Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File:                     aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier:          UN0wQSCYke+PRjmW2ZZDqkMYm0DOayPhvp4k8TrrZ8A=
Subject key identifier:   C1:92:9E:00:E2:8E:60:64:B1:11:F1:F2:DC:C6:A6:95:34:8C:5A:A0
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer:       /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number:          011A
Signing time:             Sun 01 Mar 2026 07:58:11 +0000
Manifest this update:     Sun 01 Mar 2026 07:58:11 +0000
Manifest next update:     Sun 08 Mar 2026 07:58:11 +0000
Files and hashes:         1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: 95l7dcmUVffv1mfFsMxl+LKn373DXLzunKHf9bHta14=)
                          2: B7C4E510067111F1BC22D1653B3D8C67.roa (hash: pf80VnN9u3/qP+OkGvBZgFdGotQwA2eSd+UJBQA0lVo=)
                          3: A609DABE064511F19E4E77B72C3D8C67.roa (hash: JqFjzkR6fbvAr2V9FP6RyWp8nostZqpkPCMRP+2dPsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
                          rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
        Validity
            Not Before: Mar  1 07:58:11 2026 GMT
            Not After : Mar  8 07:58:11 2026 GMT
        Subject: CN=69a3f193-b5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:7b:59:88:9e:d5:14:d2:16:dc:91:81:9a:
                    02:66:21:8e:93:51:e8:01:7a:51:1f:36:ba:26:2c:
                    fd:c7:e5:c2:7c:ba:4e:cb:01:33:a2:60:9a:2c:b8:
                    15:98:d7:aa:d9:4f:03:ee:f8:d2:fc:62:19:f1:43:
                    82:e0:92:42:96:31:c0:f0:6b:0d:5e:75:a4:73:6a:
                    39:8b:71:14:09:da:41:e5:3d:70:54:36:1b:a3:a6:
                    dd:db:f3:19:25:3a:bd:b4:79:45:88:17:84:d4:48:
                    7b:f6:be:cc:57:77:5f:2c:da:a6:04:58:86:a6:7c:
                    27:9f:8e:87:24:9c:6a:02:32:5c:51:6e:ab:27:1a:
                    92:a4:02:4a:ed:bc:04:7e:03:0d:a7:59:dc:4c:19:
                    74:96:3c:56:34:b9:87:02:04:e2:39:a1:2b:c2:c7:
                    d9:84:28:6d:7b:9d:ef:04:9f:b0:c7:1a:65:df:91:
                    3e:f8:e8:50:e6:9e:ca:9e:4e:51:e6:23:34:96:bc:
                    57:c0:42:1e:e8:42:73:72:8e:98:13:0b:c0:64:96:
                    47:09:af:6c:55:7f:f1:26:2e:14:fa:c7:b0:5b:5b:
                    01:54:eb:b1:bd:ff:11:db:d8:5b:85:93:84:d7:c8:
                    5b:25:eb:9d:c6:64:d4:a8:56:b4:3d:98:60:a6:4d:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:92:9E:00:E2:8E:60:64:B1:11:F1:F2:DC:C6:A6:95:34:8C:5A:A0
            X509v3 Authority Key Identifier:
                keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0f:e6:e5:ac:f9:7d:eb:ad:dc:d9:d7:f7:37:65:17:e6:4f:
         b8:94:20:bb:06:c7:ca:4b:7f:fd:c6:2b:e6:d4:c2:1f:44:95:
         fe:e0:33:8e:cf:e1:e9:92:f1:52:53:a4:3f:69:38:f5:2b:71:
         05:3b:82:51:82:ad:57:e6:8d:5d:a6:bb:d4:05:34:9a:8f:c9:
         a3:78:d3:8d:86:1c:e0:c9:99:05:d0:84:1d:f3:d0:df:48:e5:
         cb:eb:53:2d:2d:3f:33:6a:f7:f3:55:fc:0c:43:ac:41:75:11:
         93:31:65:b5:09:02:d5:86:a7:21:1e:52:f8:9f:4e:49:c6:f7:
         db:3f:29:f8:c4:64:2b:ad:0f:9c:b6:7c:0e:1f:73:42:63:da:
         e7:a6:8b:4a:da:03:53:e4:88:59:ab:59:ff:2a:55:ff:3d:85:
         eb:9f:ef:0f:6b:39:29:83:48:fd:3c:39:94:23:05:bf:9d:30:
         8a:d7:6a:b7:cb:a4:8f:f7:c6:b6:ed:93:d8:01:2c:81:5f:b2:
         5d:4a:12:d3:42:2e:45:2b:b5:4f:77:d6:3e:25:da:7e:aa:f2:
         59:f2:0b:34:47:dd:eb:46:b8:56:b7:fb:5b:b2:d4:24:08:88:
         39:33:22:ed:29:48:e6:36:75:e2:07:a1:4d:16:e9:e8:df:11:
         fb:d1:96:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRFM0QxMTAvBgNVBAUTKDY5MTgxQ0Y0NTFGOEIzRkVDNjRGQzgyOThCNTIyRDQ4
OENBNUM5RTYwHhcNMjYwMzAxMDc1ODExWhcNMjYwMzA4MDc1ODExWjAYMRYwFAYD
VQQDEw02OWEzZjE5My1iNWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0x7WYie1RTSFtyRgZoCZiGOk1HoAXpRHza6Jiz9x+XCfLpOywEzomCaLLgV
mNeq2U8D7vjS/GIZ8UOC4JJCljHA8GsNXnWkc2o5i3EUCdpB5T1wVDYbo6bd2/MZ
JTq9tHlFiBeE1Eh79r7MV3dfLNqmBFiGpnwnn46HJJxqAjJcUW6rJxqSpAJK7bwE
fgMNp1ncTBl0ljxWNLmHAgTiOaErwsfZhChte53vBJ+wxxpl35E++OhQ5p7Knk5R
5iM0lrxXwEIe6EJzco6YEwvAZJZHCa9sVX/xJi4U+sewW1sBVOuxvf8R29hbhZOE
18hbJeudxmTUqFa0PZhgpk3VqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMGSngDi
jmBksRHx8tzGppU0jFqgMB8GA1UdIwQYMBaAFGkYHPRR+LP+xk/IKYtSLUiMpcnm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REUzRC9GRDFFNDU1MERF
NjUxMUVGODI0M0VFMzBDNEY5QUUwMi9hUmdjOUZINHNfN0dUOGdwaTFJdFNJeWx5
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHllWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REUzRC9GRDFFNDU1MERFNjUxMUVGODI0M0VFMzBDNEY5QUUwMi9hUmdjOUZINHNf
N0dUOGdwaTFJdFNJeWx5ZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANg/m5az5feut3NnX9zdlF+ZPuJQguwbHykt//cYr5tTCH0SV/uAzjs/h6ZLx
UlOkP2k49StxBTuCUYKtV+aNXaa71AU0mo/Jo3jTjYYc4MmZBdCEHfPQ30jly+tT
LS0/M2r381X8DEOsQXURkzFltQkC1YanIR5S+J9OScb32z8p+MRkK60PnLZ8Dh9z
QmPa56aLStoDU+SIWatZ/ypV/z2F65/vD2s5KYNI/Tw5lCMFv50witdqt8ukj/fG
tu2T2AEsgV+yXUoS00IuRSu1T3fWPiXafqryWfILNEfd60a4Vrf7W7LUJAiIOTMi
7SlI5jZ14gehTRbp6N8R+9GWjA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:55:29 2026 by rpki-client