Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
File:                     6mA98ryp7Vu3vSDB9LxR15fApj8.mft (raw, json)
Hash identifier:          OPT5hhBi902yrS4GAP7a1dTSNIS5G2kiwMHiKUqPg6Y=
Subject key identifier:   2F:34:E7:77:09:8C:CF:BB:09:86:E7:97:CC:3A:22:CF:F5:60:B5:99
Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F
Certificate issuer:       /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
Manifest number:          83
Signing time:             Sun 01 Mar 2026 08:57:57 +0000
Manifest this update:     Sun 01 Mar 2026 08:57:56 +0000
Manifest next update:     Sun 08 Mar 2026 08:57:56 +0000
Files and hashes:         1: 6mA98ryp7Vu3vSDB9LxR15fApj8.crl (hash: jsAFzj0PcJ1zNGhY4NtOuKAAfYcWc29eI6olMkdE5lc=)
                          2: 554EE88487D911F08B837C49C4F9AE02.roa (hash: KnUN81UlQodoF87eK+aMyyLj9TmAgnUYNMTKbDpsY9w=)
                          3: C2A46ED64FFD11F085A32C7CC4F9AE02.roa (hash: F2pAqsVBbXvE/fTU/fWvYs8rLIMjtDFHXYIoNWC9T/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl
                          rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
        Validity
            Not Before: Mar  1 08:57:56 2026 GMT
            Not After : Mar  8 08:57:56 2026 GMT
        Subject: CN=69a3ff94-cb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8a:cd:ea:d1:12:11:1a:18:07:f0:3b:79:41:
                    a5:a4:4c:b7:09:3f:9c:0f:1d:5d:24:18:ca:82:fb:
                    e6:ce:07:0e:ed:45:73:86:9c:91:0b:7b:a2:fa:2e:
                    d3:dd:0a:b3:a4:b0:05:68:01:9d:9e:ce:a2:ea:bd:
                    a7:1e:cb:e9:96:e5:92:ef:61:40:c9:f1:11:61:47:
                    0d:c0:92:5a:f1:2c:d3:00:49:6f:f1:c7:92:4f:fd:
                    a0:2c:84:24:e5:e1:28:de:c9:ab:f9:14:c5:b9:d7:
                    17:93:11:e0:2c:b3:85:56:d9:0d:c4:da:4b:b8:7c:
                    fa:86:a9:40:69:d0:22:f9:a4:2d:5d:1c:70:40:77:
                    5e:47:49:aa:a6:ac:3d:94:82:02:d8:0e:85:53:89:
                    57:3f:bf:cd:e3:5b:9b:3d:05:61:de:0f:44:d5:40:
                    bf:58:5e:52:af:c5:f2:a4:a9:48:02:6f:68:b2:f1:
                    91:64:b5:a1:03:f5:ad:f1:54:08:4b:93:46:f4:3a:
                    7f:e4:ec:ad:a1:e1:d6:48:17:ec:ac:70:e5:69:68:
                    81:db:84:90:76:aa:fa:5d:3f:6f:ff:46:41:11:fc:
                    27:a3:82:d3:54:f6:ac:44:04:9a:dc:c4:e8:a2:23:
                    76:2b:b5:19:21:7e:0f:51:d7:41:da:17:e6:a1:b5:
                    c1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:34:E7:77:09:8C:CF:BB:09:86:E7:97:CC:3A:22:CF:F5:60:B5:99
            X509v3 Authority Key Identifier:
                keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:b3:df:8f:60:0c:6d:88:07:76:9f:a9:95:61:1f:c2:66:ed:
         b2:16:25:96:7c:ee:43:41:1a:9b:82:fc:df:38:8b:aa:cd:f6:
         de:ce:d6:1b:04:94:42:ab:b9:66:95:3e:5f:b5:c6:76:b3:1e:
         28:c5:1b:14:11:11:11:b5:f8:65:68:2a:6b:76:1a:48:71:bb:
         71:1f:eb:80:31:fe:b2:24:64:1b:ef:ca:db:ed:f4:27:14:43:
         d6:8a:d6:10:92:e2:5c:38:cd:bd:09:93:60:9d:3f:a7:a5:7f:
         59:d8:8d:ca:81:d4:37:7a:95:d9:fa:3f:6d:6a:b5:20:68:e3:
         ae:13:30:73:ce:c0:50:d3:04:d1:5d:8c:f5:9b:3f:42:1b:0e:
         ec:64:64:6f:17:30:88:72:a8:f3:95:db:ab:12:3c:7d:6c:66:
         4a:ba:96:db:e2:74:8f:5e:d3:5b:e6:7e:df:44:ff:ee:b1:29:
         09:e1:27:9c:92:6f:5b:0a:bc:4f:47:a5:65:01:5e:04:e3:9e:
         cc:73:98:fd:e3:4f:c2:90:fe:95:06:c7:72:b7:c2:84:cc:a2:
         3e:40:ad:06:67:fc:92:89:68:e4:86:13:36:37:77:39:2a:cb:
         c1:9a:69:48:6c:0f:62:1d:50:77:d7:97:d8:f6:68:4f:38:a5:
         13:9a:d3:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlFNTQxMTAvBgNVBAUTKEVBNjAzREYyQkNBOUVENUJCN0JEMjBDMUY0QkM1MUQ3
OTdDMEE2M0YwHhcNMjYwMzAxMDg1NzU2WhcNMjYwMzA4MDg1NzU2WjAYMRYwFAYD
VQQDEw02OWEzZmY5NC1jYjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiYrN6tESERoYB/A7eUGlpEy3CT+cDx1dJBjKgvvmzgcO7UVzhpyRC3ui+i7T
3QqzpLAFaAGdns6i6r2nHsvpluWS72FAyfERYUcNwJJa8SzTAElv8ceST/2gLIQk
5eEo3smr+RTFudcXkxHgLLOFVtkNxNpLuHz6hqlAadAi+aQtXRxwQHdeR0mqpqw9
lIIC2A6FU4lXP7/N41ubPQVh3g9E1UC/WF5Sr8XypKlIAm9osvGRZLWhA/Wt8VQI
S5NG9Dp/5OytoeHWSBfsrHDlaWiB24SQdqr6XT9v/0ZBEfwno4LTVPasRASa3MTo
oiN2K7UZIX4PUddB2hfmobXB9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC8053cJ
jM+7CYbnl8w6Is/1YLWZMB8GA1UdIwQYMBaAFOpgPfK8qe1bt70gwfS8UdeXwKY/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU1NC9EOUVFRDEwMDRG
RkIxMUYwQUFFQjM4NzdDNEY5QUUwMi82bUE5OHJ5cDdWdTN2U0RCOUx4UjE1ZkFw
ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZtQTk4cnlwN1Z1M3ZTREI5THhSMTVmQXBqOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUU1NC9EOUVFRDEwMDRGRkIxMUYwQUFFQjM4NzdDNEY5QUUwMi82bUE5OHJ5cDdW
dTN2U0RCOUx4UjE1ZkFwajgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlbPfj2AMbYgHdp+plWEfwmbtshYllnzuQ0Eam4L83ziLqs323s7WGwSUQqu5
ZpU+X7XGdrMeKMUbFBEREbX4ZWgqa3YaSHG7cR/rgDH+siRkG+/K2+30JxRD1orW
EJLiXDjNvQmTYJ0/p6V/WdiNyoHUN3qV2fo/bWq1IGjjrhMwc87AUNME0V2M9Zs/
QhsO7GRkbxcwiHKo85XbqxI8fWxmSrqW2+J0j17TW+Z+30T/7rEpCeEnnJJvWwq8
T0elZQFeBOOezHOY/eNPwpD+lQbHcrfChMyiPkCtBmf8kolo5IYTNjd3OSrLwZpp
SGwPYh1Qd9eX2PZoTzilE5rTUA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:14 2026 by rpki-client