Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
File:                     8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json)
Hash identifier:          ICYHm+UesCQ3Ic3uKiBK0VDc8lSpms8GYe3zQGuv+2k=
Subject key identifier:   7C:68:12:62:EB:7A:B2:57:2F:71:E2:2A:D2:77:75:9A:AF:0C:FB:7E
Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D
Certificate issuer:       /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
Manifest number:          01FD
Signing time:             Mon 02 Mar 2026 01:37:14 +0000
Manifest this update:     Mon 02 Mar 2026 01:37:12 +0000
Manifest next update:     Mon 09 Mar 2026 01:37:12 +0000
Files and hashes:         1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: Hp9oraw2Bahv1aEAwW5w3uEOlNfL0LvIpIMoJNaGWgw=)
                          2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: /W0g7wRAuyXEotKxsKGa14VaFaP0rEyXWp6ttAdlMsQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl
                          rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D
        Validity
            Not Before: Mar  2 01:37:12 2026 GMT
            Not After : Mar  9 01:37:12 2026 GMT
        Subject: CN=69a4e9c9-504c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:b5:e8:57:03:ab:af:c5:45:57:ce:91:95:
                    9b:4d:e2:2e:5f:36:6b:6e:fd:02:e4:2b:d1:ca:91:
                    d5:58:6c:ba:7a:79:54:1a:d1:75:7c:42:05:fc:ee:
                    93:b4:31:a3:6f:2f:3c:19:1c:dc:f5:c5:17:5d:4a:
                    4a:3c:db:e7:e3:1f:17:15:da:4d:c8:87:19:96:e0:
                    06:99:0b:b6:11:c1:6d:cd:9d:fe:02:57:bd:fc:c6:
                    46:13:57:f9:85:c0:2d:90:7f:cb:6d:6e:22:79:b8:
                    46:49:a2:5c:d7:ec:3e:de:3e:75:43:87:64:d8:51:
                    0f:e5:3f:df:82:0d:a6:dc:65:d7:bc:39:fe:d1:17:
                    46:fa:22:a3:ae:cf:1f:db:95:1b:da:72:7d:e5:41:
                    6d:8f:66:03:ea:ab:26:21:8c:ea:b5:77:cf:84:aa:
                    f7:fc:e4:79:77:24:40:ff:56:73:d7:22:46:1e:5f:
                    a2:5a:e2:30:4d:e0:c8:01:23:35:7b:4b:b0:bb:8e:
                    ee:b7:39:ce:94:99:d2:d5:dc:21:e5:fd:82:02:b2:
                    75:c4:e6:fa:26:cc:22:39:c3:f5:0b:eb:f0:ab:a4:
                    43:ce:8d:9e:f1:f6:3d:a5:3f:80:8b:2f:65:8f:f6:
                    4f:f2:41:c3:e6:79:3a:97:45:c3:b3:2a:aa:3a:5e:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:68:12:62:EB:7A:B2:57:2F:71:E2:2A:D2:77:75:9A:AF:0C:FB:7E
            X509v3 Authority Key Identifier:
                keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:28:f9:b3:c6:f2:06:23:f8:66:b2:79:b2:fb:26:a5:67:8d:
         06:66:3a:76:cb:d2:41:dc:b2:1c:12:d4:03:de:d6:72:4d:a5:
         d1:57:f8:12:2c:81:08:52:8d:19:b1:74:ca:af:c9:46:3c:cb:
         f8:87:23:fb:0b:91:22:a3:72:86:fb:f2:c4:de:0d:5f:98:60:
         22:44:11:c6:a8:6f:ac:7f:3a:a0:18:a8:0b:bb:fe:23:8e:94:
         a6:75:1c:56:b8:23:df:61:36:f8:cd:a5:48:89:fe:5f:bf:e2:
         30:35:26:e1:0b:fc:2f:d4:e9:9b:53:80:ef:64:ee:08:d2:c8:
         3c:fd:d6:ee:ad:39:12:4c:57:c0:ff:72:78:6f:d1:69:75:4d:
         f7:86:af:d3:b4:06:26:1f:11:8a:ef:12:8e:46:5c:45:bf:89:
         04:b9:40:00:5e:52:8a:6f:7f:74:96:78:14:53:7d:15:d7:b9:
         e7:d0:5f:c6:75:b9:60:73:75:b1:f9:84:a8:e1:61:e0:68:08:
         c1:ef:3e:b3:24:a4:a9:9f:20:06:77:98:a1:b1:f3:ef:a3:6b:
         73:bb:b1:4d:27:e4:c5:ac:6b:a1:04:03:cf:b3:4d:20:d1:7b:
         e7:31:dc:66:15:33:ca:34:99:f8:45:e4:32:7c:eb:92:2d:b1:
         92:83:37:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC
NkE5MDU4MEQwHhcNMjYwMzAyMDEzNzEyWhcNMjYwMzA5MDEzNzEyWjAYMRYwFAYD
VQQDEw02OWE0ZTljOS01MDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5bK16FcDq6/FRVfOkZWbTeIuXzZrbv0C5CvRypHVWGy6enlUGtF1fEIF/O6T
tDGjby88GRzc9cUXXUpKPNvn4x8XFdpNyIcZluAGmQu2EcFtzZ3+Ale9/MZGE1f5
hcAtkH/LbW4iebhGSaJc1+w+3j51Q4dk2FEP5T/fgg2m3GXXvDn+0RdG+iKjrs8f
25Ub2nJ95UFtj2YD6qsmIYzqtXfPhKr3/OR5dyRA/1Zz1yJGHl+iWuIwTeDIASM1
e0uwu47utznOlJnS1dwh5f2CArJ1xOb6JswiOcP1C+vwq6RDzo2e8fY9pT+Aiy9l
j/ZP8kHD5nk6l0XDsyqqOl4+2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHxoEmLr
erJXL3HiKtJ3dZqvDPt+MB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB
RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX
QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi
YjMxS2lJZUF1TmkycVFXQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaCj5s8byBiP4ZrJ5svsmpWeNBmY6dsvSQdyyHBLUA97Wck2l0Vf4EiyBCFKN
GbF0yq/JRjzL+Icj+wuRIqNyhvvyxN4NX5hgIkQRxqhvrH86oBioC7v+I46UpnUc
Vrgj32E2+M2lSIn+X7/iMDUm4Qv8L9Tpm1OA72TuCNLIPP3W7q05EkxXwP9yeG/R
aXVN94av07QGJh8Riu8SjkZcRb+JBLlAAF5Sim9/dJZ4FFN9Fde559BfxnW5YHN1
sfmEqOFh4GgIwe8+sySkqZ8gBneYobHz76Nrc7uxTSfkxaxroQQDz7NNINF75zHc
ZhUzyjSZ+EXkMnzrki2xkoM3Pg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:05 2026 by rpki-client