Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
File:                     0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json)
Hash identifier:          zltiAcK/LEOio7w36AGZKWhku6S3ukFrc6dnutCcKY8=
Subject key identifier:   FA:49:73:46:C5:64:ED:ED:61:29:8F:29:53:19:F2:6B:03:CD:F5:16
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Certificate issuer:       /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
Manifest number:          9C
Signing time:             Sun 01 Mar 2026 08:36:58 +0000
Manifest this update:     Sun 01 Mar 2026 08:36:58 +0000
Manifest next update:     Sun 08 Mar 2026 08:36:58 +0000
Files and hashes:         1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: K2g56yBGp+Nm5xoMJmZVcyX/ZcYXIYemfJBHesxHe6Q=)
                          2: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: gg3dy1VemygngsJpaRmfWK/QMAHg/KD+YdVdOG6ayvU=)
                          3: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: KKNZk8TKKutrrsf25zmuk68cl+IkZVqZN/02Jy9kkJk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
                          rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
        Validity
            Not Before: Mar  1 08:36:58 2026 GMT
            Not After : Mar  8 08:36:58 2026 GMT
        Subject: CN=69a3faaa-1fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:6a:42:66:9b:a9:79:20:e7:28:bc:71:21:
                    26:9f:a3:01:c9:14:cb:be:a6:de:51:4d:31:23:26:
                    70:74:56:08:34:53:9c:c9:ac:d1:32:20:67:bf:03:
                    64:74:72:af:c2:44:5a:53:66:ae:21:7a:28:01:a0:
                    95:f7:85:93:83:2d:f0:19:f8:20:60:69:91:67:f3:
                    f6:a8:5f:37:76:0c:71:e6:56:27:f0:76:36:11:a9:
                    98:fc:2a:21:37:af:90:36:64:4f:e7:dd:62:cb:d4:
                    f6:b7:87:7b:24:aa:bf:6e:30:4d:cf:cc:39:1b:01:
                    3d:fd:99:5a:9f:6f:52:a9:d9:1f:cf:05:ea:8b:93:
                    fa:ad:c9:f4:c1:6f:43:18:2d:3e:c1:a2:93:c8:94:
                    3a:f7:c5:91:ae:e0:f7:6d:b7:78:c1:be:80:ed:d2:
                    3a:31:fb:5a:11:6a:53:75:f9:e1:53:7a:10:19:96:
                    60:6d:30:04:03:e9:8c:69:23:4d:9c:64:f7:f3:28:
                    32:71:42:81:c7:3d:1e:34:a9:36:bf:9c:32:23:84:
                    f7:06:89:ed:16:09:25:87:ee:ff:5b:57:a0:47:46:
                    13:ba:82:eb:ba:21:8d:10:3a:91:f3:17:0d:fd:94:
                    64:ed:d5:45:93:80:98:4c:fb:46:b8:ee:53:67:fe:
                    72:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:49:73:46:C5:64:ED:ED:61:29:8F:29:53:19:F2:6B:03:CD:F5:16
            X509v3 Authority Key Identifier:
                keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fc:ee:fe:ad:c6:58:70:70:5a:37:f2:d0:ad:96:2e:9c:a5:
         75:a2:58:ae:75:2d:da:08:bf:f3:0c:80:2a:3b:1f:5b:52:ee:
         5e:7b:ca:04:a9:0d:2b:60:b4:04:88:c9:3f:3c:f4:07:4d:00:
         bf:8c:0a:fe:ff:ac:f4:ed:b9:05:d1:e9:38:5a:2e:e2:ef:a6:
         88:38:1f:1b:38:51:51:ad:86:d4:02:c9:31:ab:d6:f5:b3:bc:
         86:af:0b:2c:a9:54:23:cc:dc:60:4f:69:79:71:ea:f1:d8:16:
         36:85:11:9f:ba:86:cb:98:67:15:04:38:5c:7c:82:7e:15:03:
         b2:89:32:23:89:70:cf:3b:11:dd:b3:74:39:08:0e:ef:fe:ab:
         90:54:17:1f:73:78:52:08:84:d5:0c:b4:18:94:bc:68:09:21:
         1d:7d:1e:dd:52:93:85:64:03:03:dc:69:7d:26:dc:c5:17:6b:
         b7:04:fb:26:a5:2f:20:0e:85:11:6b:42:00:97:9f:e5:d4:bf:
         e2:18:17:e7:3d:e3:28:6a:d5:d2:35:df:a8:6a:f6:72:1b:30:
         30:a5:99:12:35:e4:6b:b7:ba:3a:d5:f7:71:73:22:f7:d9:80:
         09:4d:9d:01:cf:0a:de:34:2a:b8:01:8f:43:db:03:cd:9b:60:
         9c:6a:19:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDEyQkMxMTAvBgNVBAUTKEQzMDk0MENDNkYwQzEwMjRCODQwQkJCN0QzRDgwMTI2
MzYwNkNBNTkwHhcNMjYwMzAxMDgzNjU4WhcNMjYwMzA4MDgzNjU4WjAYMRYwFAYD
VQQDEw02OWEzZmFhYS0xZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsNZqQmabqXkg5yi8cSEmn6MByRTLvqbeUU0xIyZwdFYINFOcyazRMiBnvwNk
dHKvwkRaU2auIXooAaCV94WTgy3wGfggYGmRZ/P2qF83dgxx5lYn8HY2EamY/Coh
N6+QNmRP591iy9T2t4d7JKq/bjBNz8w5GwE9/Zlan29SqdkfzwXqi5P6rcn0wW9D
GC0+waKTyJQ698WRruD3bbd4wb6A7dI6MftaEWpTdfnhU3oQGZZgbTAEA+mMaSNN
nGT38ygycUKBxz0eNKk2v5wyI4T3BontFgklh+7/W1egR0YTuoLruiGNEDqR8xcN
/ZRk7dVFk4CYTPtGuO5TZ/5y/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPpJc0bF
ZO3tYSmPKVMZ8msDzfUWMB8GA1UdIwQYMBaAFNMJQMxvDBAkuEC7t9PYASY2BspZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTJCQy8yMUE5NTMxNDI0
OEExMUYwOTk4NkQwNzdDNEY5QUUwMi8wd2xBekc4TUVDUzRRTHUzMDlnQkpqWUd5
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB3bEF6RzhNRUNTNFFMdTMwOWdCSmpZR3lsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTJCQy8yMUE5NTMxNDI0OEExMUYwOTk4NkQwNzdDNEY5QUUwMi8wd2xBekc4TUVD
UzRRTHUzMDlnQkpqWUd5bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnvzu/q3GWHBwWjfy0K2WLpyldaJYrnUt2gi/8wyAKjsfW1LuXnvKBKkNK2C0
BIjJPzz0B00Av4wK/v+s9O25BdHpOFou4u+miDgfGzhRUa2G1ALJMavW9bO8hq8L
LKlUI8zcYE9peXHq8dgWNoURn7qGy5hnFQQ4XHyCfhUDsokyI4lwzzsR3bN0OQgO
7/6rkFQXH3N4UgiE1Qy0GJS8aAkhHX0e3VKThWQDA9xpfSbcxRdrtwT7JqUvIA6F
EWtCAJef5dS/4hgX5z3jKGrV0jXfqGr2chswMKWZEjXka7e6OtX3cXMi99mACU2d
Ac8K3jQquAGPQ9sDzZtgnGoZ9g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:47 2026 by rpki-client