Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          bMmTTeT5v4dHDRzdlJYZ/5ARtVG1a44w8ZjiwqfuIiE=
Subject key identifier:   61:B8:A9:52:4F:87:5B:75:0B:B7:EE:12:71:66:75:B5:15:24:A0:8C
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       3322
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          31E0
Signing time:             Mon 02 Mar 2026 00:39:35 +0000
Manifest this update:     Mon 02 Mar 2026 00:39:33 +0000
Manifest next update:     Mon 09 Mar 2026 00:39:33 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: 1gVEP52ohpQuxKxXCemG7IP5hccpMxmEjY6bOSWiri8=)
                          2: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: GkFlzgc/nIyiS1LN/Cef4dU4OvlK6843acK12BI773w=)
                          3: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: sDukY+4vNyFTdEUh0TFnFVqsNmB2SFOIOqE9443URz8=)
                          4: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: aLEfT4bz2lONE3Z6tiYFlCUQQ7W4a5Jjb6n/TTXscv8=)
                          5: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: NqUuMy9p0TMFnr1hdFcOl63uXOxUFf6DtVkGnXJ//oQ=)
                          6: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: S8DC6sajQu2v4AHH91DNQHiJ5wKp3+cyj/HTStHK1mI=)
                          7: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: b1PlRjXuvw+bPWKNzR8yhRB1i2vQr1i31nAKPCd+jB4=)
                          8: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: DNpKV16jRaDVCMLZofIBpwfB3coox1f1YBts1IyzQeQ=)
                          9: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: iIncNlkzDLncSdr4CvW4y2W5fyCiIPivB8IWCNWoJP0=)
                          10: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: ZGTkEaop0Njy1O1CMAVof6Q9yXcRtZbEuTTl/ZxOWKs=)
                          11: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: sNdT6MxrCuaojFi/BDrMhSBDkMs2xAxh6yY0O2/s+BE=)
                          12: 3E745A08803611ECB2187650C4F9AE02.roa (hash: Z0vH4g67LYRMUkDn33Xr1DacFCEO5gl+Mwlp4YCfqyI=)
                          13: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: u0qwTK26crlyMuoa9QfDuqp5CWzIdI2WQad6/Sn3dko=)
                          14: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: 7rpBX3OAFbXzSQsSCfiWv0jLzZ4CuFbqEu38r2Hi6ik=)
                          15: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: 6DiADTjHWOW4PhIupgiZTCqOgHxAcBfnE/zFUrFC5Uw=)
                          16: BE430FFA699011EE96387F19C4F9AE02.roa (hash: nwAVGj9pFy222zqjuMW5VtHya2o6VVMIrsOdD04utTg=)
                          17: 4BBB7E087DAD11F0BE453F16C4F9AE02.roa (hash: 4vLmCaF8LuZBAngxTVEk66+xa895CWv4oMG2Zr7EUEs=)
                          18: 6DCD9050DCB011F09F01EF94466F56BC.roa (hash: CSTSsRORHJGkJ2OxQbDpWa4wIhPnwdisgm8MwAHVU6g=)
                          19: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: VwR7ciSw9K0cAPZ0/q0g7mvGXQVhOuUIe5YkFLUBvNM=)
                          20: 6A721236977E11EBB7908378C4F9AE02.roa (hash: hlItmVrTld/H6VupX4GDTIZfW62BGqHzeXgz7JKRhHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13090 (0x3322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Mar  2 00:39:33 2026 GMT
            Not After : Mar  9 00:39:33 2026 GMT
        Subject: CN=69a4dc46-6e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:1e:60:6e:ee:75:df:70:4c:03:d5:fb:53:
                    c0:4a:9e:34:63:8b:86:d9:22:37:30:d7:5d:d9:4e:
                    49:e3:40:4a:5f:96:24:cd:0b:7f:04:d3:e1:64:6b:
                    e7:ec:5e:83:5e:de:e9:f7:f2:3d:43:60:0f:03:98:
                    d4:cf:f6:b3:88:cb:9e:50:74:c5:76:3d:3d:fe:f0:
                    23:c4:25:21:af:01:e2:35:f1:d6:18:f9:01:8a:6a:
                    8a:d7:38:e9:08:c6:c2:5b:59:ff:c4:60:bb:39:b4:
                    bd:84:18:9c:13:0f:fc:ae:f3:37:9a:1e:93:99:fc:
                    60:c3:09:50:90:17:e9:37:60:7d:c4:78:0f:4e:3a:
                    fc:ca:9f:d2:be:a3:50:47:d8:3a:d8:32:7f:1b:80:
                    dc:b1:12:ed:47:93:a8:8e:e7:85:b3:d4:47:b6:ba:
                    d9:04:81:1e:5f:7a:d8:11:01:b3:de:ae:01:8d:92:
                    b3:b0:48:22:fe:7c:8c:6f:26:3a:e1:81:70:56:9a:
                    ac:b7:5b:fd:9b:fc:f0:d1:1c:0e:11:03:4f:51:18:
                    43:92:46:6d:d4:95:b3:b5:2a:41:01:44:df:a2:eb:
                    25:14:f4:fd:cc:5e:80:63:97:ff:a0:09:cb:ba:98:
                    8e:b7:fa:d4:04:5d:35:97:a5:9c:d9:4f:cc:6b:09:
                    96:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B8:A9:52:4F:87:5B:75:0B:B7:EE:12:71:66:75:B5:15:24:A0:8C
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9a:bc:ba:af:d4:5e:a0:3b:01:d8:24:c6:cd:3e:79:d1:a8:
         1f:d9:42:3b:fb:c4:b8:44:1f:36:8c:bd:fa:67:4d:2f:91:5d:
         98:7b:1e:ed:dc:b6:c7:af:ad:de:b3:62:bd:0c:a0:0d:f0:af:
         e6:85:49:8b:12:cd:0c:a8:25:27:6d:e4:f3:89:f5:bd:bd:7e:
         42:b5:b5:db:70:80:f6:b0:7f:a2:5c:94:f0:4a:bf:2b:7f:97:
         da:b9:d7:52:fc:4e:30:c7:aa:fd:f5:81:c9:53:d2:89:38:0b:
         55:4e:fe:c3:29:e3:7f:56:dc:e7:2d:6a:58:c5:31:86:5b:83:
         c5:9c:4d:7d:e8:0a:f9:d0:12:b5:4d:84:52:db:9c:e2:6b:f9:
         6e:45:20:00:0c:eb:28:c6:8c:e7:e6:05:43:13:64:6d:3d:29:
         9f:ea:8b:e0:54:25:b5:91:67:f2:0a:68:ae:81:f2:36:30:47:
         03:ea:99:9f:2c:55:29:47:3d:34:fb:1e:96:6d:b4:cf:1e:e2:
         bb:f6:7d:e3:ad:70:0a:c7:81:0e:16:1a:9e:3e:2c:19:61:a1:
         46:cb:75:e2:34:8d:30:6f:ea:10:be:da:fa:39:fa:20:14:9a:
         49:9e:e7:54:51:89:09:de:89:df:a1:2d:e2:90:d1:cb:be:90:
         cc:55:b7:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3
OUJFQTZBODUwHhcNMjYwMzAyMDAzOTMzWhcNMjYwMzA5MDAzOTMzWjAYMRYwFAYD
VQQDEw02OWE0ZGM0Ni02ZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxqIeYG7udd9wTAPV+1PASp40Y4uG2SI3MNdd2U5J40BKX5YkzQt/BNPhZGvn
7F6DXt7p9/I9Q2APA5jUz/aziMueUHTFdj09/vAjxCUhrwHiNfHWGPkBimqK1zjp
CMbCW1n/xGC7ObS9hBicEw/8rvM3mh6TmfxgwwlQkBfpN2B9xHgPTjr8yp/SvqNQ
R9g62DJ/G4DcsRLtR5OojueFs9RHtrrZBIEeX3rYEQGz3q4BjZKzsEgi/nyMbyY6
4YFwVpqst1v9m/zw0RwOEQNPURhDkkZt1JWztSpBAUTfouslFPT9zF6AY5f/oAnL
upiOt/rUBF01l6Wc2U/MawmWkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGG4qVJP
h1t1C7fuEnFmdbUVJKCMMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG
NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0U3NS9EMjJFRjNENkZGNEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdE
SmJlLUNCX1pLR3g1dnFhb1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVZq8uq/UXqA7Adgkxs0+edGoH9lCO/vEuEQfNoy9+mdNL5FdmHse7dy2x6+t
3rNivQygDfCv5oVJixLNDKglJ23k84n1vb1+QrW123CA9rB/olyU8Eq/K3+X2rnX
UvxOMMeq/fWByVPSiTgLVU7+wynjf1bc5y1qWMUxhluDxZxNfegK+dAStU2EUtuc
4mv5bkUgAAzrKMaM5+YFQxNkbT0pn+qL4FQltZFn8gporoHyNjBHA+qZnyxVKUc9
NPselm20zx7iu/Z9461wCseBDhYanj4sGWGhRst14jSNMG/qEL7a+jn6IBSaSZ7n
VFGJCd6J36Et4pDRy76QzFW3OA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:01 2026 by rpki-client