Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
File:                     dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json)
Hash identifier:          4qzbOFGlid6+Xnw8gdwot6aYijO5SHWJCWqvRjXlPf8=
Subject key identifier:   7D:8E:7C:4A:01:85:FD:A9:8D:06:AE:0C:E7:EA:B9:27:57:CB:D3:0A
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Certificate issuer:       /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial:       0B03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
Manifest number:          09F4
Signing time:             Sun 01 Mar 2026 23:44:32 +0000
Manifest this update:     Sun 01 Mar 2026 23:44:30 +0000
Manifest next update:     Sun 08 Mar 2026 23:44:30 +0000
Files and hashes:         1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: U5FN7xqt0lr9u4A0cWfN6fCNvfcIyoLouSjZBPPLXAw=)
                          2: 61C70D36088411F1B1AFA7640E3D8C67.roa (hash: k6n/b8uPYd+AiCnOzUingvkJYhO7VLfxKO8V9R5dnkQ=)
                          3: E94D73BE291D11EF86792873C4F9AE02.roa (hash: 9cwwImpG0kuALXJSvuXgLEJYlcBpiuJBifGtYofo6Aw=)
                          4: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: lWUMp9J9+EEIyFVfamv9b+gDZejel22GgkvYFOZ8pJs=)
                          5: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: IDTH0cAlA2j29Quymic14S26EVLhL7W0jgxsTtfpz7w=)
                          6: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: WmHfkDZFO7wJF5fVRRjhSZ2MtLW2NAgEZ/oXceI0GSk=)
                          7: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: gsB9c0U2DntNM1+v6I/9WXimUYgEdXTJXViqGyC2AQ0=)
                          8: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: OrZ9Ea1QZaI1VDtqb0gOsdHCM2dKMi5dNl6ij8Rdp0E=)
                          9: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: 3jwm3MhqEfHhfN91jF6LuuUMLkdpp4+mtNlcLdp031I=)
                          10: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: QW6uZWXeGB+Eizq4SwIGwFff/Y27AeGTfhmNqMCDG9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
                          rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2819 (0xb03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
        Validity
            Not Before: Mar  1 23:44:30 2026 GMT
            Not After : Mar  8 23:44:30 2026 GMT
        Subject: CN=69a4cf60-fcb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:04:5a:75:8a:d2:5b:06:38:84:51:84:5f:
                    de:8f:4f:85:da:9d:87:c6:ad:7d:f3:37:23:93:dc:
                    39:50:e8:53:bc:b0:4d:e3:9a:53:58:24:68:bd:43:
                    51:16:ad:0b:28:05:88:16:77:99:cc:01:39:13:41:
                    8c:5b:eb:28:95:a8:be:73:55:05:8f:4d:59:9e:4e:
                    29:47:01:24:16:dd:c9:e6:62:b7:42:e6:ef:11:c7:
                    ce:ba:36:a9:c9:ff:d3:5d:5a:7e:04:a6:07:84:55:
                    a1:8f:02:4d:1c:f4:aa:9e:8d:a9:0a:38:7e:f4:d2:
                    24:bd:90:17:60:fc:cb:e0:5f:51:1f:b9:ad:78:ef:
                    24:4b:06:90:8e:eb:63:16:db:d3:71:e4:09:da:44:
                    1c:11:ba:db:17:25:b9:2f:a5:c9:a6:f2:35:a6:b3:
                    0a:82:24:81:83:c8:5c:b6:2f:ac:20:3a:e2:99:a4:
                    fa:6d:9e:c4:46:3d:4c:3a:f6:c7:3d:b6:d2:91:64:
                    c6:bc:8d:7b:6e:15:91:cb:8b:4f:c3:ce:f7:a6:3a:
                    f1:a7:b8:b7:4d:42:4c:d7:89:19:78:38:e9:71:78:
                    44:b0:1f:b0:81:c6:c7:50:66:77:fc:62:61:7d:bc:
                    8b:82:bf:ea:6b:28:fb:4e:0f:60:cb:d4:a1:d6:b2:
                    95:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8E:7C:4A:01:85:FD:A9:8D:06:AE:0C:E7:EA:B9:27:57:CB:D3:0A
            X509v3 Authority Key Identifier:
                keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:90:c4:88:2d:ec:bd:df:bc:c1:bf:b7:03:a8:67:33:26:44:
         c7:9b:c0:5c:22:8c:ea:78:76:e1:3b:c2:b8:a7:ad:c2:76:4f:
         8c:ed:89:d6:d6:90:fe:9f:44:b3:44:b6:f2:42:4d:a2:a7:ef:
         b3:80:50:2e:98:e6:3d:28:16:7e:e7:2e:72:95:99:fa:e9:4b:
         79:ab:cd:1d:68:14:4c:4b:0b:5c:c1:e7:2e:d7:b6:f5:d1:fb:
         df:ee:36:10:15:c8:fd:70:1e:82:24:7a:4b:bf:9b:b3:9e:80:
         3a:09:d2:25:d4:82:0a:bb:b1:26:10:b4:08:41:8f:89:74:45:
         05:f8:a9:57:7e:9a:ce:73:ad:f3:9f:94:d4:76:58:52:85:d8:
         74:84:e2:75:2b:f5:d7:fd:4b:2f:c0:b5:f9:cd:d6:46:57:91:
         91:ae:54:79:8f:45:1d:0d:9f:0a:d5:f1:00:05:60:92:64:79:
         c8:a3:10:98:2f:28:d8:55:d9:b0:de:be:37:90:bf:8f:56:44:
         20:41:c4:14:7b:cd:cb:63:5e:b2:f9:ea:d0:e2:a9:7a:97:68:
         fb:18:85:00:5c:a0:4a:16:c1:de:90:39:ac:93:c7:37:f5:e4:
         ea:ac:6f:30:82:87:7b:f1:80:ae:08:5e:d2:bf:aa:3b:c6:bf:
         5d:4b:8c:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0
QkM3OTczQjEwHhcNMjYwMzAxMjM0NDMwWhcNMjYwMzA4MjM0NDMwWjAYMRYwFAYD
VQQDEw02OWE0Y2Y2MC1mY2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApM0EWnWK0lsGOIRRhF/ej0+F2p2Hxq198zcjk9w5UOhTvLBN45pTWCRovUNR
Fq0LKAWIFneZzAE5E0GMW+solai+c1UFj01Znk4pRwEkFt3J5mK3QubvEcfOujap
yf/TXVp+BKYHhFWhjwJNHPSqno2pCjh+9NIkvZAXYPzL4F9RH7mteO8kSwaQjutj
FtvTceQJ2kQcEbrbFyW5L6XJpvI1prMKgiSBg8hcti+sIDrimaT6bZ7ERj1MOvbH
PbbSkWTGvI17bhWRy4tPw873pjrxp7i3TUJM14kZeDjpcXhEsB+wgcbHUGZ3/GJh
fbyLgr/qayj7Tg9gy9Sh1rKVZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH2OfEoB
hf2pjQauDOfquSdXy9MKMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB
MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTQ3NS9EQTgzQUE3QUNBMTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhS
Y2VCU1ViTWVLVXBMeDVjN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm5DEiC3svd+8wb+3A6hnMyZEx5vAXCKM6nh24TvCuKetwnZPjO2J1taQ/p9E
s0S28kJNoqfvs4BQLpjmPSgWfucucpWZ+ulLeavNHWgUTEsLXMHnLte29dH73+42
EBXI/XAegiR6S7+bs56AOgnSJdSCCruxJhC0CEGPiXRFBfipV36aznOt85+U1HZY
UoXYdITidSv11/1LL8C1+c3WRleRka5UeY9FHQ2fCtXxAAVgkmR5yKMQmC8o2FXZ
sN6+N5C/j1ZEIEHEFHvNy2Nesvnq0OKpepdo+xiFAFygShbB3pA5rJPHN/Xk6qxv
MIKHe/GArghe0r+qO8a/XUuM7A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:39 2026 by rpki-client