Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
File:                     EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json)
Hash identifier:          xwxytmGTDsQFnrSE3I6EGoHlJHZAQkE4l/fLPcGEqLQ=
Subject key identifier:   93:BE:76:30:E7:5F:78:8A:BD:AA:44:4F:37:76:31:E8:2D:43:ED:E9
Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98
Certificate issuer:       /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
Certificate serial:       0688
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
Manifest number:          0680
Signing time:             Sun 01 Mar 2026 22:38:06 +0000
Manifest this update:     Sun 01 Mar 2026 22:38:05 +0000
Manifest next update:     Sun 08 Mar 2026 22:38:05 +0000
Files and hashes:         1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: BtBGYDubQjha8JRlbrHUaXTrMZ74J/oVz5/oQ3tMQ5M=)
                          2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: BD9XvgbfGZGyT2mqJsZmkBVu9isJKAOPHUUx0vygtGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl
                          rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672 (0x688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
        Validity
            Not Before: Mar  1 22:38:05 2026 GMT
            Not After : Mar  8 22:38:05 2026 GMT
        Subject: CN=69a4bfcd-60b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:51:ff:88:01:11:4a:77:df:d5:00:df:f1:82:
                    45:75:f7:4e:05:9d:56:8f:dc:6a:cc:f7:dd:f2:a2:
                    20:ae:54:c5:d4:3f:5f:58:97:9f:14:a9:55:7a:da:
                    24:ee:1e:9f:a7:ad:32:49:a5:2c:35:73:8a:77:ca:
                    af:f1:08:5b:08:26:eb:e6:ec:fa:e1:ae:44:19:10:
                    c5:ec:3f:b9:fb:36:92:47:5a:1d:4f:04:af:91:eb:
                    1d:71:a3:da:a5:54:eb:a5:f8:5f:03:f8:d3:66:92:
                    ad:85:d2:32:b2:c3:4f:c3:e9:fd:f2:66:c4:a4:20:
                    39:65:ad:bc:17:44:b6:4e:01:dd:db:2d:a6:d3:f9:
                    05:7d:8f:a3:d7:85:4d:66:72:35:bc:8e:74:eb:86:
                    87:fb:51:6a:79:2d:43:6b:27:0a:d5:d5:e8:5f:ed:
                    2e:23:60:19:1f:87:22:77:32:f5:53:06:14:9f:56:
                    5e:4f:8b:83:5c:08:23:25:04:ee:3c:7f:85:ef:8f:
                    ea:88:bd:09:dc:9e:ed:79:f5:9b:35:29:d3:f8:25:
                    df:5e:31:ad:ee:05:d9:2e:49:ba:eb:d3:31:e1:e9:
                    e9:1a:28:3c:50:81:a1:00:e2:ca:70:72:25:e0:a9:
                    36:53:72:c1:6f:27:82:c8:5b:b7:23:a5:42:26:dc:
                    7b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BE:76:30:E7:5F:78:8A:BD:AA:44:4F:37:76:31:E8:2D:43:ED:E9
            X509v3 Authority Key Identifier:
                keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8d:59:4f:23:0e:06:6b:56:bf:d0:ec:e2:a5:f3:12:ff:3f:
         0d:5e:30:d2:bc:c2:8b:1b:67:16:f1:8d:b3:68:e6:b2:07:46:
         7d:05:c0:c3:1f:6d:63:74:d3:a2:e3:fe:f6:92:b8:6a:e2:5d:
         ac:26:d1:26:3b:cf:2c:17:ca:9a:36:5a:50:aa:cd:da:b9:26:
         4a:c7:c9:ea:d2:b8:ae:76:31:39:42:8c:37:90:52:24:23:66:
         0d:42:f3:a0:9e:45:98:f7:f5:f2:dc:eb:27:4d:39:3a:8e:34:
         25:af:4e:c8:9e:c7:31:78:ae:33:15:9c:cb:4c:99:70:2c:4b:
         25:9c:2e:94:d1:d6:fc:4b:2a:09:ab:11:c9:bb:19:f6:b1:1a:
         28:15:dd:c5:d2:e6:c8:65:1f:d9:fa:25:79:e9:f1:c1:7c:ad:
         7a:da:c9:f4:52:5d:55:21:bf:7b:a2:6b:4b:4b:fc:ad:e1:8e:
         1a:ed:1d:fb:e2:a2:9c:fa:de:4a:bc:c9:54:e8:69:4e:b9:25:
         0b:b1:10:dc:3a:6d:1b:9e:74:4f:a1:b8:84:9f:fd:3a:70:a1:
         f1:7b:6c:36:34:58:74:6c:a4:41:ed:11:d5:4c:96:36:0f:ff:
         34:fc:8a:b4:56:05:40:40:4e:84:21:6b:eb:10:2e:45:c4:4f:
         15:da:4f:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMxMEIxMTAvBgNVBAUTKDEwOUNCNzFCNEY2NDE2NkYxRERBNDIyQ0VCNzIxRUUz
RUQxOTY3OTgwHhcNMjYwMzAxMjIzODA1WhcNMjYwMzA4MjIzODA1WjAYMRYwFAYD
VQQDEw02OWE0YmZjZC02MGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApFH/iAERSnff1QDf8YJFdfdOBZ1Wj9xqzPfd8qIgrlTF1D9fWJefFKlVetok
7h6fp60ySaUsNXOKd8qv8QhbCCbr5uz64a5EGRDF7D+5+zaSR1odTwSvkesdcaPa
pVTrpfhfA/jTZpKthdIyssNPw+n98mbEpCA5Za28F0S2TgHd2y2m0/kFfY+j14VN
ZnI1vI5064aH+1FqeS1DaycK1dXoX+0uI2AZH4cidzL1UwYUn1ZeT4uDXAgjJQTu
PH+F74/qiL0J3J7tefWbNSnT+CXfXjGt7gXZLkm669Mx4enpGig8UIGhAOLKcHIl
4Kk2U3LBbyeCyFu3I6VCJtx7LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJO+djDn
X3iKvapETzd2MegtQ+3pMB8GA1UdIwQYMBaAFBCctxtPZBZvHdpCLOtyHuPtGWeY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83MjMxQzNEQUFG
NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0ZtOGQya0lzNjNJZTQtMFpa
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VKeTNHMDlrRm04ZDJrSXM2M0llNC0wWlo1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzEwQi83MjMxQzNEQUFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0Zt
OGQya0lzNjNJZTQtMFpaNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhI1ZTyMOBmtWv9Ds4qXzEv8/DV4w0rzCixtnFvGNs2jmsgdGfQXAwx9tY3TT
ouP+9pK4auJdrCbRJjvPLBfKmjZaUKrN2rkmSsfJ6tK4rnYxOUKMN5BSJCNmDULz
oJ5FmPf18tzrJ005Oo40Ja9OyJ7HMXiuMxWcy0yZcCxLJZwulNHW/EsqCasRybsZ
9rEaKBXdxdLmyGUf2foleenxwXytetrJ9FJdVSG/e6JrS0v8reGOGu0d++KinPre
SrzJVOhpTrklC7EQ3DptG550T6G4hJ/9OnCh8XtsNjRYdGykQe0R1UyWNg//NPyK
tFYFQEBOhCFr6xAuRcRPFdpPbw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:18 2026 by rpki-client