Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
File:                     vJfyb7J4ln3TyjnFndCMaiwjBvk.mft (raw, json)
Hash identifier:          qxmAYFKO45ChG5S8QNoHhAm9GqbY27uytRWE/fdL/0A=
Subject key identifier:   7D:5A:44:D0:B4:83:EA:2C:2B:5F:55:86:0C:AB:38:C4:C8:A0:93:C6
Authority key identifier: BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9
Certificate issuer:       /CN=A9171845/serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
Certificate serial:       0573
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
Manifest number:          0568
Signing time:             Mon 02 Mar 2026 01:04:20 +0000
Manifest this update:     Mon 02 Mar 2026 01:04:18 +0000
Manifest next update:     Mon 09 Mar 2026 01:04:18 +0000
Files and hashes:         1: vJfyb7J4ln3TyjnFndCMaiwjBvk.crl (hash: UfrI/cbRaEPyd184hDFslx+D6n//XjemeIGA3/ykuq8=)
                          2: 8B91EDB420CD11EC97292B78C4F9AE02.roa (hash: zUo9zMOcqpmI1u/8h93wuSbIxvrMljAj7RHZhmwIINQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395 (0x573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
        Validity
            Not Before: Mar  2 01:04:18 2026 GMT
            Not After : Mar  9 01:04:18 2026 GMT
        Subject: CN=69a4e214-4d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:2b:66:57:9c:a6:90:89:78:82:8e:ca:e7:
                    f3:95:d5:71:c4:c2:18:18:23:a5:6e:89:39:15:e9:
                    ff:24:62:2e:97:80:07:20:71:fa:ea:b1:49:40:3e:
                    13:6b:02:a3:3b:12:30:85:ba:bc:96:bb:3a:bd:4d:
                    45:ef:01:cc:f1:c9:b4:1d:ca:ed:a1:48:e6:d6:e1:
                    43:6f:d0:bc:44:61:16:e2:6b:4f:c2:34:6a:94:9c:
                    13:64:91:70:09:dc:a0:df:5f:91:57:75:64:ff:a7:
                    2e:18:8e:f5:47:e0:0c:44:fb:4b:39:a2:aa:3d:6b:
                    08:85:b2:99:85:95:b0:46:63:cc:76:1f:33:50:e1:
                    cf:c2:c5:65:20:7c:67:97:90:86:8b:0e:89:06:04:
                    f9:db:97:2e:c1:52:65:f5:b9:3f:74:ab:24:16:12:
                    34:7b:cc:4a:64:65:67:9c:7b:ff:46:f5:6f:9e:52:
                    a8:c2:42:35:4e:58:86:25:e7:c7:b5:19:fb:23:dc:
                    15:49:48:36:bf:00:23:27:1f:da:a3:44:c3:48:a9:
                    99:70:cb:6d:a7:33:3e:83:5d:07:2f:06:ee:e7:c5:
                    61:24:b7:49:5c:c2:e6:7e:36:c1:da:56:fe:e5:59:
                    60:25:19:a1:c9:64:b0:cb:3f:f1:c8:a9:0b:b7:ac:
                    b9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:44:D0:B4:83:EA:2C:2B:5F:55:86:0C:AB:38:C4:C8:A0:93:C6
            X509v3 Authority Key Identifier:
                keyid:BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:bc:ce:79:ea:9d:a5:bd:4c:7b:70:22:d8:cf:a1:38:bc:33:
         10:2d:f2:b4:b5:84:d7:be:47:31:bf:79:0c:1a:17:78:5d:bd:
         6f:1d:d6:60:f8:a0:4d:bd:86:84:6d:85:6d:a6:d1:0e:27:c8:
         2e:12:bf:37:53:1f:9f:5b:35:94:b3:ca:55:1d:63:ac:ef:31:
         12:dd:12:32:1a:93:ca:bf:90:11:63:d6:77:47:b5:31:12:e0:
         6d:da:43:c7:7d:19:49:3b:38:ba:d0:1c:66:f3:cd:aa:79:f2:
         14:23:d2:ed:80:c9:98:88:d2:53:9d:44:dd:bc:06:f3:ec:c5:
         fe:ab:5d:dc:d6:21:0f:dd:c1:29:ba:fc:91:53:c4:47:8e:cd:
         88:97:fd:7b:70:2c:27:1a:e6:35:74:9b:7a:4d:86:54:d3:ef:
         4b:35:33:94:55:be:18:03:ed:2e:37:6c:c4:4d:4d:8b:f9:59:
         89:4a:f2:00:43:19:e8:35:ed:43:7b:d3:92:94:19:33:0d:b7:
         3a:20:13:2c:9d:6a:5f:aa:85:a4:65:b6:e1:ad:a2:b2:92:83:
         a5:4b:79:d7:93:60:64:b1:30:f8:d6:2c:1e:19:71:29:5a:97:
         96:a4:58:fe:08:7a:ed:ba:c2:9c:59:67:e4:01:b0:ca:32:08:
         f1:b1:f4:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE4NDUxMTAvBgNVBAUTKEJDOTdGMjZGQjI3ODk2N0REM0NBMzlDNTlERDA4QzZB
MkMyMzA2RjkwHhcNMjYwMzAyMDEwNDE4WhcNMjYwMzA5MDEwNDE4WjAYMRYwFAYD
VQQDEw02OWE0ZTIxNC00ZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtUIrZlecppCJeIKOyufzldVxxMIYGCOlbok5Fen/JGIul4AHIHH66rFJQD4T
awKjOxIwhbq8lrs6vU1F7wHM8cm0HcrtoUjm1uFDb9C8RGEW4mtPwjRqlJwTZJFw
Cdyg31+RV3Vk/6cuGI71R+AMRPtLOaKqPWsIhbKZhZWwRmPMdh8zUOHPwsVlIHxn
l5CGiw6JBgT525cuwVJl9bk/dKskFhI0e8xKZGVnnHv/RvVvnlKowkI1TliGJefH
tRn7I9wVSUg2vwAjJx/ao0TDSKmZcMttpzM+g10HLwbu58VhJLdJXMLmfjbB2lb+
5VlgJRmhyWSwyz/xyKkLt6y5WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1aRNC0
g+osK19VhgyrOMTIoJPGMB8GA1UdIwQYMBaAFLyX8m+yeJZ908o5xZ3QjGosIwb5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS83QjYyQzgwODIw
Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi92SmZ5YjdKNGxuM1R5am5GbmRDTWFpd2pC
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZKZnliN0o0bG4zVHlqbkZuZENNYWl3akJ2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTg0NS83QjYyQzgwODIwQ0ExMUVDQjY2QzE0NTJDNEY5QUUwMi92SmZ5YjdKNGxu
M1R5am5GbmRDTWFpd2pCdmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAebzOeeqdpb1Me3Ai2M+hOLwzEC3ytLWE175HMb95DBoXeF29bx3WYPigTb2G
hG2FbabRDifILhK/N1Mfn1s1lLPKVR1jrO8xEt0SMhqTyr+QEWPWd0e1MRLgbdpD
x30ZSTs4utAcZvPNqnnyFCPS7YDJmIjSU51E3bwG8+zF/qtd3NYhD93BKbr8kVPE
R47NiJf9e3AsJxrmNXSbek2GVNPvSzUzlFW+GAPtLjdsxE1Ni/lZiUryAEMZ6DXt
Q3vTkpQZMw23OiATLJ1qX6qFpGW24a2ispKDpUt515NgZLEw+NYsHhlxKVqXlqRY
/gh67brCnFln5AGwyjII8bH08Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:30:20 2026 by rpki-client