Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
File:                     emYQUZRc4uj7SubeY7KEeLDO014.mft (raw, json)
Hash identifier:          gRrQpItrp6Pl062vpp4Xg9oWHTGAZSjW7KmaGJzc2jA=
Subject key identifier:   09:8A:AC:B1:8C:89:61:45:85:F1:26:3E:8A:3E:38:54:32:7A:23:B9
Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
Certificate issuer:       /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Certificate serial:       351B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
Manifest number:          3516
Signing time:             Sat 28 Feb 2026 15:01:19 +0000
Manifest this update:     Sat 28 Feb 2026 15:01:19 +0000
Manifest next update:     Sat 07 Mar 2026 15:01:19 +0000
Files and hashes:         1: emYQUZRc4uj7SubeY7KEeLDO014.crl (hash: 76zFrKM/njugxkja/VJ25Wte5hDxcmczrNyCkTHP3s4=)
                          2: 5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (hash: wwzdt+29bN5sRkpJd/eidoVjChYLuUnZj02CyiHrUiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
                          rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13595 (0x351b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165FF3, serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
        Validity
            Not Before: Feb 28 15:01:19 2026 GMT
            Not After : Mar  7 15:01:19 2026 GMT
        Subject: CN=69a3033f-87cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:1a:b6:91:99:a9:bb:91:52:1f:ed:7d:ce:
                    5d:91:da:e7:6b:f1:09:7f:5d:1d:3a:0b:b8:a7:58:
                    c6:12:0c:60:12:a3:af:13:5d:0f:c7:60:e9:ce:58:
                    de:a6:3a:d6:cb:96:ed:1d:4b:a7:13:c4:cb:b0:ad:
                    77:95:08:02:b0:d7:7a:7d:1d:12:1a:bf:60:2d:e1:
                    4c:d8:05:f9:44:62:13:be:1c:2f:ba:36:30:ad:9e:
                    28:92:47:c3:f9:3a:ae:3d:81:d6:50:dc:72:02:82:
                    6b:11:fd:6c:17:0e:7e:ec:e4:9c:4c:cc:8f:4f:8b:
                    39:74:9a:9e:a0:6d:75:c2:bc:b6:64:0c:00:4f:d7:
                    dd:68:48:1b:0d:a0:e6:02:e4:8b:66:40:b4:4c:a2:
                    fb:86:e4:ae:bd:7f:d1:ad:47:47:3d:c7:60:94:c9:
                    ab:86:84:6b:8e:7e:98:1e:fe:20:cc:6c:d0:80:ff:
                    a1:18:bc:c4:77:80:e0:f4:69:c4:46:bc:d9:d1:61:
                    c1:09:46:7d:5d:12:bf:03:c4:e6:41:6e:99:a8:fc:
                    f0:e4:ff:3f:ad:51:d6:64:f9:28:c1:9d:c6:e4:41:
                    79:61:2e:de:87:39:4f:88:c4:e4:43:48:2b:2c:43:
                    79:bd:1f:4e:db:08:e8:6e:13:cb:23:da:d1:a0:97:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8A:AC:B1:8C:89:61:45:85:F1:26:3E:8A:3E:38:54:32:7A:23:B9
            X509v3 Authority Key Identifier:
                keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5d:8f:67:10:f7:40:fc:14:06:0f:dd:34:b8:de:30:21:a6:
         86:73:6d:6a:54:a1:f8:67:bb:6b:89:79:f2:ea:5e:34:6a:19:
         e4:39:83:9a:c6:1d:89:f8:f6:d8:83:af:4e:73:b4:12:44:d4:
         5c:cc:98:ef:56:04:ad:65:46:8c:c4:6f:f5:4a:b7:9e:b0:27:
         f9:d1:a4:55:b0:5d:22:39:cc:5d:c3:c4:de:7b:bb:09:25:ff:
         63:68:f0:1f:94:6c:d8:24:82:d4:39:a8:62:7a:95:a3:b9:be:
         ce:81:40:2c:7e:ae:bd:05:76:b5:ca:da:8c:c4:5d:fa:f6:4c:
         22:df:47:9f:83:9b:78:db:32:66:95:f8:87:98:6f:f3:06:ff:
         9a:46:6d:38:40:dd:af:ed:59:99:f6:9a:31:32:b9:4a:da:c7:
         10:19:8c:f6:0b:d4:7a:9b:82:90:21:fa:b1:0c:a1:61:58:a9:
         21:c4:4e:c2:39:54:55:ab:c6:98:97:20:a9:bf:f0:01:98:46:
         7f:ae:79:9f:e0:e2:57:ff:e8:dc:2b:b3:79:32:dd:f2:3c:b8:
         a2:f2:e9:45:f6:de:e7:dc:a3:1f:8d:08:e5:46:13:14:c3:dd:
         f1:f5:d4:d8:c5:d5:ed:8b:94:d8:7e:65:d0:d8:e8:dd:00:d8:
         33:82:fd:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVGRjMxMTAvBgNVBAUTKDdBNjYxMDUxOTQ1Q0UyRThGQjRBRTZERTYzQjI4NDc4
QjBDRUQzNUUwHhcNMjYwMjI4MTUwMTE5WhcNMjYwMzA3MTUwMTE5WjAYMRYwFAYD
VQQDDA02OWEzMDMzZi04N2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvz4atpGZqbuRUh/tfc5dkdrna/EJf10dOgu4p1jGEgxgEqOvE10Px2Dpzlje
pjrWy5btHUunE8TLsK13lQgCsNd6fR0SGr9gLeFM2AX5RGITvhwvujYwrZ4okkfD
+TquPYHWUNxyAoJrEf1sFw5+7OScTMyPT4s5dJqeoG11wry2ZAwAT9fdaEgbDaDm
AuSLZkC0TKL7huSuvX/RrUdHPcdglMmrhoRrjn6YHv4gzGzQgP+hGLzEd4Dg9GnE
RrzZ0WHBCUZ9XRK/A8TmQW6ZqPzw5P8/rVHWZPkowZ3G5EF5YS7ehzlPiMTkQ0gr
LEN5vR9O2wjobhPLI9rRoJctwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAmKrLGM
iWFFhfEmPoo+OFQyeiO5MB8GA1UdIwQYMBaAFHpmEFGUXOLo+0rm3mOyhHiwztNe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZGMy9DRUFCQjRFNjFE
OUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1ajdTdWJlWTdLRWVMRE8w
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VtWVFVWlJjNHVqN1N1YmVZN0tFZUxETzAxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUZGMy9DRUFCQjRFNjFEOUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1
ajdTdWJlWTdLRWVMRE8wMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABl2PZxD3QPwUBg/dNLjeMCGmhnNtalSh+Ge7a4l58upeNGoZ5DmDmsYdifj2
2IOvTnO0EkTUXMyY71YErWVGjMRv9Uq3nrAn+dGkVbBdIjnMXcPE3nu7CSX/Y2jw
H5Rs2CSC1DmoYnqVo7m+zoFALH6uvQV2tcrajMRd+vZMIt9Hn4ObeNsyZpX4h5hv
8wb/mkZtOEDdr+1ZmfaaMTK5StrHEBmM9gvUepuCkCH6sQyhYVipIcROwjlUVavG
mJcgqb/wAZhGf655n+DiV//o3CuzeTLd8jy4ovLpRfbe59yjH40I5UYTFMPd8fXU
2MXV7YuU2H5l0Njo3QDYM4L98Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:37 2026 by rpki-client