:
                    84:cd:73:53:8e:3d:15:38:17:a5:d8:60:db:97:0f:
                    99:67:21:1c:53:2b:7d:e6:a1:cf:f2:0b:17:ec:50:
                    b9:28:07:ef:ae:44:e1:12:fb:c8:ef:3b:33:25:af:
                    2b:2c:06:77:bf:31:52:a5:e0:31:07:9b:8a:b9:2a:
                    dc:11:32:ad:7b:6c:d7:46:8f:3c:c5:5d:b8:f8:62:
                    fd:82:ab:fe:d1:73:69:d2:dd:dd:ce:24:27:71:78:
                    08:c4:2c:ec:2a:3f:3c:36:86:98:54:92:55:c4:b7:
                    fc:89:1e:bd:39:0f:d9:eb:c1:73:40:dc:21:b3:a0:
                    b7:f7:7a:72:9a:4f:0f:76:40:e1:43:5d:d2:3f:71:
                    07:c4:bf:7e:7c:9e:34:9c:06:49:be:f5:73:ad:a1:
                    32:d3:9c:b7:ea:75:57:ba:a9:65:f3:66:af:04:7e:
                    05:8a:76:04:f3:02:aa:35:ac:f1:63:75:0f:8d:75:
                    39:10:24:4d:af:58:ba:f1:e1:60:bf:27:2c:0b:6c:
                    c8:c0:ef:87:bb:11:9a:8f:3c:05:ce:40:80:ba:d3:
                    4b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0F:A6:5E:92:28:06:79:FC:99:8E:13:44:66:62:55:9D:49:29:15
            X509v3 Authority Key Identifier:
                keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b0:bc:10:33:0b:95:a7:4f:4e:ed:48:ac:20:95:f6:bb:a0:
         87:d7:b3:8c:7d:66:34:2c:25:50:59:ad:61:f1:67:03:46:0f:
         15:c8:1d:44:03:19:3e:ce:44:2c:ce:9a:23:3f:bd:cb:be:74:
         bb:f7:d6:3c:8e:b0:70:55:8c:b0:37:b8:34:75:6b:9d:25:d0:
         ba:2c:1b:e1:34:a7:d0:5d:2e:ec:a3:46:17:3e:11:e2:e7:9c:
         4f:df:e9:10:9f:09:3f:a8:12:60:d1:99:f5:52:dd:f0:60:c9:
         c6:2b:95:8c:15:fb:61:fd:bf:96:c5:d1:4f:c2:2b:eb:67:67:
         d1:d4:a7:aa:72:81:cb:51:d7:6d:63:ed:f9:f5:d0:95:6d:49:
         e8:18:93:f5:17:ee:e3:a2:7a:ea:7a:d7:1f:ea:04:6e:83:d1:
         0c:83:7a:37:d9:46:3d:86:43:a7:9c:c8:5f:b2:3e:f6:10:dc:
         42:99:fa:cf:d2:2d:55:81:dc:26:9f:9b:53:06:ea:da:65:ea:
         ad:31:1b:b7:0e:25:9a:09:cb:85:c1:ec:f8:ee:8b:dc:ae:00:
         6d:a4:dc:39:5f:b5:8e:dc:cd:e7:6d:59:95:71:a6:53:95:17:
         7c:0b:31:61:cc:9a:5c:1c:6f:ea:81:bb:15:e1:e1:10:6c:8c:
         e1:1a:24:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JGMUUxMTAvBgNVBAUTKEIxNEIyRUU1QzVFRDczNkFCNzM2QjI1NTM1ODY3NTlB
RkNERUMzRTIwHhcNMjYwMjI4MTczNTM1WhcNMjYwMzA3MTczNTM1WjAYMRYwFAYD
VQQDDA02OWEzMjc2OC03NTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr7qLZ4CrX1z53Jm7NsxeFvqkUt0ai12JljkMD9S1095tPrZNfunWkYf+5SiE
zXNTjj0VOBel2GDblw+ZZyEcUyt95qHP8gsX7FC5KAfvrkThEvvI7zszJa8rLAZ3
vzFSpeAxB5uKuSrcETKte2zXRo88xV24+GL9gqv+0XNp0t3dziQncXgIxCzsKj88
NoaYVJJVxLf8iR69OQ/Z68FzQNwhs6C393pymk8PdkDhQ13SP3EHxL9+fJ40nAZJ
vvVzraEy05y36nVXuqll82avBH4FinYE8wKqNazxY3UPjXU5ECRNr1i68eFgvycs
C2zIwO+HuxGajzwFzkCAutNL8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPEPpl6S
KAZ5/JmOE0RmYlWdSSkVMB8GA1UdIwQYMBaAFLFLLuXF7XNqtzayVTWGdZr83sPi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkYxRS9EQkIyQkY2NjZF
NkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMycTNOckpWTllaMW12emV3
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NVc3U1Y1h0YzJxM05ySlZOWVoxbXZ6ZXctSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QkYxRS9EQkIyQkY2NjZFNkYxMUU5QUEwMTdDMzNDNEY5QUUwMi9zVXN1NWNYdGMy
cTNOckpWTllaMW12emV3LUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANbC8EDMLladPTu1IrCCV9rugh9ezjH1mNCwlUFmtYfFnA0YPFcgdRAMZPs5E
LM6aIz+9y750u/fWPI6wcFWMsDe4NHVrnSXQuiwb4TSn0F0u7KNGFz4R4uecT9/p
EJ8JP6gSYNGZ9VLd8GDJxiuVjBX7Yf2/lsXRT8Ir62dn0dSnqnKBy1HXbWPt+fXQ
lW1J6BiT9Rfu46J66nrXH+oEboPRDIN6N9lGPYZDp5zIX7I+9hDcQpn6z9ItVYHc
Jp+bUwbq2mXqrTEbtw4lmgnLhcHs+O6L3K4AbaTcOV+1jtzN521ZlXGmU5UXfAsx
YcyaXBxv6oG7FeHhEGyM4Rok4A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:36:31 2026 by rpki-client