Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
File:                     1fozYzT5muNj6lhn0o6KUCMeQiA.mft (raw, json)
Hash identifier:          sZF48Ktu7gnLizdSjkWcBAyYawar6kycERaWnOcaPas=
Subject key identifier:   E0:B3:18:0A:1D:08:EB:7F:74:E9:2E:9B:28:1B:67:E1:62:D1:EB:64
Authority key identifier: D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20
Certificate issuer:       /CN=A915F2B8/serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220
Certificate serial:       022A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
Manifest number:          0226
Signing time:             Mon 02 Mar 2026 02:04:05 +0000
Manifest this update:     Mon 02 Mar 2026 02:04:03 +0000
Manifest next update:     Mon 09 Mar 2026 02:04:03 +0000
Files and hashes:         1: 1fozYzT5muNj6lhn0o6KUCMeQiA.crl (hash: oJWjDJDFS01A4PrAqDmyLKhYmS7tahxG+LKkF/4Ipjw=)
                          2: 207C45B0CC2F11EDABE25F72C4F9AE02.roa (hash: OmMxdAPnBhZTGqQOr8JuZaqqyL1RNUDNSiTMUXir/l4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl
                          rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F2B8, serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220
        Validity
            Not Before: Mar  2 02:04:03 2026 GMT
            Not After : Mar  9 02:04:03 2026 GMT
        Subject: CN=69a4f014-c511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:d9:3a:0d:b0:51:b9:38:3f:36:46:c3:65:
                    8d:20:cb:97:29:a5:90:b8:87:cc:65:9c:42:04:1a:
                    be:87:1a:8b:fe:9b:b7:ac:fb:5c:d0:9e:8a:d3:22:
                    db:c7:c9:66:67:de:81:c2:55:33:fd:50:5c:9c:e1:
                    87:0d:c3:24:74:90:95:4e:9e:f7:89:90:27:44:e7:
                    67:11:ae:b6:4b:d6:48:56:cd:e5:9c:27:f1:89:87:
                    ad:77:1a:f9:68:b0:d0:77:f8:f1:54:57:49:00:75:
                    08:7a:cd:96:20:bd:11:39:0f:b1:eb:95:da:93:db:
                    b8:76:43:5f:fc:dd:63:29:43:b7:82:7a:e3:5a:f6:
                    c9:50:56:dd:bf:e9:95:98:0e:d6:c6:20:f5:e3:ba:
                    01:9c:fc:77:5a:91:10:58:71:a3:b4:6b:1d:71:c4:
                    75:35:73:1f:96:1f:85:8b:bf:29:1e:48:14:cd:f1:
                    26:cb:d1:b7:30:f2:e4:a5:2b:89:e8:2d:c9:a5:b6:
                    47:8d:96:bd:94:66:d2:e4:2f:bc:b5:45:87:32:aa:
                    75:3c:63:bf:62:fc:d3:6f:2e:9e:1e:35:60:97:5a:
                    c0:9e:3a:88:8b:b8:52:0a:8f:32:37:07:98:06:18:
                    b8:54:47:21:11:97:63:31:cc:f0:a4:cf:54:22:ee:
                    6b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B3:18:0A:1D:08:EB:7F:74:E9:2E:9B:28:1B:67:E1:62:D1:EB:64
            X509v3 Authority Key Identifier:
                keyid:D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:02:4b:37:6e:9a:65:a7:fc:fb:c2:a3:0a:fa:e9:32:9c:07:
         50:c2:63:06:4c:af:e1:1b:df:47:ae:c1:f8:be:6c:67:27:a9:
         0f:9e:a4:0b:29:31:90:46:9e:bb:2d:9b:f4:76:57:c5:28:76:
         a6:a4:7b:f5:ed:64:14:a6:3e:28:88:72:f5:e2:69:49:59:99:
         fd:d2:91:81:9d:5b:37:eb:38:d5:71:15:3b:03:dc:77:f7:1a:
         86:fb:07:a9:fc:b5:c4:8c:c8:f5:a5:8a:5a:6e:d9:11:ef:ab:
         fb:a7:e9:ec:7b:cf:6d:ef:b3:95:55:06:08:0e:ac:51:ae:2f:
         b4:f7:cb:76:57:7b:21:7c:15:44:46:08:e0:13:52:57:b5:1f:
         75:9c:8e:1f:c8:ab:ec:0c:20:50:2c:94:b3:47:fa:bf:57:80:
         96:d2:c1:a3:98:e1:26:69:e8:a3:d3:e9:b7:f0:22:6e:62:5f:
         34:80:5d:0e:44:d7:1a:dc:a4:0f:8a:97:c5:3a:5a:05:4a:e0:
         d6:ec:b8:0b:c2:40:12:15:7c:00:20:81:80:58:6a:2d:77:61:
         f3:7e:5e:13:16:2b:de:1f:31:7f:8a:17:2d:18:8f:dc:06:ac:
         c0:7f:a2:99:fe:58:5f:3a:0f:34:98:e7:bd:cc:4c:74:61:8d:
         65:41:bd:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUYyQjgxMTAvBgNVBAUTKEQ1RkEzMzYzMzRGOTlBRTM2M0VBNTg2N0QyOEU4QTUw
MjMxRTQyMjAwHhcNMjYwMzAyMDIwNDAzWhcNMjYwMzA5MDIwNDAzWjAYMRYwFAYD
VQQDEw02OWE0ZjAxNC1jNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu5bZOg2wUbk4PzZGw2WNIMuXKaWQuIfMZZxCBBq+hxqL/pu3rPtc0J6K0yLb
x8lmZ96BwlUz/VBcnOGHDcMkdJCVTp73iZAnROdnEa62S9ZIVs3lnCfxiYetdxr5
aLDQd/jxVFdJAHUIes2WIL0ROQ+x65Xak9u4dkNf/N1jKUO3gnrjWvbJUFbdv+mV
mA7WxiD147oBnPx3WpEQWHGjtGsdccR1NXMflh+Fi78pHkgUzfEmy9G3MPLkpSuJ
6C3JpbZHjZa9lGbS5C+8tUWHMqp1PGO/YvzTby6eHjVgl1rAnjqIi7hSCo8yNweY
Bhi4VEchEZdjMczwpM9UIu5rnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOCzGAod
COt/dOkumygbZ+Fi0etkMB8GA1UdIwQYMBaAFNX6M2M0+ZrjY+pYZ9KOilAjHkIg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjJCOC8yRjE3NjA4QUND
MkMxMUVEQjk4NjA1NzFDNEY5QUUwMi8xZm96WXpUNW11Tmo2bGhuMG82S1VDTWVR
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFmb3pZelQ1bXVOajZsaG4wbzZLVUNNZVFpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjJCOC8yRjE3NjA4QUNDMkMxMUVEQjk4NjA1NzFDNEY5QUUwMi8xZm96WXpUNW11
Tmo2bGhuMG82S1VDTWVRaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjgJLN26aZaf8+8KjCvrpMpwHUMJjBkyv4RvfR67B+L5sZyepD56kCykxkEae
uy2b9HZXxSh2pqR79e1kFKY+KIhy9eJpSVmZ/dKRgZ1bN+s41XEVOwPcd/cahvsH
qfy1xIzI9aWKWm7ZEe+r+6fp7HvPbe+zlVUGCA6sUa4vtPfLdld7IXwVREYI4BNS
V7UfdZyOH8ir7AwgUCyUs0f6v1eAltLBo5jhJmnoo9Ppt/AibmJfNIBdDkTXGtyk
D4qXxTpaBUrg1uy4C8JAEhV8ACCBgFhqLXdh835eExYr3h8xf4oXLRiP3AaswH+i
mf5YXzoPNJjnvcxMdGGNZUG9lQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:43 2026 by rpki-client