Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
File:                     b09GjkMIsA0N9f6shChm1U539dM.mft (raw, json)
Hash identifier:          6T+WUaY1W3TihGL0y02s45FiGElzlc+0/15O9xrRMt8=
Subject key identifier:   30:92:83:DF:11:05:C5:C3:ED:13:F1:AE:36:05:65:47:3D:80:E9:5E
Authority key identifier: 6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3
Certificate issuer:       /CN=A915D1A2/serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
Certificate serial:       0CFE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
Manifest number:          0CE4
Signing time:             Sat 28 Feb 2026 18:28:26 +0000
Manifest this update:     Sat 28 Feb 2026 18:28:25 +0000
Manifest next update:     Sat 07 Mar 2026 18:28:25 +0000
Files and hashes:         1: b09GjkMIsA0N9f6shChm1U539dM.crl (hash: dkDbMtfIjhH1dTKhEbz9c/laOU1u3CkigK6De1+X4So=)
                          2: 38360112C3EB11F080C9980DC4F9AE02.roa (hash: XqYyZyrqJ9BamfB85dIngxi60ilbd+EHlah+RvSpOvo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl
                          rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3326 (0xcfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D1A2, serialNumber=6F4F468E4308B00D0DF5FEAC842866D54E77F5D3
        Validity
            Not Before: Feb 28 18:28:25 2026 GMT
            Not After : Mar  7 18:28:25 2026 GMT
        Subject: CN=69a333c9-e0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:e2:19:c0:98:96:bb:3e:ee:e0:8d:71:2c:
                    e6:ee:91:30:04:e3:07:9f:18:f8:66:4c:45:6b:9c:
                    94:8c:0a:65:70:a9:8d:1b:68:3b:47:ef:c8:2f:fb:
                    55:ce:c7:57:f3:14:c8:84:07:0f:23:b4:ba:5b:44:
                    a4:0e:f7:49:fa:b7:da:f0:52:fc:e4:02:7e:91:51:
                    2b:66:f6:d4:69:a4:9d:03:63:33:25:e3:df:bb:70:
                    3c:d3:8f:44:de:73:73:6a:95:ff:78:5c:e4:74:41:
                    6e:c7:34:49:0e:ea:42:77:2e:9b:84:f3:3b:aa:16:
                    2f:43:15:e0:82:01:2a:15:d4:de:11:37:2b:68:73:
                    21:aa:a8:bc:fe:d7:e1:b2:7f:68:2b:89:18:7e:c7:
                    bd:22:62:1c:e6:0d:eb:10:df:7d:2a:a7:ab:87:6d:
                    a0:38:9d:d2:77:8d:ad:77:0e:86:76:fd:35:a3:bb:
                    14:af:11:0b:52:d0:12:28:ae:4b:44:64:c0:32:c5:
                    63:29:74:af:34:94:95:ad:8c:35:b4:21:f8:10:34:
                    75:f4:6f:de:7d:e4:cf:a6:c6:8a:d9:57:d1:09:3a:
                    74:28:a2:87:1d:df:1e:b8:cc:e1:b5:10:ea:1d:bc:
                    38:00:75:da:34:7e:0a:ec:ea:e0:da:6f:91:bc:10:
                    20:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:92:83:DF:11:05:C5:C3:ED:13:F1:AE:36:05:65:47:3D:80:E9:5E
            X509v3 Authority Key Identifier:
                keyid:6F:4F:46:8E:43:08:B0:0D:0D:F5:FE:AC:84:28:66:D5:4E:77:F5:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b09GjkMIsA0N9f6shChm1U539dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1A2/DFD11F2806A611EA8975E341C4F9AE02/b09GjkMIsA0N9f6shChm1U539dM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4a:36:f5:2a:b3:2c:84:e3:c4:ef:d5:97:7c:dd:d2:dc:66:
         aa:d8:86:6e:11:25:c3:3f:a3:0b:91:5f:fd:10:6c:96:54:4b:
         e9:50:c3:cf:f5:bd:9e:c6:fa:5f:d6:f2:70:23:a7:18:db:12:
         b9:04:b7:ee:ea:74:00:b3:6b:b7:08:5d:ed:30:f2:2b:fa:e0:
         57:73:12:7c:ae:5e:20:75:41:bf:56:49:86:9c:0d:0e:ae:02:
         30:ba:e8:27:c7:df:39:20:8a:95:a8:23:1b:37:ec:53:d3:02:
         b5:52:64:32:19:d3:04:ec:5b:57:cd:28:30:a6:c5:0d:c2:d6:
         86:98:4a:37:40:02:ad:dd:cb:94:e3:e5:6a:63:04:ae:42:7c:
         e6:61:ae:57:16:13:d5:74:47:10:bf:12:45:fa:9a:94:1b:bd:
         6c:91:12:8f:5e:0f:f7:28:31:4d:28:2d:de:29:6d:17:de:ff:
         57:5c:40:dd:33:ab:53:f5:2e:92:a8:64:cb:55:d6:0d:55:1b:
         17:ea:85:93:d3:a4:b0:02:6e:af:fe:48:8a:3e:a3:63:84:8d:
         e4:cc:b6:38:e9:b5:f1:57:ae:e7:6c:e0:df:8a:7b:dc:d8:dc:
         25:7b:4d:57:34:51:05:67:22:b2:27:5f:58:db:59:e1:43:dd:
         6f:f6:e8:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQxQTIxMTAvBgNVBAUTKDZGNEY0NjhFNDMwOEIwMEQwREY1RkVBQzg0Mjg2NkQ1
NEU3N0Y1RDMwHhcNMjYwMjI4MTgyODI1WhcNMjYwMzA3MTgyODI1WjAYMRYwFAYD
VQQDDA02OWEzMzNjOS1lMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk/jiGcCYlrs+7uCNcSzm7pEwBOMHnxj4ZkxFa5yUjAplcKmNG2g7R+/IL/tV
zsdX8xTIhAcPI7S6W0SkDvdJ+rfa8FL85AJ+kVErZvbUaaSdA2MzJePfu3A8049E
3nNzapX/eFzkdEFuxzRJDupCdy6bhPM7qhYvQxXgggEqFdTeETcraHMhqqi8/tfh
sn9oK4kYfse9ImIc5g3rEN99Kqerh22gOJ3Sd42tdw6Gdv01o7sUrxELUtASKK5L
RGTAMsVjKXSvNJSVrYw1tCH4EDR19G/efeTPpsaK2VfRCTp0KKKHHd8euMzhtRDq
Hbw4AHXaNH4K7Org2m+RvBAg9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCSg98R
BcXD7RPxrjYFZUc9gOleMB8GA1UdIwQYMBaAFG9PRo5DCLANDfX+rIQoZtVOd/XT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFBMi9ERkQxMUYyODA2
QTYxMUVBODk3NUUzNDFDNEY5QUUwMi9iMDlHamtNSXNBME45ZjZzaENobTFVNTM5
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2IwOUdqa01Jc0EwTjlmNnNoQ2htMVU1MzlkTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDFBMi9ERkQxMUYyODA2QTYxMUVBODk3NUUzNDFDNEY5QUUwMi9iMDlHamtNSXNB
ME45ZjZzaENobTFVNTM5ZE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX0o29SqzLITjxO/Vl3zd0txmqtiGbhElwz+jC5Ff/RBsllRL6VDDz/W9nsb6
X9bycCOnGNsSuQS37up0ALNrtwhd7TDyK/rgV3MSfK5eIHVBv1ZJhpwNDq4CMLro
J8ffOSCKlagjGzfsU9MCtVJkMhnTBOxbV80oMKbFDcLWhphKN0ACrd3LlOPlamME
rkJ85mGuVxYT1XRHEL8SRfqalBu9bJESj14P9ygxTSgt3iltF97/V1xA3TOrU/Uu
kqhky1XWDVUbF+qFk9OksAJur/5Iij6jY4SN5My2OOm18Veu52zg34p73NjcJXtN
VzRRBWcisidfWNtZ4UPdb/boKg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:24 2026 by rpki-client