Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
File:                     aWYanwY1V84rVDewGIk9fZ_dvtA.mft (raw, json)
Hash identifier:          eCZzlhg8Ug3nSwKQB5lNGXzSbSEhGWVPq5e2+uWL5UY=
Subject key identifier:   00:8F:54:B5:3B:36:B3:BA:D9:72:A9:FD:60:83:59:C2:36:92:BA:F7
Authority key identifier: 69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0
Certificate issuer:       /CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0
Certificate serial:       06DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
Manifest number:          06D2
Signing time:             Sat 28 Feb 2026 22:43:12 +0000
Manifest this update:     Sat 28 Feb 2026 22:43:12 +0000
Manifest next update:     Sat 07 Mar 2026 22:43:12 +0000
Files and hashes:         1: aWYanwY1V84rVDewGIk9fZ_dvtA.crl (hash: JNmUilP6y66VdxO7dYWQ8SYTZ8efU4k+AWZ3/6UPQjE=)
                          2: DDCD4C168EC611EBAB7F3476C4F9AE02.roa (hash: Y2ugT7F/Nq9bo4RxO3pzLxKsvKtinv0AiQJTvZ2Vh+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl
                          rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1754 (0x6da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91431A6, serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0
        Validity
            Not Before: Feb 28 22:43:12 2026 GMT
            Not After : Mar  7 22:43:12 2026 GMT
        Subject: CN=69a36f80-e75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:7d:1f:f5:10:66:d6:b7:7f:32:8f:cc:7a:
                    ce:47:4b:0e:e5:8e:c9:48:7c:ad:3a:c8:63:08:7d:
                    3f:32:c7:21:72:8e:ca:b6:49:66:8f:64:ea:4c:96:
                    b5:b0:a6:57:0d:35:34:05:04:47:ad:45:7f:fa:ae:
                    8a:49:b7:7e:31:b9:96:f9:ad:f7:a2:9d:ee:f0:a2:
                    f0:9c:4a:43:97:05:01:ed:e0:6f:c3:cd:b7:17:fa:
                    2d:ef:46:97:89:b1:d9:e0:de:05:dc:a5:50:30:b7:
                    25:23:44:8c:08:22:e7:81:99:47:09:e0:e0:5f:c2:
                    17:b4:56:48:d4:0a:4c:61:0a:e8:89:0e:ca:cc:ef:
                    52:6e:09:54:3f:fd:4f:f9:41:ac:67:1e:98:5a:a2:
                    61:86:4d:05:b8:27:42:0a:87:cc:ef:b9:73:42:bc:
                    6f:ee:7b:00:b8:f7:fa:dc:0f:f3:40:9e:93:65:c7:
                    8e:90:1d:a7:6b:f0:3b:3f:d6:49:75:a9:2f:1e:d9:
                    49:c8:41:dd:dc:16:e8:28:b7:16:ec:db:e3:16:dd:
                    9e:fc:df:3e:e4:99:46:58:0e:28:0b:ae:dc:df:f9:
                    29:fb:b3:78:5a:c1:c4:30:1d:2c:8a:fc:f3:e6:da:
                    db:bc:b4:6b:30:ac:c8:57:51:6a:c3:e7:2e:ac:05:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8F:54:B5:3B:36:B3:BA:D9:72:A9:FD:60:83:59:C2:36:92:BA:F7
            X509v3 Authority Key Identifier:
                keyid:69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e5:13:00:9c:88:ca:79:a6:9e:37:6f:0e:b7:0f:66:cf:ce:
         26:32:9d:40:37:cc:80:a8:9f:8c:dd:ad:cf:d5:00:c7:a4:a6:
         e7:20:4a:f7:16:33:c5:23:05:af:f4:d6:f8:27:15:e4:99:08:
         76:d3:c3:78:1e:ad:e0:36:a1:e8:ef:eb:a0:73:1a:82:89:32:
         09:d1:77:0b:84:4c:cb:64:7b:df:df:e4:8c:92:4b:89:e6:03:
         77:b7:de:0e:d3:29:04:a0:24:47:83:59:95:38:c8:86:2b:06:
         64:1d:e3:8d:af:7d:49:b1:a1:7a:85:7c:f9:f8:f6:87:7a:65:
         ba:c4:db:a2:68:20:3a:bb:59:4d:e6:f3:c8:a4:d0:05:e2:b5:
         52:ea:27:bc:15:ee:fa:30:01:1b:d2:38:19:fd:28:67:93:6f:
         29:02:88:30:29:07:2b:53:0e:98:23:14:fa:37:46:69:35:88:
         5e:c8:ae:15:1e:ee:7c:3d:4c:b4:b1:c7:7e:03:14:58:c6:b5:
         09:94:ac:4f:db:dc:84:de:db:44:77:aa:27:17:20:b2:0e:d9:
         15:03:dc:e4:27:66:b0:f1:1a:31:02:f8:88:fb:0e:2f:bc:0a:
         f9:b8:13:37:77:2d:6e:84:4e:f3:5a:75:1e:09:79:67:e5:82:
         72:90:65:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMxQTYxMTAvBgNVBAUTKDY5NjYxQTlGMDYzNTU3Q0UyQjU0MzdCMDE4ODkzRDdE
OUZEREJFRDAwHhcNMjYwMjI4MjI0MzEyWhcNMjYwMzA3MjI0MzEyWjAYMRYwFAYD
VQQDDA02OWEzNmY4MC1lNzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxEt9H/UQZta3fzKPzHrOR0sO5Y7JSHytOshjCH0/Mschco7Ktklmj2TqTJa1
sKZXDTU0BQRHrUV/+q6KSbd+MbmW+a33op3u8KLwnEpDlwUB7eBvw823F/ot70aX
ibHZ4N4F3KVQMLclI0SMCCLngZlHCeDgX8IXtFZI1ApMYQroiQ7KzO9SbglUP/1P
+UGsZx6YWqJhhk0FuCdCCofM77lzQrxv7nsAuPf63A/zQJ6TZceOkB2na/A7P9ZJ
dakvHtlJyEHd3BboKLcW7NvjFt2e/N8+5JlGWA4oC67c3/kp+7N4WsHEMB0sivzz
5trbvLRrMKzIV1Fqw+curAWlGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACPVLU7
NrO62XKp/WCDWcI2krr3MB8GA1UdIwQYMBaAFGlmGp8GNVfOK1Q3sBiJPX2f3b7Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzFBNi80NEQ4OTBDQThF
QzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4NHJWRGV3R0lrOWZaX2R2
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FXWWFud1kxVjg0clZEZXdHSWs5ZlpfZHZ0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzFBNi80NEQ4OTBDQThFQzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4
NHJWRGV3R0lrOWZaX2R2dEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAluUTAJyIynmmnjdvDrcPZs/OJjKdQDfMgKifjN2tz9UAx6Sm5yBK9xYzxSMF
r/TW+CcV5JkIdtPDeB6t4Dah6O/roHMagokyCdF3C4RMy2R739/kjJJLieYDd7fe
DtMpBKAkR4NZlTjIhisGZB3jja99SbGheoV8+fj2h3plusTbomggOrtZTebzyKTQ
BeK1UuonvBXu+jABG9I4Gf0oZ5NvKQKIMCkHK1MOmCMU+jdGaTWIXsiuFR7ufD1M
tLHHfgMUWMa1CZSsT9vchN7bRHeqJxcgsg7ZFQPc5CdmsPEaMQL4iPsOL7wK+bgT
N3ctboRO81p1Hgl5Z+WCcpBl0g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:51 2026 by rpki-client