Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
File:                     GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json)
Hash identifier:          Z/maPR1yjHNNYMiIU8BHdqtl/hzbX6pO9wPPOuS8vWo=
Subject key identifier:   16:29:43:B8:E7:90:7F:52:76:9B:91:8D:1D:7D:66:F7:51:86:5D:91
Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09
Certificate issuer:       /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
Certificate serial:       1EA2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
Manifest number:          1E95
Signing time:             Sat 28 Feb 2026 16:05:02 +0000
Manifest this update:     Sat 28 Feb 2026 16:05:02 +0000
Manifest next update:     Sat 07 Mar 2026 16:05:02 +0000
Files and hashes:         1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: n5RoVtPxFaI8C4W+Gr3zFNEwQYXZYqaJ0/sZcZiYCdg=)
                          2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: SuDRS4jGJE9zSZ58w86iX8uePQ9m/GiWmqEd/5+TkEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7842 (0x1ea2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB3F, serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
        Validity
            Not Before: Feb 28 16:05:02 2026 GMT
            Not After : Mar  7 16:05:02 2026 GMT
        Subject: CN=69a3122e-957c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:e0:aa:3a:41:46:6d:31:e7:72:e8:91:63:
                    98:33:8f:d4:77:23:2c:32:35:6c:08:5e:59:62:97:
                    8d:dd:c1:39:84:85:99:c6:72:0e:22:66:2c:93:ca:
                    94:f2:9b:dc:42:33:61:48:5f:93:4a:e0:67:50:01:
                    13:56:34:f3:42:84:8b:17:d1:ae:14:b7:70:8c:dd:
                    78:2b:22:b4:45:3a:1a:13:b9:28:5b:d7:b1:93:0f:
                    8d:94:44:5e:3a:f2:f3:73:bc:da:47:e5:10:87:77:
                    72:57:0d:9e:8d:c9:7a:a7:98:0a:9f:8a:f8:96:7b:
                    6e:5e:a8:68:23:d9:08:52:e8:52:2c:8b:f8:e9:cb:
                    d4:4f:54:a5:39:fc:2d:e3:07:3d:79:80:1c:95:08:
                    04:e1:d5:d1:b3:ff:92:73:57:50:ad:1d:f7:80:81:
                    10:fa:5c:4e:a7:b2:82:3f:11:7b:12:33:57:a9:2d:
                    69:9a:28:93:87:9f:27:86:f4:da:29:da:09:32:1a:
                    5a:d2:2d:36:b5:16:15:5d:92:83:74:4e:32:6c:39:
                    9b:17:61:b1:a4:aa:66:c6:ab:77:22:2d:b5:d4:94:
                    75:54:74:a9:39:a5:06:95:28:00:94:08:51:4a:d5:
                    1d:02:93:42:49:59:d5:a8:b9:3c:c8:1d:e0:3f:e8:
                    fd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:29:43:B8:E7:90:7F:52:76:9B:91:8D:1D:7D:66:F7:51:86:5D:91
            X509v3 Authority Key Identifier:
                keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1a:c5:1d:3d:36:6e:99:ed:7f:f5:ac:1e:17:b3:62:96:59:
         ba:dc:e0:84:cb:da:60:eb:1c:2f:3e:d7:a1:29:fd:0f:2f:d3:
         6b:28:62:9a:33:62:49:e7:3d:d4:97:3f:97:56:02:6f:1d:f6:
         9d:dd:bc:71:5b:58:cd:bc:37:03:71:1a:5b:b7:75:42:cf:e6:
         c9:ac:7c:66:ff:3f:60:55:87:fd:49:ee:0c:dd:fc:9b:3c:9b:
         02:50:1b:f7:4c:22:43:9c:0d:97:70:b4:b6:36:06:5b:99:7a:
         55:fc:74:01:64:38:34:75:46:1a:73:bb:13:18:1e:53:ab:60:
         44:37:b2:1b:af:3c:ef:71:48:25:a4:57:9c:db:61:24:2b:b7:
         1e:03:99:27:ff:f8:fb:a7:7e:05:c7:40:0d:4d:5d:f3:7c:a4:
         88:4b:18:d3:4f:27:8e:fa:ea:cd:60:c4:e6:d2:32:59:d0:e3:
         55:0a:08:65:46:79:bd:1c:eb:76:66:17:03:58:4c:a1:e7:fb:
         ff:56:1b:c1:2a:35:87:1a:0d:e6:a8:2f:a1:71:74:c5:37:d7:
         0b:ce:11:67:64:48:cd:96:a0:7c:5c:af:4b:58:76:14:33:36:
         01:43:b4:af:b6:d3:e4:93:a7:3c:d2:94:4d:d6:51:e2:c9:a9:
         ca:d9:9d:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRCM0YxMTAvBgNVBAUTKDFBQjFERThFQzg5MUFGQTJENEUxQzkxQUY1NTgzNDkw
QkZCQkMyMDkwHhcNMjYwMjI4MTYwNTAyWhcNMjYwMzA3MTYwNTAyWjAYMRYwFAYD
VQQDDA02OWEzMTIyZS05NTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJrgqjpBRm0x53LokWOYM4/UdyMsMjVsCF5ZYpeN3cE5hIWZxnIOImYsk8qU
8pvcQjNhSF+TSuBnUAETVjTzQoSLF9GuFLdwjN14KyK0RToaE7koW9exkw+NlERe
OvLzc7zaR+UQh3dyVw2ejcl6p5gKn4r4lntuXqhoI9kIUuhSLIv46cvUT1SlOfwt
4wc9eYAclQgE4dXRs/+Sc1dQrR33gIEQ+lxOp7KCPxF7EjNXqS1pmiiTh58nhvTa
KdoJMhpa0i02tRYVXZKDdE4ybDmbF2GxpKpmxqt3Ii211JR1VHSpOaUGlSgAlAhR
StUdApNCSVnVqLk8yB3gP+j9xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBYpQ7jn
kH9SdpuRjR19ZvdRhl2RMB8GA1UdIwQYMBaAFBqx3o7Ika+i1OHJGvVYNJC/u8IJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REIzRi9EMzkxMDEzNDg5
NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2TFU0Y2thOVZnMGtMLTd3
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dySGVqc2lScjZMVTRja2E5Vmcwa0wtN3dnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REIzRi9EMzkxMDEzNDg5NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2
TFU0Y2thOVZnMGtMLTd3Z2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASBrFHT02bpntf/WsHhezYpZZutzghMvaYOscLz7XoSn9Dy/TayhimjNiSec9
1Jc/l1YCbx32nd28cVtYzbw3A3EaW7d1Qs/myax8Zv8/YFWH/UnuDN38mzybAlAb
90wiQ5wNl3C0tjYGW5l6Vfx0AWQ4NHVGGnO7ExgeU6tgRDeyG68873FIJaRXnNth
JCu3HgOZJ//4+6d+BcdADU1d83ykiEsY008njvrqzWDE5tIyWdDjVQoIZUZ5vRzr
dmYXA1hMoef7/1YbwSo1hxoN5qgvoXF0xTfXC84RZ2RIzZagfFyvS1h2FDM2AUO0
r7bT5JOnPNKUTdZR4smpytmdOA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:05:07 2026 by rpki-client