Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
File:                     tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json)
Hash identifier:          XRNEc27IpMVmoZDS+O9eQx45CiMbWv4LP7fjjxdUP9o=
Subject key identifier:   F2:14:A5:B0:11:41:67:62:5E:58:79:63:C3:3A:9D:A4:6B:08:E9:87
Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55
Certificate issuer:       /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155
Certificate serial:       0BA8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
Manifest number:          0B9D
Signing time:             Mon 02 Mar 2026 18:57:14 +0000
Manifest this update:     Mon 02 Mar 2026 18:57:14 +0000
Manifest next update:     Mon 09 Mar 2026 18:57:14 +0000
Files and hashes:         1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: lapAiggXbMyowBn9BAU/zEQOldPOM4LPGpI+H+Qq6KQ=)
                          2: 741645EE422211EA937BB919C4F9AE02.roa (hash: HwPx0vPg1VtGRQbAWOwpU/WcG4J7vax6C4J9fWBN2DQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl
                          rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 18:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2984 (0xba8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155
        Validity
            Not Before: Mar  2 18:57:14 2026 GMT
            Not After : Mar  9 18:57:14 2026 GMT
        Subject: CN=69a5dd8a-8c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:36:61:7d:b2:5c:d0:99:a7:1d:ad:75:ad:f5:
                    08:29:5e:06:e5:22:5c:84:cd:33:f7:dc:0a:a1:14:
                    56:0c:56:5b:08:e5:7d:40:98:4e:ea:32:58:e7:f7:
                    bd:9c:97:dd:8a:67:8b:19:18:32:cd:e6:3f:be:91:
                    cd:59:2b:45:4e:40:45:84:c8:f4:89:4e:f8:ca:9c:
                    f2:f3:48:e0:f5:c0:df:6d:4b:88:c3:a6:68:3a:a4:
                    c2:03:d9:dc:47:7f:d2:c5:9d:47:d6:0c:8b:27:9e:
                    da:e4:9a:46:be:4d:aa:5c:bd:8b:5d:a4:ca:9f:39:
                    66:f4:f4:ec:42:75:2f:ac:14:a0:4a:00:f3:e8:5c:
                    67:60:cc:10:ae:4e:3e:66:2e:4d:a6:b1:97:04:09:
                    5f:68:21:48:27:20:2a:3b:b5:be:7c:1f:97:ab:15:
                    e0:38:3b:af:52:c6:95:06:2b:07:e9:28:3d:e3:03:
                    50:97:db:73:f5:0b:b7:15:ac:72:03:5d:af:b9:f1:
                    11:8c:dd:14:a3:f7:c1:80:4a:f4:5d:4e:37:58:44:
                    da:b8:39:f4:1c:3a:ec:a8:92:e1:d4:6c:6e:fd:57:
                    88:0f:6f:29:15:97:52:a6:56:6c:1a:a5:12:f1:3d:
                    9d:81:c0:a0:9e:33:d5:55:e9:d9:72:bf:ae:3a:13:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:14:A5:B0:11:41:67:62:5E:58:79:63:C3:3A:9D:A4:6B:08:E9:87
            X509v3 Authority Key Identifier:
                keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f5:a3:52:2d:ef:e7:30:5f:db:b2:78:08:e6:ab:67:5a:cd:
         f2:af:80:c0:d0:96:4a:6f:da:a6:2f:43:5d:a5:dc:7e:71:c3:
         2b:eb:33:72:f3:4e:17:09:9e:ee:7e:8e:c3:ce:5e:79:d0:d1:
         3d:26:2f:6b:d5:06:ef:a6:40:96:53:aa:ea:0d:a1:59:56:b8:
         af:51:89:36:5f:40:61:b9:64:8b:c3:08:a0:86:11:b1:79:68:
         42:3a:8e:9e:d2:2f:5d:f7:ff:74:c1:3e:4f:82:3a:65:6e:7d:
         87:76:7e:be:92:4c:a5:2c:21:1e:bf:e4:31:8e:4f:57:a0:d6:
         d2:50:72:50:fc:48:d8:de:c1:81:d4:5a:cd:0b:d0:e9:96:b9:
         0c:81:17:62:96:9f:90:78:07:6c:51:49:a9:72:61:77:f0:6e:
         df:58:77:a1:2e:25:cf:2d:5d:5c:c2:a5:6d:11:9a:3f:b1:96:
         e2:dc:20:ec:ca:49:fa:a6:07:54:0b:11:c5:ff:39:12:43:74:
         49:d6:8c:5e:ce:f0:7f:5a:f4:5c:9c:f1:30:11:de:0d:0a:83:
         aa:41:94:b6:cf:28:12:0b:f5:29:c1:46:c2:45:b5:25:c4:f9:
         ed:a4:24:12:e4:f6:04:84:9d:da:6d:e2:5f:5a:74:2d:87:dc:
         26:94:5c:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3
Mzg1NzMxNTUwHhcNMjYwMzAyMTg1NzE0WhcNMjYwMzA5MTg1NzE0WjAYMRYwFAYD
VQQDEw02OWE1ZGQ4YS04YzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9zZhfbJc0JmnHa11rfUIKV4G5SJchM0z99wKoRRWDFZbCOV9QJhO6jJY5/e9
nJfdimeLGRgyzeY/vpHNWStFTkBFhMj0iU74ypzy80jg9cDfbUuIw6ZoOqTCA9nc
R3/SxZ1H1gyLJ57a5JpGvk2qXL2LXaTKnzlm9PTsQnUvrBSgSgDz6FxnYMwQrk4+
Zi5NprGXBAlfaCFIJyAqO7W+fB+XqxXgODuvUsaVBisH6Sg94wNQl9tz9Qu3Faxy
A12vufERjN0Uo/fBgEr0XU43WETauDn0HDrsqJLh1Gxu/VeID28pFZdSplZsGqUS
8T2dgcCgnjPVVenZcr+uOhM0lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPIUpbAR
QWdiXlh5Y8M6naRrCOmHMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy
MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN
VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0
RkdIM2pxaG5MeU56aFhNVlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMfWjUi3v5zBf27J4COarZ1rN8q+AwNCWSm/api9DXaXcfnHDK+szcvNOFwme
7n6Ow85eedDRPSYva9UG76ZAllOq6g2hWVa4r1GJNl9AYblki8MIoIYRsXloQjqO
ntIvXff/dME+T4I6ZW59h3Z+vpJMpSwhHr/kMY5PV6DW0lByUPxI2N7BgdRazQvQ
6Za5DIEXYpafkHgHbFFJqXJhd/Bu31h3oS4lzy1dXMKlbRGaP7GW4twg7MpJ+qYH
VAsRxf85EkN0SdaMXs7wf1r0XJzxMBHeDQqDqkGUts8oEgv1KcFGwkW1JcT57aQk
EuT2BISd2m3iX1p0LYfcJpRcBA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:17 2026 by rpki-client