Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
File:                     XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json)
Hash identifier:          +55+RMjaZ6Uegu5SfgDS2DJwmMrTNV0sdiidUcOU9Gs=
Subject key identifier:   42:0F:04:72:A4:5B:85:DD:CD:2E:45:2D:F4:93:D6:D1:7F:3D:17:2E
Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44
Certificate issuer:       /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
Manifest number:          01A3
Signing time:             Sun 01 Mar 2026 05:03:33 +0000
Manifest this update:     Sun 01 Mar 2026 05:03:32 +0000
Manifest next update:     Sun 08 Mar 2026 05:03:32 +0000
Files and hashes:         1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: C/sz6yg540HVkAM7fSSO3bAp7BYiNocGt80TznL7JRM=)
                          2: 262FD0CEFE5C11EFA373D67EC4F9AE02.roa (hash: L4HLUtraFHY4UTYjlJrizNj7UnAOrnhBnN1DE6AM8rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl
                          rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F54, serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44
        Validity
            Not Before: Mar  1 05:03:32 2026 GMT
            Not After : Mar  8 05:03:32 2026 GMT
        Subject: CN=69a3c8a5-fd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:57:5a:80:ee:c3:41:86:61:c9:61:0b:05:
                    c0:77:f6:21:24:99:59:9f:b5:93:c2:fc:c3:e3:1f:
                    56:ed:c6:ab:09:72:3f:a6:53:e1:fe:c9:d3:8f:70:
                    23:15:26:83:1c:31:0e:38:be:af:64:37:85:9d:07:
                    4e:01:46:44:c0:7e:8a:ab:8b:6f:5e:5e:45:2b:a8:
                    f3:b9:5b:55:1f:10:07:d0:63:16:11:f3:f2:36:93:
                    83:1f:4e:09:0e:82:7a:ea:48:10:f1:e4:8d:e5:e2:
                    7b:ed:73:50:8f:9f:ed:7b:74:ea:60:f7:32:27:02:
                    7e:0f:84:a3:b8:31:ff:18:9e:8c:5d:9d:f0:7a:d6:
                    c1:11:ef:30:b9:25:74:18:d7:b9:b3:d1:cb:b2:14:
                    d0:5d:04:b0:59:5b:7b:b7:1b:37:6a:18:d6:c9:a9:
                    7e:98:eb:97:eb:40:66:cf:78:88:05:e3:81:ad:e3:
                    11:e0:1f:fe:88:a9:89:39:28:d3:0d:c8:62:ac:d7:
                    ce:c8:52:b5:5f:65:e5:d7:f6:47:f6:ca:6d:f5:bc:
                    8a:74:4d:b1:78:61:4d:3e:42:23:f8:94:2c:ec:91:
                    7b:41:69:49:30:fc:a0:f4:af:61:f2:06:d9:48:ef:
                    61:29:db:03:b5:99:fc:00:7c:a1:48:bf:9f:05:3d:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0F:04:72:A4:5B:85:DD:CD:2E:45:2D:F4:93:D6:D1:7F:3D:17:2E
            X509v3 Authority Key Identifier:
                keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9e:73:51:8f:7f:43:a7:c9:2d:5c:9b:9b:e4:23:be:ae:ec:
         e5:b8:17:da:19:fa:0d:f6:60:d5:91:f9:e2:e5:ad:16:2d:f6:
         b7:41:a9:b3:47:37:b6:13:ac:95:6a:57:c8:04:d6:13:5b:9e:
         92:d7:e4:92:48:4a:ce:41:e8:fc:24:4b:85:5d:35:05:e2:72:
         17:9d:30:15:5e:cd:6d:a7:7d:bd:eb:c0:5b:31:07:4b:79:2c:
         77:e5:98:68:b7:b3:2e:0d:a5:2e:97:8f:92:1e:ef:28:ad:6d:
         01:17:df:d6:a3:ee:f7:51:a6:cd:45:d6:68:dd:c1:a2:30:42:
         30:fe:bf:20:6f:d4:80:1c:97:1e:f0:d7:3c:e9:d1:cd:a1:92:
         5a:68:bb:09:fc:f6:46:4d:be:92:1f:d6:76:ae:d3:bf:1b:43:
         c4:0a:68:02:51:5e:ad:1f:8b:6a:a0:9d:26:20:7f:8b:d6:01:
         7f:c5:4c:3b:e6:8d:47:b7:17:e2:fc:71:df:e6:e2:65:6e:58:
         52:1e:b2:23:c1:a0:ee:bf:e5:57:b0:86:42:71:ab:f1:59:bc:
         6e:b9:34:4d:31:28:6c:34:f9:8d:e9:96:d7:fe:e2:c5:3a:84:
         6b:8e:77:cb:e9:ee:a6:2e:70:da:e1:35:b8:1a:c7:35:79:d6:
         1c:60:a5:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVGNTQxMTAvBgNVBAUTKDVEQjU3RUQzODYwMzlFQTY2NEQxRUZGNzU3MDczNkQ2
RjlGMDRDNDQwHhcNMjYwMzAxMDUwMzMyWhcNMjYwMzA4MDUwMzMyWjAYMRYwFAYD
VQQDDA02OWEzYzhhNS1mZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAopFXWoDuw0GGYclhCwXAd/YhJJlZn7WTwvzD4x9W7carCXI/plPh/snTj3Aj
FSaDHDEOOL6vZDeFnQdOAUZEwH6Kq4tvXl5FK6jzuVtVHxAH0GMWEfPyNpODH04J
DoJ66kgQ8eSN5eJ77XNQj5/te3TqYPcyJwJ+D4SjuDH/GJ6MXZ3wetbBEe8wuSV0
GNe5s9HLshTQXQSwWVt7txs3ahjWyal+mOuX60Bmz3iIBeOBreMR4B/+iKmJOSjT
DchirNfOyFK1X2Xl1/ZH9spt9byKdE2xeGFNPkIj+JQs7JF7QWlJMPyg9K9h8gbZ
SO9hKdsDtZn8AHyhSL+fBT3JeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEIPBHKk
W4XdzS5FLfST1tF/PRcuMB8GA1UdIwQYMBaAFF21ftOGA56mZNHv91cHNtb58ExE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1NC81MUI2RUNFNDlG
MjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5xWmswZV8zVndjMjF2bndU
RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hiVi0wNFlEbnFaazBlXzNWd2MyMXZud1RFUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUY1NC81MUI2RUNFNDlGMjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5x
WmswZV8zVndjMjF2bndURVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARp5zUY9/Q6fJLVybm+Qjvq7s5bgX2hn6DfZg1ZH54uWtFi32t0Gps0c3thOs
lWpXyATWE1uektfkkkhKzkHo/CRLhV01BeJyF50wFV7Nbad9vevAWzEHS3ksd+WY
aLezLg2lLpePkh7vKK1tARff1qPu91GmzUXWaN3BojBCMP6/IG/UgByXHvDXPOnR
zaGSWmi7Cfz2Rk2+kh/Wdq7TvxtDxApoAlFerR+LaqCdJiB/i9YBf8VMO+aNR7cX
4vxx3+biZW5YUh6yI8Gg7r/lV7CGQnGr8Vm8brk0TTEobDT5jemW1/7ixTqEa453
y+nupi5w2uE1uBrHNXnWHGClXw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:26 2026 by rpki-client