Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
File:                     gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft (raw, json)
Hash identifier:          F3NecwaoQL8om2XzgYAoYZw8yeDYgpxawNg/GRZOOhI=
Subject key identifier:   06:7D:4E:52:67:DB:BE:24:96:FA:5E:DE:87:03:C7:CC:62:2B:FC:88
Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B
Certificate issuer:       /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
Certificate serial:       023B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
Manifest number:          0236
Signing time:             Sun 01 Mar 2026 03:16:20 +0000
Manifest this update:     Sun 01 Mar 2026 03:16:19 +0000
Manifest next update:     Sun 08 Mar 2026 03:16:19 +0000
Files and hashes:         1: gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl (hash: 9Ct9WyXpK4LdAYYOKqUazV/EgLw85ClE1+LjRBhvKWI=)
                          2: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (hash: GUezrK4MuLX9p1Pm9ugLdkW32KkVaxIuYUbsdX0Eo1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl
                          rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160602, serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
        Validity
            Not Before: Mar  1 03:16:19 2026 GMT
            Not After : Mar  8 03:16:19 2026 GMT
        Subject: CN=69a3af84-83ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:66:90:68:c8:6e:3f:0d:0b:65:37:d7:3a:28:
                    60:e7:24:87:e9:33:7b:20:3f:87:be:9a:7e:34:93:
                    bb:96:40:90:2d:94:16:b2:e1:9f:7e:06:0e:73:e9:
                    aa:84:4e:b7:78:16:98:93:24:f5:f2:54:a7:db:9c:
                    3d:eb:55:bb:42:9b:46:83:44:57:4c:26:16:58:fa:
                    8d:27:e2:4e:92:6f:18:6a:d8:06:8c:0a:4a:42:c2:
                    6f:5f:93:05:b9:8c:00:84:04:30:4c:f5:f6:3f:c7:
                    6d:13:97:0d:1b:df:03:d0:9a:a1:57:e1:d7:d4:41:
                    61:24:f5:13:06:d4:ce:43:27:91:b4:6a:14:fc:c5:
                    dd:aa:31:0e:72:4b:85:5b:0a:91:10:89:88:0c:8a:
                    6d:2d:42:fd:3e:ab:e9:a0:38:61:3c:72:0d:51:8d:
                    70:e8:6b:6a:c8:54:cb:f5:2e:e5:85:64:f6:e1:ba:
                    b5:49:a8:8c:6d:17:25:84:5f:2c:ec:66:f0:18:f9:
                    74:ca:64:a2:89:1d:7f:03:ff:70:ed:e6:db:2e:e5:
                    7a:db:a4:83:43:0b:58:02:d4:78:33:b5:56:3f:f8:
                    fc:cd:18:b3:8a:f8:79:38:b8:0e:7c:1b:b7:57:74:
                    7b:ba:c6:b7:96:de:53:15:e4:e2:32:1f:0b:29:33:
                    ee:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7D:4E:52:67:DB:BE:24:96:FA:5E:DE:87:03:C7:CC:62:2B:FC:88
            X509v3 Authority Key Identifier:
                keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:cd:26:ca:2d:5d:4a:93:c9:0b:2f:66:43:aa:e7:e1:38:5e:
         a1:5e:61:ac:e3:d9:ad:61:ab:60:d5:36:2c:5f:05:85:55:07:
         be:34:ad:d9:90:ff:47:e8:a7:cd:9b:67:38:59:1a:ec:c4:a3:
         5c:4b:aa:dd:b9:e0:54:1a:52:54:9f:ed:1b:d8:ce:77:94:10:
         07:59:ca:6f:46:67:68:76:de:64:21:82:9c:93:11:f0:67:32:
         bd:60:cf:96:6d:cd:a5:b2:ba:6f:f8:f0:d2:4a:53:23:03:d0:
         c2:b2:82:2a:fb:70:62:e5:f9:6b:37:f4:44:ed:d3:60:71:b2:
         44:ca:56:e6:b9:84:62:ad:d6:4a:00:33:fc:c0:1d:15:4f:81:
         a5:4e:38:30:ac:90:95:08:20:70:1f:75:3a:ee:e0:9f:97:09:
         8d:a9:c4:fb:3a:52:45:97:82:11:e0:18:d5:bf:fa:0f:fd:10:
         45:fc:09:97:ff:50:e8:f5:b4:47:5d:d8:f7:4b:6b:b1:c1:53:
         03:c9:b0:4f:1b:01:fa:59:8e:7b:bf:f5:4e:7f:60:5a:15:4a:
         c7:d3:03:23:5b:ba:cd:64:85:be:48:6c:56:03:eb:9d:b5:6a:
         96:6f:5d:9e:17:f2:74:74:67:68:54:50:c9:4d:0c:9c:84:4c:
         c7:c8:41:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNGQkI4OUI2NTM3
QTk0ODA3NUIwHhcNMjYwMzAxMDMxNjE5WhcNMjYwMzA4MDMxNjE5WjAYMRYwFAYD
VQQDDA02OWEzYWY4NC04M2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzWaQaMhuPw0LZTfXOihg5ySH6TN7ID+Hvpp+NJO7lkCQLZQWsuGffgYOc+mq
hE63eBaYkyT18lSn25w961W7QptGg0RXTCYWWPqNJ+JOkm8YatgGjApKQsJvX5MF
uYwAhAQwTPX2P8dtE5cNG98D0JqhV+HX1EFhJPUTBtTOQyeRtGoU/MXdqjEOckuF
WwqREImIDIptLUL9PqvpoDhhPHINUY1w6GtqyFTL9S7lhWT24bq1SaiMbRclhF8s
7GbwGPl0ymSiiR1/A/9w7ebbLuV626SDQwtYAtR4M7VWP/j8zRizivh5OLgOfBu3
V3R7usa3lt5TFeTiMh8LKTPuPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZ9TlJn
274klvpe3ocDx8xiK/yIMB8GA1UdIwQYMBaAFIGDWbyg9nO3gWAD+7ibZTepSAdb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDYwMi9GQkNDODk3Q0FG
QjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3ZUJZQVA3dUp0bE42bElC
MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dZTlp2S0QyYzdlQllBUDd1SnRsTjZsSUIxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDYwMi9GQkNDODk3Q0FGQjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3
ZUJZQVA3dUp0bE42bElCMXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAs0myi1dSpPJCy9mQ6rn4TheoV5hrOPZrWGrYNU2LF8FhVUHvjSt2ZD/R+in
zZtnOFka7MSjXEuq3bngVBpSVJ/tG9jOd5QQB1nKb0ZnaHbeZCGCnJMR8GcyvWDP
lm3NpbK6b/jw0kpTIwPQwrKCKvtwYuX5azf0RO3TYHGyRMpW5rmEYq3WSgAz/MAd
FU+BpU44MKyQlQggcB91Ou7gn5cJjanE+zpSRZeCEeAY1b/6D/0QRfwJl/9Q6PW0
R13Y90trscFTA8mwTxsB+lmOe7/1Tn9gWhVKx9MDI1u6zWSFvkhsVgPrnbVqlm9d
nhfydHRnaFRQyU0MnIRMx8hBnw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:52:42 2026 by rpki-client