Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
File:                     DS1vMynFa_bo-UG9_adJbb4lMOU.mft (raw, json)
Hash identifier:          XHc1ldb3wW6izCbpVv//sKqzRQljUVUvjeBKvvwq6U0=
Subject key identifier:   C5:5E:B5:47:0C:F5:E4:C4:F0:C3:A7:A7:C5:96:0F:01:52:3F:2A:B1
Authority key identifier: 0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5
Certificate issuer:       /CN=A915479A/serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
Manifest number:          C7
Signing time:             Sun 01 Mar 2026 08:01:20 +0000
Manifest this update:     Sun 01 Mar 2026 08:01:19 +0000
Manifest next update:     Sun 08 Mar 2026 08:01:19 +0000
Files and hashes:         1: DS1vMynFa_bo-UG9_adJbb4lMOU.crl (hash: 0oBs1uGzQeIFyj4HJEYx+IC9GaVbDvR55Fu8N1ExPCc=)
                          2: 8836D872E37B11EFB4D75458C4F9AE02.roa (hash: OwgEAbL5QCnHsVpOX5SA562X1wx0q50NZ09aIXPpfus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl
                          rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915479A, serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
        Validity
            Not Before: Mar  1 08:01:19 2026 GMT
            Not After : Mar  8 08:01:19 2026 GMT
        Subject: CN=69a3f24f-e863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:d6:a5:de:1c:d4:38:8e:b5:3a:a0:32:86:
                    69:5f:82:8b:3f:5e:7e:42:10:5c:ec:f5:dc:d9:f0:
                    a1:71:44:10:dd:4f:74:12:1c:77:46:f0:a5:74:a2:
                    64:66:d3:b6:be:d2:dc:b2:2f:21:2f:5b:f2:74:7b:
                    63:d8:f6:f9:e5:4c:63:57:2d:e0:36:36:f2:d2:5a:
                    d4:46:4c:bd:dc:71:53:84:f9:55:2a:56:57:54:f7:
                    5f:b4:6a:42:f4:4f:34:ff:c0:76:bd:e0:5a:d4:75:
                    a8:72:d9:5c:8d:07:a7:43:af:08:3d:f5:0d:6c:6f:
                    35:13:c7:93:b7:f0:fa:c6:64:94:c6:e5:ff:8c:fe:
                    99:3a:08:4f:57:2a:05:dc:d4:1d:c3:fa:50:18:64:
                    97:ee:37:38:45:4c:61:2c:7f:5e:89:35:9f:d5:f1:
                    03:85:49:86:f8:ed:20:59:be:a2:88:7b:16:af:7b:
                    43:e4:17:25:32:a4:f9:bf:5e:c2:e0:9f:fb:3a:a8:
                    09:5b:c1:81:56:d3:f2:d5:14:af:bd:75:4a:95:d9:
                    58:6a:bb:d3:6b:bd:10:c0:55:d9:3b:eb:4e:f6:df:
                    c7:6b:28:59:42:90:2c:59:0e:03:e8:0c:8c:c2:34:
                    92:fa:f0:18:a0:f0:81:dd:cd:d8:85:f9:26:84:c1:
                    71:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5E:B5:47:0C:F5:E4:C4:F0:C3:A7:A7:C5:96:0F:01:52:3F:2A:B1
            X509v3 Authority Key Identifier:
                keyid:0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:35:47:a4:83:c7:79:ab:41:8b:5f:73:0c:1a:b4:48:ff:25:
         d5:4d:78:25:af:3b:05:57:dd:9f:7b:08:08:59:c7:30:4c:9c:
         f5:fd:6b:88:69:c2:cd:54:de:4e:0d:e8:05:78:25:bf:b5:09:
         81:d6:f2:5d:a6:49:c4:8a:69:fc:38:51:7a:aa:07:e6:37:2f:
         0c:71:d1:4e:3f:12:2a:ea:14:f1:90:7a:87:1d:26:e3:7f:58:
         53:d9:aa:3b:be:94:d5:94:d8:be:f2:7e:0a:c5:ee:40:e9:20:
         df:d6:cd:0b:61:c6:f4:63:12:56:38:54:c4:77:74:ca:9c:c3:
         b6:3f:fe:99:1b:ca:39:4c:d9:4a:44:75:ab:f4:1b:31:c6:6f:
         27:67:5e:ef:3e:29:03:d1:18:d2:9f:ab:b0:e8:2d:5b:85:27:
         d2:fd:e5:0c:d8:b6:08:97:74:64:64:e0:39:dd:60:6f:f5:de:
         e1:e4:19:6e:f7:2c:d3:90:07:bb:f3:11:d0:ec:a0:72:d1:4b:
         b7:32:15:46:dd:57:d7:d5:f9:1b:ec:a2:bc:0e:e8:e5:71:f5:
         a2:1c:70:ba:5b:d5:c4:dc:aa:53:1e:ab:fe:fb:c9:05:09:8a:
         5e:3b:2d:7b:d4:51:d2:3c:e7:84:44:c6:9b:a8:d6:e4:0b:da:
         df:34:8e:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ3OUExMTAvBgNVBAUTKDBEMkQ2RjMzMjlDNTZCRjZFOEY5NDFCREZEQTc0OTZE
QkUyNTMwRTUwHhcNMjYwMzAxMDgwMTE5WhcNMjYwMzA4MDgwMTE5WjAYMRYwFAYD
VQQDEw02OWEzZjI0Zi1lODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl0fWpd4c1DiOtTqgMoZpX4KLP15+QhBc7PXc2fChcUQQ3U90Ehx3RvCldKJk
ZtO2vtLcsi8hL1vydHtj2Pb55UxjVy3gNjby0lrURky93HFThPlVKlZXVPdftGpC
9E80/8B2veBa1HWoctlcjQenQ68IPfUNbG81E8eTt/D6xmSUxuX/jP6ZOghPVyoF
3NQdw/pQGGSX7jc4RUxhLH9eiTWf1fEDhUmG+O0gWb6iiHsWr3tD5BclMqT5v17C
4J/7OqgJW8GBVtPy1RSvvXVKldlYarvTa70QwFXZO+tO9t/HayhZQpAsWQ4D6AyM
wjSS+vAYoPCB3c3YhfkmhMFx0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVetUcM
9eTE8MOnp8WWDwFSPyqxMB8GA1UdIwQYMBaAFA0tbzMpxWv26PlBvf2nSW2+JTDl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDc5QS8yNEE0ODM4OEUz
NzkxMUVGQjQ2NjZCMzFDNEY5QUUwMi9EUzF2TXluRmFfYm8tVUc5X2FkSmJiNGxN
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0RTMXZNeW5GYV9iby1VRzlfYWRKYmI0bE1PVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDc5QS8yNEE0ODM4OEUzNzkxMUVGQjQ2NjZCMzFDNEY5QUUwMi9EUzF2TXluRmFf
Ym8tVUc5X2FkSmJiNGxNT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQTVHpIPHeatBi19zDBq0SP8l1U14Ja87BVfdn3sICFnHMEyc9f1riGnCzVTe
Tg3oBXglv7UJgdbyXaZJxIpp/DhReqoH5jcvDHHRTj8SKuoU8ZB6hx0m439YU9mq
O76U1ZTYvvJ+CsXuQOkg39bNC2HG9GMSVjhUxHd0ypzDtj/+mRvKOUzZSkR1q/Qb
McZvJ2de7z4pA9EY0p+rsOgtW4Un0v3lDNi2CJd0ZGTgOd1gb/Xe4eQZbvcs05AH
u/MR0OygctFLtzIVRt1X19X5G+yivA7o5XH1ohxwulvVxNyqUx6r/vvJBQmKXjst
e9RR0jznhETGm6jW5Ava3zSOOQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:52 2026 by rpki-client