Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
File:                     FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json)
Hash identifier:          JaZCDXqkBex2NDIvK1tRstnhDc8PXGHFoT1rt7imr/c=
Subject key identifier:   37:CE:F9:51:0F:A4:BF:D0:A6:5D:0E:6F:62:72:22:B2:E3:B7:82:C8
Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45
Certificate issuer:       /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
Certificate serial:       06F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
Manifest number:          06F0
Signing time:             Mon 02 Mar 2026 02:53:48 +0000
Manifest this update:     Mon 02 Mar 2026 02:53:46 +0000
Manifest next update:     Mon 09 Mar 2026 02:53:46 +0000
Files and hashes:         1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: HtNUdY9SY8RqQh0VabjDbu/jqJ63PDAJji4RPHo+JIY=)
                          2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: dTa5Sv3QyKZeyYh7kTFM/PjTqogHVEan9r70oy/WWU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl
                          rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1784 (0x6f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
        Validity
            Not Before: Mar  2 02:53:46 2026 GMT
            Not After : Mar  9 02:53:46 2026 GMT
        Subject: CN=69a4fbbc-64df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:21:8b:d3:62:25:8a:17:2b:3d:70:2d:f2:d4:
                    35:4d:1d:02:70:c8:3e:18:c4:af:c6:d0:85:b7:2f:
                    4c:3e:1a:a1:c0:06:30:03:7a:36:0e:ca:17:9a:f8:
                    8f:ba:bd:34:ea:59:15:c0:c8:5c:2e:68:1d:cc:9b:
                    55:8e:74:0a:b9:ee:f3:c3:c8:f2:af:2f:d5:b2:be:
                    a5:8c:86:c3:60:8a:de:e0:e3:13:34:3f:57:60:92:
                    ca:bc:d2:ca:a2:66:9e:7f:16:0f:11:62:47:68:d3:
                    be:29:55:75:e7:05:2c:0a:70:b2:54:d5:d7:7b:af:
                    20:27:bc:aa:5b:8a:d5:b2:78:5a:9b:67:fa:90:3b:
                    db:f2:66:c3:20:da:90:4e:90:35:bf:fb:9a:f6:7b:
                    72:63:41:3f:48:66:3b:99:9c:d2:9d:73:68:bb:b5:
                    59:01:35:69:56:37:c1:e1:24:d3:2a:68:5b:9a:a8:
                    34:da:02:b4:26:fb:3f:4e:ae:89:35:23:78:bc:3d:
                    15:2f:9e:0d:15:83:2a:7c:dd:9f:00:19:ed:3d:66:
                    09:c2:12:b2:98:ef:fd:ce:e6:ec:68:89:0b:a0:94:
                    ce:fb:fd:d3:ce:35:53:9e:d6:43:cc:ff:bb:bf:34:
                    9d:9d:c1:d2:fc:34:03:55:b2:0c:19:bd:5d:65:d6:
                    34:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CE:F9:51:0F:A4:BF:D0:A6:5D:0E:6F:62:72:22:B2:E3:B7:82:C8
            X509v3 Authority Key Identifier:
                keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:58:ad:c3:06:27:12:24:65:de:7a:cd:28:63:82:86:27:25:
         40:09:4d:21:64:fb:bb:da:03:a6:27:6f:4e:ef:f7:71:1c:2a:
         34:c7:59:49:b8:d1:02:db:74:ae:73:fa:5c:14:57:9e:56:cd:
         7f:21:1f:28:91:38:5d:b0:99:ec:a1:19:f1:f9:89:37:ee:4e:
         5b:ee:32:1a:30:e5:e5:79:cc:37:59:59:7b:ab:0f:23:f2:45:
         4b:c6:72:77:07:90:2e:29:be:d3:3e:ae:84:56:ca:b8:76:61:
         0a:36:e3:aa:51:b9:ee:cf:31:d7:f8:06:51:b3:1c:bc:db:96:
         22:86:4a:f3:2c:20:06:aa:af:60:01:30:c7:ed:82:10:86:a5:
         a8:a5:e4:93:ee:d0:bb:96:10:40:e8:5f:d7:3b:87:6b:88:73:
         4f:f9:bc:3a:fd:e8:6c:11:e2:b5:53:f3:df:a6:a1:09:4e:75:
         e4:3b:68:4c:a0:29:98:7b:04:14:69:ae:77:8a:67:cd:64:5d:
         c0:bc:6f:de:8a:f8:c3:cf:92:79:d4:b5:b6:d8:ab:b9:58:39:
         58:70:fc:e4:68:82:1d:80:30:a7:1f:64:01:aa:cd:21:fc:14:
         10:7c:81:a5:62:0c:bd:b3:f9:0b:ec:e8:5b:94:13:1a:9f:b6:
         46:35:f0:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNDRjIxMTAvBgNVBAUTKDE0NDdENDRCNDlGNzkwNkRDNjM3MzFBNUQ5OEQ4NTJF
QzEwQjc3NDUwHhcNMjYwMzAyMDI1MzQ2WhcNMjYwMzA5MDI1MzQ2WjAYMRYwFAYD
VQQDEw02OWE0ZmJiYy02NGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCGL02IlihcrPXAt8tQ1TR0CcMg+GMSvxtCFty9MPhqhwAYwA3o2DsoXmviP
ur006lkVwMhcLmgdzJtVjnQKue7zw8jyry/Vsr6ljIbDYIre4OMTND9XYJLKvNLK
omaefxYPEWJHaNO+KVV15wUsCnCyVNXXe68gJ7yqW4rVsnham2f6kDvb8mbDINqQ
TpA1v/ua9ntyY0E/SGY7mZzSnXNou7VZATVpVjfB4STTKmhbmqg02gK0Jvs/Tq6J
NSN4vD0VL54NFYMqfN2fABntPWYJwhKymO/9zubsaIkLoJTO+/3TzjVTntZDzP+7
vzSdncHS/DQDVbIMGb1dZdY0dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfO+VEP
pL/Qpl0Ob2JyIrLjt4LIMB8GA1UdIwQYMBaAFBRH1EtJ95BtxjcxpdmNhS7BC3dF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NGMi8xQUU5MDM0Njgx
RUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tHM0dOekdsMlkyRkxzRUxk
MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZFZlVTMG4za0czR056R2wyWTJGTHNFTGQwVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0NGMi8xQUU5MDM0NjgxRUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tH
M0dOekdsMlkyRkxzRUxkMFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW1itwwYnEiRl3nrNKGOChiclQAlNIWT7u9oDpidvTu/3cRwqNMdZSbjRAtt0
rnP6XBRXnlbNfyEfKJE4XbCZ7KEZ8fmJN+5OW+4yGjDl5XnMN1lZe6sPI/JFS8Zy
dweQLim+0z6uhFbKuHZhCjbjqlG57s8x1/gGUbMcvNuWIoZK8ywgBqqvYAEwx+2C
EIalqKXkk+7Qu5YQQOhf1zuHa4hzT/m8Ov3obBHitVPz36ahCU515DtoTKApmHsE
FGmud4pnzWRdwLxv3or4w8+SedS1ttiruVg5WHD85GiCHYAwpx9kAarNIfwUEHyB
pWIMvbP5C+zoW5QTGp+2RjXwQQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:18 2026 by rpki-client