Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
File:                     0X13ywyJuZTN2suidScKHnTcqic.mft (raw, json)
Hash identifier:          EznTPJfp3FdsNNw24AB8YIuD5j3M42nJfM7fZLkJjAk=
Subject key identifier:   EF:C3:08:C6:E5:FC:D1:74:85:9A:7A:76:8F:0A:6B:57:96:02:E2:69
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Certificate issuer:       /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial:       356F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
Manifest number:          353B
Signing time:             Mon 02 Mar 2026 02:06:53 +0000
Manifest this update:     Mon 02 Mar 2026 02:06:52 +0000
Manifest next update:     Mon 09 Mar 2026 02:06:52 +0000
Files and hashes:         1: 0X13ywyJuZTN2suidScKHnTcqic.crl (hash: Zv7WOQ3i/hltrzoQUQAouCMMm2C9lQSjMlQM/lCmKEw=)
                          2: 75AB676E747811EDA48E0D52C4F9AE02.roa (hash: WgXWHAaIOtzM5Xduzkgb83GHDBG9ZysSf4lZqq29oeQ=)
                          3: 76B90530747811EDA48E0D52C4F9AE02.roa (hash: EsDpNgLrhYg/FBS1knEjEBTDiX3/7RrrGMbwFcOSNcg=)
                          4: 11D961427C0311EBB2F8C86CC4F9AE02.roa (hash: CjO+8I3DQiWAPJtsp249rNJBqgAtu38CyLjJYCf1kgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
                          rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13679 (0x356f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
        Validity
            Not Before: Mar  2 02:06:52 2026 GMT
            Not After : Mar  9 02:06:52 2026 GMT
        Subject: CN=69a4f0bd-f0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:3f:a3:45:b1:9d:6b:54:5d:ec:d9:59:7a:
                    df:19:46:de:5a:8e:d1:a8:e2:c8:7d:b3:3f:1d:e1:
                    96:78:de:b0:83:e1:64:b8:24:97:14:d2:25:1a:65:
                    f1:74:a8:4e:8e:47:1d:ff:7b:18:7c:a8:ae:c3:7e:
                    54:20:ea:8f:dc:6e:0e:e4:f6:b2:7d:84:2a:bd:0f:
                    8a:a2:07:15:3c:f5:3b:2e:c5:80:df:11:85:04:90:
                    49:7e:80:c0:c6:1c:ff:65:fb:83:3e:23:bc:a2:d1:
                    88:13:2e:e2:73:e9:a0:e3:4d:ab:5d:9c:70:06:dd:
                    cd:e6:44:03:c6:26:75:89:75:74:4f:99:71:51:30:
                    46:a7:74:3e:de:64:e3:8e:dc:ae:65:59:e3:77:33:
                    10:7f:62:9d:de:9b:a6:42:00:76:6e:e7:a0:52:a1:
                    b2:0e:f2:96:08:0d:94:ae:a3:b8:4b:eb:bd:9a:6e:
                    9b:13:c5:9f:a9:22:fa:0a:60:77:86:e6:78:ed:07:
                    3c:01:7d:43:73:95:0e:5e:32:5e:91:47:0f:59:90:
                    67:00:70:dd:dd:5c:47:a6:a7:13:70:90:f8:fb:d4:
                    cf:b5:d0:85:bd:b1:6c:73:3a:ab:96:03:15:d4:54:
                    f7:06:38:c1:74:75:5c:76:d0:93:dc:f9:6b:76:4c:
                    57:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C3:08:C6:E5:FC:D1:74:85:9A:7A:76:8F:0A:6B:57:96:02:E2:69
            X509v3 Authority Key Identifier:
                keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e8:38:aa:af:66:09:a3:fe:dc:27:18:fb:7a:43:64:83:d7:
         ea:b4:e3:15:c7:7a:db:12:41:58:83:13:b4:b8:89:5f:eb:40:
         2c:05:cb:5f:47:d4:8f:7a:11:a3:4e:12:02:15:60:c3:6d:92:
         04:7b:b7:3b:4a:fb:4b:90:8a:b8:08:a1:a6:bf:b1:f6:ea:04:
         6c:1a:48:70:8c:04:2a:24:68:7a:2b:fa:10:04:1d:be:a0:85:
         22:d0:8d:51:4b:b2:7e:68:53:cb:bd:6c:d5:64:74:f2:ed:b0:
         0a:f5:42:71:f3:47:77:cd:6b:f9:52:52:6c:d1:70:e7:09:34:
         22:bf:88:c4:4c:e7:6b:ba:26:b6:eb:cf:6c:48:f8:a4:25:90:
         e3:ef:73:c7:f0:39:f2:04:e8:3c:40:85:10:c0:51:92:58:4f:
         6d:49:a2:cc:b5:3d:c8:52:91:e7:28:ed:80:84:55:b5:13:69:
         cd:d0:a0:b5:b7:71:eb:d8:72:e4:76:41:94:85:6e:10:c8:0f:
         97:c9:a2:2f:30:61:a5:fc:62:5e:d3:a4:3d:45:f2:9a:65:c9:
         37:6d:c0:1b:50:68:c0:83:81:5a:26:2e:8f:fd:b5:ed:94:08:
         bf:5b:2d:61:4b:d7:3e:14:3e:ab:6c:f5:3b:9d:9c:34:d4:f8:
         fc:c4:8e:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ5OUExMTAvBgNVBAUTKEQxN0Q3N0NCMEM4OUI5OTRDRERBQ0JBMjc1MjcwQTFF
NzREQ0FBMjcwHhcNMjYwMzAyMDIwNjUyWhcNMjYwMzA5MDIwNjUyWjAYMRYwFAYD
VQQDEw02OWE0ZjBiZC1mMGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyng/o0WxnWtUXezZWXrfGUbeWo7RqOLIfbM/HeGWeN6wg+FkuCSXFNIlGmXx
dKhOjkcd/3sYfKiuw35UIOqP3G4O5PayfYQqvQ+KogcVPPU7LsWA3xGFBJBJfoDA
xhz/ZfuDPiO8otGIEy7ic+mg402rXZxwBt3N5kQDxiZ1iXV0T5lxUTBGp3Q+3mTj
jtyuZVnjdzMQf2Kd3pumQgB2buegUqGyDvKWCA2UrqO4S+u9mm6bE8WfqSL6CmB3
huZ47Qc8AX1Dc5UOXjJekUcPWZBnAHDd3VxHpqcTcJD4+9TPtdCFvbFsczqrlgMV
1FT3BjjBdHVcdtCT3PlrdkxXXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/DCMbl
/NF0hZp6do8Ka1eWAuJpMB8GA1UdIwQYMBaAFNF9d8sMibmUzdrLonUnCh503Kon
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDk5QS8xNzg4MjJEQTFE
ODUxMUUyQTgyQTdDREIwOEIwMkNEMi8wWDEzeXd5SnVaVE4yc3VpZFNjS0huVGNx
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBYMTN5d3lKdVpUTjJzdWlkU2NLSG5UY3FpYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDk5QS8xNzg4MjJEQTFEODUxMUUyQTgyQTdDREIwOEIwMkNEMi8wWDEzeXd5SnVa
VE4yc3VpZFNjS0huVGNxaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu+g4qq9mCaP+3CcY+3pDZIPX6rTjFcd62xJBWIMTtLiJX+tALAXLX0fUj3oR
o04SAhVgw22SBHu3O0r7S5CKuAihpr+x9uoEbBpIcIwEKiRoeiv6EAQdvqCFItCN
UUuyfmhTy71s1WR08u2wCvVCcfNHd81r+VJSbNFw5wk0Ir+IxEzna7omtuvPbEj4
pCWQ4+9zx/A58gToPECFEMBRklhPbUmizLU9yFKR5yjtgIRVtRNpzdCgtbdx69hy
5HZBlIVuEMgPl8miLzBhpfxiXtOkPUXymmXJN23AG1BowIOBWiYuj/217ZQIv1st
YUvXPhQ+q2z1O52cNNT4/MSO0g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:46:08 2026 by rpki-client