Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
File:                     eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json)
Hash identifier:          TLA96jqrI/rkGLPGF9wG9TD/q6XWoeY9vBQ04yEMud4=
Subject key identifier:   EF:76:E4:BD:DA:70:5A:67:E7:80:72:A4:43:6F:86:C9:63:3A:C9:E0
Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
Certificate issuer:       /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
Manifest number:          FA
Signing time:             Sun 01 Mar 2026 07:18:51 +0000
Manifest this update:     Sun 01 Mar 2026 07:18:50 +0000
Manifest next update:     Sun 08 Mar 2026 07:18:50 +0000
Files and hashes:         1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: NGd8Ip7rrnBTNbnCx+bem7lc0F5S0D+rXSevmP8SKPs=)
                          2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: AKBTFuYWF0QJYhEYy3kesNey7V4DUjbDl4ck/CpF7wE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
                          rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
        Validity
            Not Before: Mar  1 07:18:50 2026 GMT
            Not After : Mar  8 07:18:50 2026 GMT
        Subject: CN=69a3e85b-bf46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:52:f1:45:c1:73:4e:33:fd:cb:dd:5c:45:
                    55:45:6f:20:5d:80:48:a7:f4:3c:06:26:a3:54:e0:
                    d8:42:a5:d1:5c:80:bf:e3:df:f3:33:43:81:1e:94:
                    c3:5e:75:f8:6c:53:7f:4b:21:d6:7a:a4:cb:3a:de:
                    72:62:66:3d:30:50:50:c1:e5:bf:b7:52:84:10:e7:
                    1f:da:58:93:28:40:8b:03:8b:85:ea:44:4b:fc:ea:
                    29:45:34:a7:5f:26:17:31:c2:99:9a:9f:da:3a:96:
                    62:68:a2:9f:a3:83:1a:09:5e:5b:55:1b:a8:df:5a:
                    f6:1e:9d:4f:a9:f3:77:7c:b2:8a:0e:a8:de:1d:4f:
                    9c:c3:0e:8e:d5:c4:dd:74:ca:54:d1:4c:c4:10:5c:
                    81:1f:9b:a2:2b:bc:78:b7:13:a7:5b:8a:1d:f1:61:
                    fd:27:d3:ec:d5:64:5f:1f:02:ce:fb:3e:49:76:78:
                    5f:7e:bd:40:02:b0:ab:98:d2:69:0b:84:9e:c6:e5:
                    fc:7b:0d:05:9d:3c:c6:d7:8a:01:c8:50:30:3a:c4:
                    54:37:3a:23:d3:7d:de:b1:95:d3:b5:e6:48:5b:5a:
                    28:79:1b:17:e0:53:11:ec:90:e5:e1:85:4f:ca:1c:
                    9a:ce:cf:3a:2a:c1:ec:73:5a:6f:af:6d:53:c4:ae:
                    f7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:76:E4:BD:DA:70:5A:67:E7:80:72:A4:43:6F:86:C9:63:3A:C9:E0
            X509v3 Authority Key Identifier:
                keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b1:ea:5f:40:dd:e9:d2:84:ef:66:c5:4d:ca:8f:3c:df:32:
         25:77:e8:94:73:7e:fb:3b:4c:9e:2b:e3:7a:e8:06:a9:0e:41:
         f9:74:6e:fb:60:dc:71:23:b6:a4:98:79:22:98:75:80:8a:cc:
         6b:0c:3f:dc:5a:dc:10:87:75:8c:26:ff:33:30:c8:3d:3e:db:
         1f:73:35:7a:df:cf:ec:36:e7:20:26:a5:ff:cd:41:a9:3f:b5:
         f5:c9:b9:f9:93:54:8d:ae:ac:b8:df:4a:90:85:d3:57:cc:4c:
         ca:8e:2f:ee:fe:d8:2e:52:d0:8c:cc:98:6e:9e:c6:18:5e:4a:
         55:26:88:bf:7b:a5:02:e2:60:69:2b:ac:4b:8e:4c:ef:be:6c:
         31:01:e4:4d:7d:9f:44:fd:67:1a:48:ed:ae:e0:b9:7f:1b:e2:
         37:0a:82:81:68:00:9e:f9:8a:56:9d:77:ae:e4:c5:25:63:93:
         be:24:78:f5:26:49:72:86:ff:f2:69:08:d6:ea:02:7b:47:cc:
         34:54:41:9a:05:9a:5a:c3:1f:96:3a:d5:6e:fc:5b:35:3f:a8:
         77:76:08:6b:75:4f:96:46:dc:78:25:9e:9f:5e:5f:a1:3e:03:
         e4:c1:05:4f:87:c2:1b:19:67:0f:93:41:20:e0:d5:81:6f:6f:
         e7:13:ea:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI0ODkxMTAvBgNVBAUTKDdBRUE3NzdDNkIxOTE1MTM1MzNCMEUyRURGMEYwRDg0
Q0I3MEJBMTEwHhcNMjYwMzAxMDcxODUwWhcNMjYwMzA4MDcxODUwWjAYMRYwFAYD
VQQDEw02OWEzZTg1Yi1iZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZBS8UXBc04z/cvdXEVVRW8gXYBIp/Q8BiajVODYQqXRXIC/49/zM0OBHpTD
XnX4bFN/SyHWeqTLOt5yYmY9MFBQweW/t1KEEOcf2liTKECLA4uF6kRL/OopRTSn
XyYXMcKZmp/aOpZiaKKfo4MaCV5bVRuo31r2Hp1PqfN3fLKKDqjeHU+cww6O1cTd
dMpU0UzEEFyBH5uiK7x4txOnW4od8WH9J9Ps1WRfHwLO+z5Jdnhffr1AArCrmNJp
C4SexuX8ew0FnTzG14oByFAwOsRUNzoj033esZXTteZIW1ooeRsX4FMR7JDl4YVP
yhyazs86KsHsc1pvr21TxK73UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO925L3a
cFpn54BypENvhsljOsngMB8GA1UdIwQYMBaAFHrqd3xrGRUTUzsOLt8PDYTLcLoR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zMjg5QTkwRTlC
RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZSTlRPdzR1M3c4TmhNdHd1
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2V1cDNmR3NaRlJOVE93NHUzdzhOaE10d3VoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjQ4OS8zMjg5QTkwRTlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZS
TlRPdzR1M3c4TmhNdHd1aEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAbHqX0Dd6dKE72bFTcqPPN8yJXfolHN++ztMnivjeugGqQ5B+XRu+2DccSO2
pJh5Iph1gIrMaww/3FrcEId1jCb/MzDIPT7bH3M1et/P7DbnICal/81BqT+19cm5
+ZNUja6suN9KkIXTV8xMyo4v7v7YLlLQjMyYbp7GGF5KVSaIv3ulAuJgaSusS45M
775sMQHkTX2fRP1nGkjtruC5fxviNwqCgWgAnvmKVp13ruTFJWOTviR49SZJcob/
8mkI1uoCe0fMNFRBmgWaWsMfljrVbvxbNT+od3YIa3VPlkbceCWen15foT4D5MEF
T4fCGxlnD5NBIODVgW9v5xPqwA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:28 2026 by rpki-client