Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
File:                     Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json)
Hash identifier:          EOklsmr8g82ZWss9JEezLKhFxN/MexgjcV6JY+J/0yo=
Subject key identifier:   F5:AD:3C:DE:10:80:7A:CD:6D:4F:63:08:9B:6C:F2:CC:1C:4F:7D:C5
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       10BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
Manifest number:          1070
Signing time:             Sun 01 Mar 2026 22:27:29 +0000
Manifest this update:     Sun 01 Mar 2026 22:27:28 +0000
Manifest next update:     Sun 08 Mar 2026 22:27:28 +0000
Files and hashes:         1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: REldgZnjxm3T/giID7LdQtTApEc2nZbfxRWRGyhPhr0=)
                          2: C1313974CD3611F0AF85B537C4F9AE02.roa (hash: f/A+LWguMXATEHJn4eJ0wJBZMEAJgXqjwqrEzSCq8pw=)
                          3: 8030E8628FD211F0924FE573C4F9AE02.roa (hash: /USZdM8VJ9sT9L45v5Gqc1fErXfnCBLr53kJcQkQOiQ=)
                          4: 390C84E8CD3811F09B08A83DC4F9AE02.roa (hash: AiSldAMJ7Peh5Ix5vWF81oIDs571bEQr597s6F8mkzA=)
                          5: 912FB56E7E7811F08636DF33C4F9AE02.roa (hash: Bo9mMfItw30ptBSl3m5ksiJ4OhOSabDm7crZIRA9Lfs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
                          rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4282 (0x10ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: Mar  1 22:27:28 2026 GMT
            Not After : Mar  8 22:27:28 2026 GMT
        Subject: CN=69a4bd51-2057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:53:a5:e1:70:42:17:f2:5a:58:7c:c1:b4:78:
                    a2:10:fe:a4:7d:79:73:a8:fb:60:42:44:6b:73:b2:
                    fb:8f:0c:cf:d7:f5:db:ad:62:b6:37:be:2e:8d:3a:
                    8f:76:65:bb:54:7a:24:ee:83:c6:99:d4:a4:81:86:
                    fd:ca:a0:d0:b6:78:ec:5d:96:70:29:d5:11:e0:7f:
                    83:25:fd:ce:87:68:ca:0a:06:3a:1f:8f:34:41:1c:
                    23:63:34:f2:2b:67:c7:38:1c:d9:95:9f:a0:ed:32:
                    08:d0:17:55:23:7b:1c:d3:90:7c:cb:35:4e:82:f6:
                    f8:fe:94:1f:71:dd:06:35:6a:02:d5:2a:bc:e8:07:
                    26:96:7a:f7:37:69:39:ef:07:16:b1:d1:83:81:26:
                    f4:61:10:12:15:2c:6e:3e:aa:6d:4e:ce:62:c3:b1:
                    17:dc:54:cd:a4:1b:49:3b:65:96:c4:7e:f5:e5:92:
                    7f:b0:d9:62:ce:28:e5:df:e2:bf:89:4f:94:a8:9d:
                    e0:dc:66:69:45:57:17:2b:b1:a0:26:7e:cc:a0:a2:
                    ad:fe:dc:32:e7:9e:0c:e7:54:95:5d:0b:b7:3a:fb:
                    00:f5:16:f4:2c:ca:ba:7f:5d:e9:42:20:1d:e7:ff:
                    1d:6d:db:28:a2:1f:6f:5a:92:2a:f5:3d:97:83:9e:
                    d8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AD:3C:DE:10:80:7A:CD:6D:4F:63:08:9B:6C:F2:CC:1C:4F:7D:C5
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2f:20:f0:1f:b0:a8:b4:ff:d1:49:c0:ec:f8:8a:6c:30:54:
         32:f7:57:17:dd:b4:be:8e:c8:a8:17:4c:c3:90:ac:da:33:a4:
         e1:a3:12:de:f2:b3:2b:4f:57:5e:03:7b:ba:eb:ab:fb:e5:7f:
         b6:bd:59:31:dd:6c:59:08:37:fb:20:38:64:cf:07:52:57:60:
         35:54:f0:d1:e6:a1:f2:08:37:97:45:4c:fc:f8:95:7f:3d:e4:
         3c:19:14:9a:7f:ac:58:33:dc:0d:e7:5d:0e:fa:a6:a4:af:e4:
         5e:22:60:5c:6a:8d:58:b5:97:e8:f8:05:b0:f6:6b:6a:c4:6a:
         fd:cf:e2:8f:c4:fd:76:9c:87:28:35:19:11:9c:7e:90:96:c6:
         c9:fa:d3:06:6f:cb:c0:94:e9:2e:86:48:00:f4:de:26:5b:63:
         df:c1:8b:74:eb:21:c0:88:7b:c2:39:3e:90:0f:f0:c1:77:de:
         84:5c:6c:8d:19:7d:d2:0e:a5:a6:07:31:3c:bc:32:88:61:1d:
         07:bc:15:d7:20:4f:e1:6a:93:93:46:ed:d9:5a:ff:02:4e:44:
         b3:15:f4:64:54:fa:de:69:c4:47:69:1f:6b:bb:c4:4e:0d:26:
         3d:cd:ca:6e:b5:84:4d:d1:6d:5d:ac:ed:cc:39:1e:48:ac:fd:
         aa:b8:d2:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICELowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB
NjBDQjlBMzIwHhcNMjYwMzAxMjIyNzI4WhcNMjYwMzA4MjIyNzI4WjAYMRYwFAYD
VQQDEw02OWE0YmQ1MS0yMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3VOl4XBCF/JaWHzBtHiiEP6kfXlzqPtgQkRrc7L7jwzP1/XbrWK2N74ujTqP
dmW7VHok7oPGmdSkgYb9yqDQtnjsXZZwKdUR4H+DJf3Oh2jKCgY6H480QRwjYzTy
K2fHOBzZlZ+g7TII0BdVI3sc05B8yzVOgvb4/pQfcd0GNWoC1Sq86Acmlnr3N2k5
7wcWsdGDgSb0YRASFSxuPqptTs5iw7EX3FTNpBtJO2WWxH715ZJ/sNlizijl3+K/
iU+UqJ3g3GZpRVcXK7GgJn7MoKKt/twy554M51SVXQu3OvsA9Rb0LMq6f13pQiAd
5/8dbdsooh9vWpIq9T2Xg57YlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPWtPN4Q
gHrNbU9jCJts8swcT33FMB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD
RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzQzMi8yRENBQkE2ODVDRjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIx
RkppbF9LVThoZHFtRExtakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWy8g8B+wqLT/0UnA7PiKbDBUMvdXF920vo7IqBdMw5Cs2jOk4aMS3vKzK09X
XgN7uuur++V/tr1ZMd1sWQg3+yA4ZM8HUldgNVTw0eah8gg3l0VM/PiVfz3kPBkU
mn+sWDPcDeddDvqmpK/kXiJgXGqNWLWX6PgFsPZrasRq/c/ij8T9dpyHKDUZEZx+
kJbGyfrTBm/LwJTpLoZIAPTeJltj38GLdOshwIh7wjk+kA/wwXfehFxsjRl90g6l
pgcxPLwyiGEdB7wV1yBP4WqTk0bt2Vr/Ak5EsxX0ZFT63mnER2kfa7vETg0mPc3K
brWETdFtXaztzDkeSKz9qrjS6g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:49 2026 by rpki-client