Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
File:                     9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json)
Hash identifier:          O3nwLSbdmc/WC8yIT80RHwnuPdVjQiSBcOWy69Cti28=
Subject key identifier:   E0:8F:0C:D3:0F:71:A7:29:F5:60:44:56:34:4B:97:91:7D:12:74:CA
Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07
Certificate issuer:       /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
Manifest number:          0162
Signing time:             Sun 01 Mar 2026 05:52:54 +0000
Manifest this update:     Sun 01 Mar 2026 05:52:54 +0000
Manifest next update:     Sun 08 Mar 2026 05:52:54 +0000
Files and hashes:         1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: /ILp+BUIjPCZy0uolEWqrqGQphgtk5QbrbJsf5u/STA=)
                          2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: 1cTaBvBAhxFneEeGlAFuRr/tcaFQd3vN8aAkRfuybSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl
                          rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B4B5, serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707
        Validity
            Not Before: Mar  1 05:52:54 2026 GMT
            Not After : Mar  8 05:52:54 2026 GMT
        Subject: CN=69a3d436-9306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:bf:b9:a5:1d:94:d9:30:c3:2f:1d:45:10:
                    59:ed:d6:c8:b6:fe:b5:1f:63:42:e3:40:99:66:71:
                    8c:55:14:8a:4b:7e:d5:a9:34:6e:6c:1e:0a:06:c9:
                    13:b8:fb:38:87:71:2b:f8:db:b9:69:5f:ba:35:bf:
                    20:d1:f0:2d:25:18:0e:25:2d:3c:0b:9e:7c:cd:e5:
                    a5:49:30:57:c6:25:de:be:e0:9e:fd:e9:2b:a6:3d:
                    31:da:44:24:98:f0:1a:56:e9:8f:14:f2:ec:4f:78:
                    0c:49:8f:12:90:eb:5f:37:ec:78:3d:3a:6b:a8:fc:
                    27:c8:4f:7e:c6:f4:d2:b2:d5:dc:4a:c3:d5:40:e1:
                    00:a2:0b:5e:46:87:61:d1:83:a5:6e:5d:cc:81:e7:
                    e8:3e:83:56:76:bd:f5:45:64:cc:d0:3d:9c:6b:d0:
                    bf:e1:3f:73:13:bc:77:78:86:d5:6e:d9:6e:a2:05:
                    b3:9b:be:c1:35:3c:2b:ec:7b:2d:a9:2d:82:5c:de:
                    bf:19:ed:6d:81:32:43:8e:2b:af:0a:d6:d6:e2:66:
                    7c:37:77:65:14:bd:d3:c1:c3:a2:6d:7b:49:14:18:
                    34:bc:50:fa:e7:cb:8e:ba:1b:9a:20:30:8c:89:52:
                    a9:fc:33:12:aa:f6:a7:f8:ce:36:4d:69:31:1c:6e:
                    b2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8F:0C:D3:0F:71:A7:29:F5:60:44:56:34:4B:97:91:7D:12:74:CA
            X509v3 Authority Key Identifier:
                keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:37:5f:b1:70:13:ce:ee:4f:f6:87:cf:99:f8:f5:a1:cf:c4:
         32:fc:cd:a7:19:70:48:dc:82:10:96:82:bd:6e:99:51:de:49:
         e1:46:0c:bd:9b:96:9a:c6:9e:03:39:20:34:ff:bf:ed:a8:d1:
         5b:61:0a:12:13:61:b7:66:79:c3:66:32:73:49:51:47:69:e7:
         c2:59:2f:a5:4a:81:03:8a:db:7c:19:ac:f6:18:88:05:e4:4f:
         c7:3c:fc:ef:ac:54:69:aa:b6:e6:49:06:94:0f:35:78:68:f0:
         65:48:cd:99:ee:a8:bb:47:d2:93:a3:48:9d:bd:b2:65:5d:ba:
         e4:44:59:b2:6a:b8:f4:63:67:bb:40:eb:c7:8e:9a:09:7d:b3:
         80:e6:a8:73:59:e5:7a:99:1c:7d:04:87:e4:41:2f:0c:3f:8c:
         1b:4b:34:21:68:82:a6:be:bc:10:c5:19:b7:e7:b2:76:7f:84:
         07:d7:40:e6:63:f5:28:49:26:38:7d:28:33:8a:5e:3f:e9:aa:
         4c:52:0e:9f:92:ab:2a:48:d1:5e:c8:c6:bc:0d:d0:67:75:5c:
         24:43:82:0c:a6:e8:25:b9:b9:e3:2d:9d:83:e9:38:e2:b2:f4:
         3f:81:3f:97:4c:6d:3e:bd:41:b7:01:9c:84:39:7e:4e:85:27:
         2a:6d:5f:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI0QjUxMTAvBgNVBAUTKEY1RjFFMkRFQjMyNTU2MkIyMjg1RkY4QjVERTI1REYy
Q0FERjc3MDcwHhcNMjYwMzAxMDU1MjU0WhcNMjYwMzA4MDU1MjU0WjAYMRYwFAYD
VQQDEw02OWEzZDQzNi05MzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2A2/uaUdlNkwwy8dRRBZ7dbItv61H2NC40CZZnGMVRSKS37VqTRubB4KBskT
uPs4h3Er+Nu5aV+6Nb8g0fAtJRgOJS08C558zeWlSTBXxiXevuCe/ekrpj0x2kQk
mPAaVumPFPLsT3gMSY8SkOtfN+x4PTprqPwnyE9+xvTSstXcSsPVQOEAogteRodh
0YOlbl3MgefoPoNWdr31RWTM0D2ca9C/4T9zE7x3eIbVbtluogWzm77BNTwr7Hst
qS2CXN6/Ge1tgTJDjiuvCtbW4mZ8N3dlFL3TwcOibXtJFBg0vFD658uOuhuaIDCM
iVKp/DMSqvan+M42TWkxHG6yYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOCPDNMP
cacp9WBEVjRLl5F9EnTKMB8GA1UdIwQYMBaAFPXx4t6zJVYrIoX/i13iXfLK33cH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjRCNS80MENFOUYyQUYx
MzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZpc2loZi1MWGVKZDhzcmZk
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlmSGkzck1sVmlzaWhmLUxYZUpkOHNyZmR3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjRCNS80MENFOUYyQUYxMzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZp
c2loZi1MWGVKZDhzcmZkd2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkTdfsXATzu5P9ofPmfj1oc/EMvzNpxlwSNyCEJaCvW6ZUd5J4UYMvZuWmsae
AzkgNP+/7ajRW2EKEhNht2Z5w2Yyc0lRR2nnwlkvpUqBA4rbfBms9hiIBeRPxzz8
76xUaaq25kkGlA81eGjwZUjNme6ou0fSk6NInb2yZV265ERZsmq49GNnu0Drx46a
CX2zgOaoc1nlepkcfQSH5EEvDD+MG0s0IWiCpr68EMUZt+eydn+EB9dA5mP1KEkm
OH0oM4peP+mqTFIOn5KrKkjRXsjGvA3QZ3VcJEOCDKboJbm54y2dg+k44rL0P4E/
l0xtPr1BtwGchDl+ToUnKm1fHQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:12:50 2026 by rpki-client