Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
File:                     C_K1lEw6LMq2wdErw2pa88Lc938.mft (raw, json)
Hash identifier:          9JgV6QTxwwOq0blaFDMfV51hoKb2dh2Ax9EQu1EMbL8=
Subject key identifier:   13:59:23:0C:51:3B:88:18:43:B9:7D:60:1C:CC:B7:84:19:3E:2C:13
Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F
Certificate issuer:       /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
Certificate serial:       0D4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
Manifest number:          0D33
Signing time:             Mon 02 Mar 2026 00:25:23 +0000
Manifest this update:     Mon 02 Mar 2026 00:25:23 +0000
Manifest next update:     Mon 09 Mar 2026 00:25:23 +0000
Files and hashes:         1: C_K1lEw6LMq2wdErw2pa88Lc938.crl (hash: qBekjzfIGxR1yZKhHiVUQvQCU8A2dCRj78MqyHTS6/Q=)
                          2: F5660FBC160611ECB3912A7EC4F9AE02.roa (hash: ZrjcR9T+8HqKoXscHlTL4X0njAxpjmVzzUteKMnha0o=)
                          3: C981BB3CF36A11E983B1D764C4F9AE02.roa (hash: qcCtaMG3+No90shDmbUp/tU8ruNeRWwZsRG7YBEd9j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl
                          rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3402 (0xd4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F
        Validity
            Not Before: Mar  2 00:25:23 2026 GMT
            Not After : Mar  9 00:25:23 2026 GMT
        Subject: CN=69a4d8f3-bb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:62:62:19:1d:bf:7c:32:de:92:44:f0:ac:
                    4f:5b:c5:85:8f:9e:5f:a9:5a:6c:fc:cf:4a:4f:05:
                    13:91:8d:39:5f:d4:6c:a3:e6:02:d5:8b:b4:e2:d7:
                    78:b8:e8:d2:fe:c9:9f:ca:f0:18:2d:40:08:c4:59:
                    4f:bc:75:5c:0c:4e:09:b5:f1:da:e7:6a:16:6b:78:
                    94:e0:7c:fb:c2:dc:63:7e:34:46:5c:dc:b1:5d:c3:
                    1e:3e:50:45:72:39:af:b3:5c:ba:5b:fe:77:ab:bb:
                    c0:e7:11:b8:f4:c2:7a:83:24:fc:6b:fb:85:b4:a1:
                    da:5b:76:f7:a2:1a:1a:75:74:ae:e7:95:05:03:49:
                    96:e5:8b:2e:07:a0:3e:86:e6:46:0e:61:f6:20:fb:
                    81:7d:8e:31:a5:e3:b2:d7:69:7e:b9:f9:29:14:00:
                    b8:a5:26:c3:0f:ff:89:99:cd:ee:d0:b5:46:a3:c4:
                    ff:67:cb:fb:c7:50:55:bc:e4:4a:67:ee:fe:db:8f:
                    7e:5b:c8:fa:f8:32:cd:55:eb:a9:fb:25:6f:4c:68:
                    e3:c1:9a:d8:db:67:05:5e:78:fd:0c:bb:7c:ba:b9:
                    ef:05:03:63:28:76:4d:73:2a:84:17:e4:40:9a:3f:
                    30:87:f5:9d:b2:5c:11:65:a1:46:21:4f:43:65:28:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:59:23:0C:51:3B:88:18:43:B9:7D:60:1C:CC:B7:84:19:3E:2C:13
            X509v3 Authority Key Identifier:
                keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:9d:da:26:84:ff:d7:b0:c7:b1:4b:25:9b:37:ee:0a:38:
         6d:91:be:03:1b:82:1d:64:b2:5e:12:d2:72:6f:43:d4:d2:51:
         ef:9a:81:6f:74:29:33:9a:62:f6:25:71:e5:70:35:43:b5:32:
         9c:0c:7d:d0:56:c7:fb:ba:86:34:c1:9f:45:98:37:8b:55:c1:
         c0:51:51:3f:4b:95:aa:17:8e:aa:5d:d4:a5:79:e3:23:1c:b4:
         89:7e:be:af:9f:6e:bd:b3:8e:60:f2:b2:87:cc:25:96:c9:5d:
         14:1a:33:1e:1f:b6:16:38:70:14:d9:e2:2a:d1:96:1d:a9:c0:
         4b:f6:4b:1b:6b:fd:2e:b6:fd:0b:05:4f:2e:5a:cf:db:ee:7f:
         d0:bc:f2:5b:a6:a6:8b:4a:40:83:98:ac:d5:b4:f0:10:44:9d:
         5c:fe:ec:65:c8:4f:e6:0f:7d:72:6b:ba:0e:35:9a:3d:07:6e:
         fd:63:05:32:97:1e:52:52:43:0d:91:1c:0b:30:94:48:bf:b2:
         c4:8e:74:44:24:ec:66:00:f6:e8:f5:52:0a:b4:a7:b8:1a:d5:
         d9:6c:be:00:bd:10:c6:b4:6f:66:0f:9e:e4:53:c7:34:0d:01:
         11:71:f4:ef:ab:8d:22:04:c8:2e:d3:fd:ef:69:15:bc:5c:c3:
         05:6a:17:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDczRjgxMTAvBgNVBAUTKDBCRjJCNTk0NEMzQTJDQ0FCNkMxRDEyQkMzNkE1QUYz
QzJEQ0Y3N0YwHhcNMjYwMzAyMDAyNTIzWhcNMjYwMzA5MDAyNTIzWjAYMRYwFAYD
VQQDEw02OWE0ZDhmMy1iYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnyViYhkdv3wy3pJE8KxPW8WFj55fqVps/M9KTwUTkY05X9Rso+YC1Yu04td4
uOjS/smfyvAYLUAIxFlPvHVcDE4JtfHa52oWa3iU4Hz7wtxjfjRGXNyxXcMePlBF
cjmvs1y6W/53q7vA5xG49MJ6gyT8a/uFtKHaW3b3ohoadXSu55UFA0mW5YsuB6A+
huZGDmH2IPuBfY4xpeOy12l+ufkpFAC4pSbDD/+Jmc3u0LVGo8T/Z8v7x1BVvORK
Z+7+249+W8j6+DLNVeup+yVvTGjjwZrY22cFXnj9DLt8urnvBQNjKHZNcyqEF+RA
mj8wh/WdslwRZaFGIU9DZSiHawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNZIwxR
O4gYQ7l9YBzMt4QZPiwTMB8GA1UdIwQYMBaAFAvytZRMOizKtsHRK8NqWvPC3Pd/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzNGOC80QjQ1NkM4OEYz
NjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxNcTJ3ZEVydzJwYTg4TGM5
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NfSzFsRXc2TE1xMndkRXJ3MnBhODhMYzkzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzNGOC80QjQ1NkM4OEYzNjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxN
cTJ3ZEVydzJwYTg4TGM5MzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAceud2iaE/9ewx7FLJZs37go4bZG+AxuCHWSyXhLScm9D1NJR75qBb3QpM5pi
9iVx5XA1Q7UynAx90FbH+7qGNMGfRZg3i1XBwFFRP0uVqheOql3UpXnjIxy0iX6+
r59uvbOOYPKyh8wllsldFBozHh+2FjhwFNniKtGWHanAS/ZLG2v9Lrb9CwVPLlrP
2+5/0LzyW6ami0pAg5is1bTwEESdXP7sZchP5g99cmu6DjWaPQdu/WMFMpceUlJD
DZEcCzCUSL+yxI50RCTsZgD26PVSCrSnuBrV2Wy+AL0QxrRvZg+e5FPHNA0BEXH0
76uNIgTILtP972kVvFzDBWoXkQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:57 2026 by rpki-client