Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
File:                     07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json)
Hash identifier:          btS7T32ReV0vgdRl4x2ESx4EcjO2d9j0YJdWJiZKE90=
Subject key identifier:   97:87:28:6B:29:7D:4E:C9:DF:38:AB:AA:B5:9E:CE:32:A5:22:A7:4E
Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
Certificate issuer:       /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
Certificate serial:       0246
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
Manifest number:          023D
Signing time:             Sun 01 Mar 2026 03:16:32 +0000
Manifest this update:     Sun 01 Mar 2026 03:16:31 +0000
Manifest next update:     Sun 08 Mar 2026 03:16:31 +0000
Files and hashes:         1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: 8z0oAbTQm+OAmvEoaIPl65nSYq986BuAQC3EEdSwBLA=)
                          2: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: aznEv1ue4P4FRGApWtrIE4SCDK7fV07a0W+rY73Srwk=)
                          3: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: mmPuGMU6n5jdOwl+AFIn0Jlj0MhquQJws9sy6vEXlD0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl
                          rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
        Validity
            Not Before: Mar  1 03:16:31 2026 GMT
            Not After : Mar  8 03:16:31 2026 GMT
        Subject: CN=69a3af8f-e011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:01:89:71:3e:b0:d0:d7:5f:97:55:99:50:
                    04:00:72:a6:f2:8c:ef:a0:9c:2d:e7:b5:f4:52:0f:
                    77:1f:3a:46:ea:3d:ce:4c:da:f6:0f:83:67:72:e0:
                    2e:84:7c:c4:f2:97:a1:96:14:41:0c:66:8e:4e:96:
                    1b:66:d6:60:ab:7f:81:c2:ab:44:48:7e:f9:92:55:
                    d0:76:8b:a1:ef:3e:ad:b1:4a:d8:70:b6:88:d3:4b:
                    2f:51:c0:be:f9:58:81:eb:78:e1:ed:69:a7:50:7e:
                    bf:aa:3a:31:56:e4:10:c0:7e:f2:da:e7:b7:e7:02:
                    e1:42:17:0e:60:78:db:85:22:f7:77:7f:fa:3b:07:
                    4b:b1:ca:05:d2:23:16:8d:a1:f8:84:9a:ae:f1:d0:
                    b1:e1:67:51:07:8c:d8:e2:18:8c:9c:16:56:e5:b9:
                    42:c0:ac:95:03:4c:00:12:8b:c9:de:15:d9:17:38:
                    f6:a3:83:cb:13:54:25:dd:d0:10:e0:60:12:1a:27:
                    ca:3f:e3:6c:e2:70:08:53:ae:35:43:54:4e:e3:f8:
                    1b:3f:b4:6d:81:60:fd:89:63:c4:28:1d:df:14:77:
                    e4:55:46:e4:f1:7e:85:4e:89:a8:8b:5c:ab:ff:5f:
                    d7:ed:31:38:62:3f:02:ba:36:8f:d3:a3:1a:dd:96:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:87:28:6B:29:7D:4E:C9:DF:38:AB:AA:B5:9E:CE:32:A5:22:A7:4E
            X509v3 Authority Key Identifier:
                keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:b3:7a:16:c3:41:93:cc:15:7a:16:4b:55:a4:f6:9c:ac:26:
         55:47:e7:9e:5c:79:fa:36:44:cc:3b:88:aa:45:7b:fb:d4:93:
         e5:d0:d7:c5:0b:ae:f1:c0:cf:bc:d3:af:1e:23:96:9c:64:52:
         8b:a7:e0:09:57:1e:d0:aa:9b:65:3e:1c:5e:fa:24:4d:da:14:
         f0:ee:aa:fc:af:e3:6d:9e:99:9c:6c:07:2e:a3:70:4c:4d:d3:
         f4:a5:08:2d:e8:76:4b:7e:a4:6c:c8:97:6e:f0:09:88:53:b1:
         67:a3:d5:62:66:35:22:97:08:0b:22:21:43:f1:f6:64:74:41:
         71:1f:95:76:e0:97:d2:d3:38:ca:48:a8:69:4e:45:7e:a0:53:
         da:66:ed:4b:31:45:c6:8a:97:c8:df:f5:cc:c1:11:f4:6b:e5:
         64:67:db:22:e9:8d:48:bc:24:22:21:2d:00:77:28:16:5c:65:
         25:ff:5c:c1:2e:e3:a6:01:b3:77:e5:df:90:c5:79:a6:31:c4:
         9a:a2:6a:8e:cf:13:dc:b0:09:61:1c:88:a5:fd:30:06:f0:d6:
         43:34:ed:78:6c:65:62:e5:ff:41:24:d8:79:5e:87:a6:bb:3a:
         ef:68:1d:df:33:92:59:4a:1d:d6:4c:0e:92:5f:60:18:1a:e0:
         1a:81:45:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTVBNzkxMTAvBgNVBAUTKEQzQkIwQUZGMTk1OUUwMjkyNkM3Mzc1NDhBN0NCRTQx
MERCOTA5NkIwHhcNMjYwMzAxMDMxNjMxWhcNMjYwMzA4MDMxNjMxWjAYMRYwFAYD
VQQDDA02OWEzYWY4Zi1lMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqxMBiXE+sNDXX5dVmVAEAHKm8ozvoJwt57X0Ug93HzpG6j3OTNr2D4NncuAu
hHzE8pehlhRBDGaOTpYbZtZgq3+BwqtESH75klXQdouh7z6tsUrYcLaI00svUcC+
+ViB63jh7WmnUH6/qjoxVuQQwH7y2ue35wLhQhcOYHjbhSL3d3/6OwdLscoF0iMW
jaH4hJqu8dCx4WdRB4zY4hiMnBZW5blCwKyVA0wAEovJ3hXZFzj2o4PLE1Ql3dAQ
4GASGifKP+Ns4nAIU641Q1RO4/gbP7RtgWD9iWPEKB3fFHfkVUbk8X6FTomoi1yr
/1/X7TE4Yj8CujaP06Ma3ZYZrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJeHKGsp
fU7J3zirqrWezjKlIqdOMB8GA1UdIwQYMBaAFNO7Cv8ZWeApJsc3VIp8vkENuQlr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE3OS8xQjVDMUY0MEIw
RjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRDa214emRVaW55LVFRMjVD
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA3c0tfeGxaNENrbXh6ZFVpbnktUVEyNUNXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NUE3OS8xQjVDMUY0MEIwRjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRD
a214emRVaW55LVFRMjVDV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1LN6FsNBk8wVehZLVaT2nKwmVUfnnlx5+jZEzDuIqkV7+9ST5dDXxQuu8cDP
vNOvHiOWnGRSi6fgCVce0KqbZT4cXvokTdoU8O6q/K/jbZ6ZnGwHLqNwTE3T9KUI
Leh2S36kbMiXbvAJiFOxZ6PVYmY1IpcICyIhQ/H2ZHRBcR+VduCX0tM4ykioaU5F
fqBT2mbtSzFFxoqXyN/1zMER9GvlZGfbIumNSLwkIiEtAHcoFlxlJf9cwS7jpgGz
d+XfkMV5pjHEmqJqjs8T3LAJYRyIpf0wBvDWQzTteGxlYuX/QSTYeV6Hprs672gd
3zOSWUod1kwOkl9gGBrgGoFFww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:55 2026 by rpki-client