Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
File:                     pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft (raw, json)
Hash identifier:          HTxlSJB+5d9u3xHzRoB6UEHwhV2vVB+DdFLVZnxAcs4=
Subject key identifier:   28:35:D8:55:0D:80:AC:DF:27:13:C2:39:EE:AB:4E:2E:D5:B1:2B:AD
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Certificate issuer:       /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial:       01E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
Manifest number:          01DF
Signing time:             Sun 01 Mar 2026 04:16:40 +0000
Manifest this update:     Sun 01 Mar 2026 04:16:39 +0000
Manifest next update:     Sun 08 Mar 2026 04:16:39 +0000
Files and hashes:         1: pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl (hash: f3iFUO+GFhas6YiQCrLNGMbLguE6fvRLCpcGW6xkB4U=)
                          2: BF685A9E232E11F0B8BD6F6AC4F9AE02.roa (hash: 2j8iHRJYXJmCGizWbVLt4sqtXFvaUv3FR/z4mF6gpbA=)
                          3: 966CB516179B11F080B9434CC4F9AE02.roa (hash: kuUZFxBY6WLWD5ahHlBCDWPPvTA6XXIjOYW0/VKo7rM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
                          rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
        Validity
            Not Before: Mar  1 04:16:39 2026 GMT
            Not After : Mar  8 04:16:39 2026 GMT
        Subject: CN=69a3bda8-2013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:8d:1d:8b:8e:28:f0:1f:17:06:bc:a3:65:
                    5e:63:df:7b:d5:43:12:0f:40:53:7d:26:54:87:49:
                    72:9d:22:11:f5:a5:ca:da:be:c6:96:fc:94:bd:c7:
                    e4:ae:a7:7e:73:ca:da:2b:94:b4:40:16:37:b9:b3:
                    96:f4:f7:4e:1c:82:0c:05:eb:a4:14:be:d1:e1:ba:
                    04:9f:af:5a:73:00:63:48:d1:81:87:50:84:8b:3b:
                    52:0e:2a:5d:f2:dd:51:53:e5:48:64:74:95:1d:36:
                    27:1b:a3:18:04:1e:4e:53:ab:5e:af:57:a2:80:f6:
                    1b:13:69:88:31:09:d8:7c:9b:18:70:aa:56:de:89:
                    ee:f9:43:91:ac:ca:f0:1b:38:a5:67:2e:67:4c:82:
                    62:4d:cb:b3:48:96:58:91:a7:a9:0d:2a:98:00:12:
                    6f:88:37:eb:3a:ef:5b:3b:54:08:b6:fd:4f:cc:16:
                    ac:ad:b5:2e:71:c6:49:68:64:ef:35:20:48:87:ec:
                    b2:7e:50:7f:dd:fe:6c:69:01:fc:bf:56:cc:59:c4:
                    9b:b7:3a:33:af:23:2b:0a:45:b7:80:1e:52:2b:54:
                    81:28:de:b9:b9:0f:28:6a:83:05:bf:c0:b6:4c:fa:
                    a0:2e:cc:e9:fe:a0:2c:29:cf:1c:70:29:3a:eb:9e:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:35:D8:55:0D:80:AC:DF:27:13:C2:39:EE:AB:4E:2E:D5:B1:2B:AD
            X509v3 Authority Key Identifier:
                keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c8:53:b2:9e:81:57:87:ff:0c:c6:23:aa:08:4a:37:ec:5d:
         25:db:56:07:36:3f:87:32:f6:3c:13:23:64:7b:68:a3:5a:87:
         0f:05:6d:ee:7a:2d:92:a3:c0:03:37:1b:35:10:6c:84:53:00:
         08:b1:ec:fa:31:2e:1e:35:5d:ab:b9:51:50:8e:64:e0:ad:21:
         82:f9:8e:33:60:67:d4:95:c7:0c:1e:25:2c:c6:be:31:7d:53:
         c2:39:da:99:94:ed:5b:7f:b8:73:7c:6f:ca:da:76:33:ac:84:
         3d:c9:16:11:13:17:50:ed:2e:61:be:ee:84:5f:3f:f9:88:85:
         97:b8:50:d0:63:c9:21:2e:ed:76:2f:da:17:01:88:0c:a8:16:
         a9:2f:12:12:a2:62:69:d1:db:87:57:93:64:aa:ab:9f:27:9f:
         c1:a7:90:03:9e:25:70:5e:0d:b0:a4:43:bc:4f:0b:72:33:c1:
         51:85:56:d4:80:59:12:3b:5b:62:9e:4d:02:75:9e:e4:2f:b2:
         b5:3a:d3:cf:4a:c3:86:82:50:e3:38:3e:0d:9b:f1:0e:35:fe:
         63:6a:96:ec:b5:04:94:a4:66:a8:52:e3:63:9d:d9:1e:4b:98:
         6c:ac:6a:7a:4d:cd:71:75:86:6d:53:3f:1d:6e:e3:e9:1a:7d:
         4b:97:7a:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE3NjMxMTAvBgNVBAUTKEE1NUQzRkY4QTg1QkUxMDNCNTgzNzUwRDc3OTQzRjQ3
Qzk3NkY1QjMwHhcNMjYwMzAxMDQxNjM5WhcNMjYwMzA4MDQxNjM5WjAYMRYwFAYD
VQQDDA02OWEzYmRhOC0yMDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtw+NHYuOKPAfFwa8o2VeY9971UMSD0BTfSZUh0lynSIR9aXK2r7GlvyUvcfk
rqd+c8raK5S0QBY3ubOW9PdOHIIMBeukFL7R4boEn69acwBjSNGBh1CEiztSDipd
8t1RU+VIZHSVHTYnG6MYBB5OU6ter1eigPYbE2mIMQnYfJsYcKpW3onu+UORrMrw
GzilZy5nTIJiTcuzSJZYkaepDSqYABJviDfrOu9bO1QItv1PzBasrbUuccZJaGTv
NSBIh+yyflB/3f5saQH8v1bMWcSbtzozryMrCkW3gB5SK1SBKN65uQ8oaoMFv8C2
TPqgLszp/qAsKc8ccCk6657oOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCg12FUN
gKzfJxPCOe6rTi7VsSutMB8GA1UdIwQYMBaAFKVdP/ioW+EDtYN1DXeUP0fJdvWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTc2My83MUY3OUMxQzQy
NDIxMUVFQTdGMkNBMTJDNEY5QUUwMi9wVjBfLUtoYjRRTzFnM1VOZDVRX1I4bDI5
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BWMF8tS2hiNFFPMWczVU5kNVFfUjhsMjliTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTc2My83MUY3OUMxQzQyNDIxMUVFQTdGMkNBMTJDNEY5QUUwMi9wVjBfLUtoYjRR
TzFnM1VOZDVRX1I4bDI5Yk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANshTsp6BV4f/DMYjqghKN+xdJdtWBzY/hzL2PBMjZHtoo1qHDwVt7notkqPA
AzcbNRBshFMACLHs+jEuHjVdq7lRUI5k4K0hgvmOM2Bn1JXHDB4lLMa+MX1Twjna
mZTtW3+4c3xvytp2M6yEPckWERMXUO0uYb7uhF8/+YiFl7hQ0GPJIS7tdi/aFwGI
DKgWqS8SEqJiadHbh1eTZKqrnyefwaeQA54lcF4NsKRDvE8LcjPBUYVW1IBZEjtb
Yp5NAnWe5C+ytTrTz0rDhoJQ4zg+DZvxDjX+Y2qW7LUElKRmqFLjY53ZHkuYbKxq
ek3NcXWGbVM/HW7j6Rp9S5d62w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:24 2026 by rpki-client