Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
File:                     9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json)
Hash identifier:          F2aTu0a85vTSUZCGC5peenEcHFXP5uxmOax0AprC1Qo=
Subject key identifier:   E1:BF:93:90:BF:A7:A3:1A:15:85:04:27:6F:F6:EC:C8:44:BC:2C:AD
Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2
Certificate issuer:       /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
Manifest number:          01E0
Signing time:             Mon 02 Mar 2026 00:10:38 +0000
Manifest this update:     Mon 02 Mar 2026 00:10:36 +0000
Manifest next update:     Mon 09 Mar 2026 00:10:36 +0000
Files and hashes:         1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: Msx2uXv3ZSkbbw/nApN6WENYZ5Ckc2JABpsMhNq4ETs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl
                          rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
        Validity
            Not Before: Mar  2 00:10:36 2026 GMT
            Not After : Mar  9 00:10:36 2026 GMT
        Subject: CN=69a4d57d-5789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:20:0b:32:56:06:8c:59:ca:52:79:26:96:81:
                    e7:7c:28:78:e2:0a:7f:00:e3:c6:d0:2e:25:be:28:
                    36:12:78:6e:dd:b3:fd:08:2b:5e:4b:60:3f:17:d1:
                    20:64:bc:2b:ba:6d:6a:76:ce:9c:8c:1f:7f:72:2f:
                    b2:55:f4:d4:65:a9:d0:e7:c1:8b:cc:04:76:7a:ed:
                    08:6b:09:a8:34:4e:da:81:47:de:9e:ad:8d:1c:3e:
                    f4:50:32:0e:36:18:b8:29:cb:fb:da:2c:6f:be:0e:
                    2e:40:9b:b4:72:49:a8:52:c2:81:88:b2:d0:3d:3f:
                    ea:46:fd:fb:ea:62:ea:26:02:87:6c:4b:ef:99:a1:
                    41:06:2f:a2:50:b0:18:38:63:0b:33:94:48:47:46:
                    41:4f:85:e6:5e:e0:c0:9a:d5:fd:e7:45:a5:41:74:
                    9a:1f:d7:99:b7:77:cc:d2:9e:e2:0f:dc:e5:a7:6b:
                    21:a1:24:d7:d8:c3:ca:ef:38:c2:37:f2:a4:ab:8a:
                    fa:67:f6:35:21:3d:db:06:ff:01:bc:0d:d4:36:aa:
                    d4:65:05:b6:06:4c:06:5b:18:dd:3f:f0:f5:af:77:
                    21:61:e6:b4:a9:af:b2:dc:42:cc:bc:b9:f0:df:82:
                    2e:dc:89:77:4f:63:10:36:13:cb:b3:1d:5e:0f:4a:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BF:93:90:BF:A7:A3:1A:15:85:04:27:6F:F6:EC:C8:44:BC:2C:AD
            X509v3 Authority Key Identifier:
                keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2b:c3:1f:29:d6:3d:f8:38:fe:4f:54:27:44:ca:7b:d7:c6:
         5e:3e:46:e2:85:0c:9f:50:d2:a8:dc:54:ed:62:95:7a:dc:6f:
         6e:ae:83:cf:41:94:72:eb:8f:af:fe:5c:af:4c:39:33:f1:db:
         d0:33:0f:c4:68:b7:2e:4c:c5:25:72:99:aa:60:e5:4d:94:32:
         cd:fd:5c:64:9a:f5:ce:c1:37:b2:05:3c:17:8b:ed:d1:39:f8:
         51:86:a8:e7:84:d7:de:49:84:d0:a2:fd:db:91:56:0c:a4:d7:
         d3:c9:86:64:5c:6c:53:cb:54:11:1f:30:5f:db:2b:a8:de:f1:
         79:9d:3f:d4:83:94:e2:df:68:71:fb:7e:40:67:fa:db:d9:e7:
         3a:de:d3:e0:f5:0d:c0:d5:26:6e:2f:20:f3:2c:dc:cd:51:71:
         7f:c8:e2:a4:5b:9b:03:4e:0b:0b:ee:ea:b5:39:b8:29:8c:64:
         5d:85:b2:e5:78:d5:bc:f5:e1:58:df:04:dd:7b:cf:2b:3c:71:
         b5:86:64:22:ca:70:7a:04:40:61:26:b0:a8:f7:bd:e7:5d:0b:
         44:c6:f7:f6:35:9b:ba:a8:07:ed:0d:aa:d9:15:15:ee:11:bd:
         a6:22:4f:35:4c:d3:98:c5:a0:6d:17:c6:64:be:0f:0f:c5:68:
         02:fc:54:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI2QUExMTAvBgNVBAUTKEY1QkNFQTkwODVFOEFEQkFBOEFDMjFBMDRFNTNEQkZF
QzMyMEJDRTIwHhcNMjYwMzAyMDAxMDM2WhcNMjYwMzA5MDAxMDM2WjAYMRYwFAYD
VQQDEw02OWE0ZDU3ZC01Nzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5CALMlYGjFnKUnkmloHnfCh44gp/AOPG0C4lvig2Enhu3bP9CCteS2A/F9Eg
ZLwrum1qds6cjB9/ci+yVfTUZanQ58GLzAR2eu0IawmoNE7agUfenq2NHD70UDIO
Nhi4Kcv72ixvvg4uQJu0ckmoUsKBiLLQPT/qRv376mLqJgKHbEvvmaFBBi+iULAY
OGMLM5RIR0ZBT4XmXuDAmtX950WlQXSaH9eZt3fM0p7iD9zlp2shoSTX2MPK7zjC
N/Kkq4r6Z/Y1IT3bBv8BvA3UNqrUZQW2BkwGWxjdP/D1r3chYea0qa+y3ELMvLnw
34Iu3Il3T2MQNhPLsx1eD0qu/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOG/k5C/
p6MaFYUEJ2/27MhEvCytMB8GA1UdIwQYMBaAFPW86pCF6K26qKwhoE5T2/7DILzi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS9BMjk4OEYzODQw
QUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3JicW9yQ0dnVGxQYl9zTWd2
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzlienFrSVhvcmJxb3JDR2dUbFBiX3NNZ3ZPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjZBQS9BMjk4OEYzODQwQUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3Ji
cW9yQ0dnVGxQYl9zTWd2T0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeivDHynWPfg4/k9UJ0TKe9fGXj5G4oUMn1DSqNxU7WKVetxvbq6Dz0GUcuuP
r/5cr0w5M/Hb0DMPxGi3LkzFJXKZqmDlTZQyzf1cZJr1zsE3sgU8F4vt0Tn4UYao
54TX3kmE0KL925FWDKTX08mGZFxsU8tUER8wX9srqN7xeZ0/1IOU4t9ocft+QGf6
29nnOt7T4PUNwNUmbi8g8yzczVFxf8jipFubA04LC+7qtTm4KYxkXYWy5XjVvPXh
WN8E3XvPKzxxtYZkIspwegRAYSawqPe9510LRMb39jWbuqgH7Q2q2RUV7hG9piJP
NUzTmMWgbRfGZL4PD8VoAvxU+Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:39 2026 by rpki-client