Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
File:                     vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json)
Hash identifier:          k3ERoN10cBtKkx1fSqPZpxm4t6ra504p9SovaHW/PD0=
Subject key identifier:   63:55:1A:87:0C:05:51:B4:BA:95:3A:A8:AC:C6:4B:49:E0:C4:89:25
Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
Certificate issuer:       /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
Manifest number:          0BEB
Signing time:             Sat 28 Feb 2026 20:26:10 +0000
Manifest this update:     Sat 28 Feb 2026 20:26:09 +0000
Manifest next update:     Sat 07 Mar 2026 20:26:09 +0000
Files and hashes:         1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: 49q3U+ui5CUvcx0ry+qVrQenl4u6oBxRud2cQuniQZY=)
                          2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: A1jEmvYmaWLQVLC3lKrKCjgOEWn5/laaNWB/FSQRMc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
        Validity
            Not Before: Feb 28 20:26:09 2026 GMT
            Not After : Mar  7 20:26:09 2026 GMT
        Subject: CN=69a34f62-1012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:eb:29:56:0c:81:ab:e3:ab:74:bf:24:17:22:
                    c9:44:a1:13:7a:ac:c8:c4:20:bc:6d:e8:23:0a:31:
                    13:95:7b:8f:37:9c:ad:82:94:1f:94:ea:90:b0:69:
                    ce:bc:da:54:93:75:79:c4:7e:b1:13:c0:e8:c3:32:
                    9f:f3:8e:e8:ce:cb:c3:8c:7d:ba:11:b1:da:28:82:
                    eb:eb:b6:e0:8d:3d:a7:c6:01:06:ee:c3:30:c3:0d:
                    bc:60:7c:44:b0:8f:3d:6a:e3:d1:0a:24:82:7b:4c:
                    ef:99:a3:25:66:75:db:4d:a6:61:7c:87:f2:7d:85:
                    6c:17:dc:57:13:e0:b7:f5:69:f7:b7:f8:b4:20:4c:
                    7b:77:89:5e:ae:18:3d:3e:38:62:b1:15:66:5d:00:
                    5d:fc:9b:8c:72:09:96:47:0d:f8:9c:37:19:cc:e2:
                    e6:a1:e7:17:ac:60:88:ca:56:1c:3e:36:07:74:c5:
                    72:b2:00:0a:13:28:01:a8:90:e0:68:1a:ad:b2:3c:
                    68:68:98:4b:e9:c1:93:c1:1b:37:dc:7d:d2:9e:da:
                    1c:8f:8d:50:19:aa:e0:fd:81:96:8d:52:11:6d:b1:
                    87:95:0f:72:f0:89:db:79:ff:82:a0:e0:df:2c:b4:
                    98:91:10:40:13:c4:46:18:76:9c:f2:32:c5:ab:1c:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:55:1A:87:0C:05:51:B4:BA:95:3A:A8:AC:C6:4B:49:E0:C4:89:25
            X509v3 Authority Key Identifier:
                keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:69:20:d4:a5:04:90:9f:a2:9b:ec:b6:e9:e3:46:7b:8f:b9:
         5d:7c:04:21:b8:51:aa:c6:21:34:1b:4e:68:2f:80:fa:4f:1a:
         ee:9d:78:53:5c:16:63:92:6e:3a:c2:54:02:19:e8:e5:0b:6a:
         43:f9:ea:ef:53:50:0a:a9:dd:0b:68:5d:08:27:6d:fa:bc:c8:
         e8:b1:34:52:55:55:88:c6:e4:c6:e5:49:f9:98:7a:f4:ad:16:
         4b:c9:fe:84:95:16:98:a3:b5:22:52:e4:06:76:38:b5:51:96:
         ee:6c:48:05:10:75:d2:6f:08:19:49:63:c2:e9:2a:a6:18:ad:
         56:f5:ef:44:e8:1a:f8:5d:63:28:eb:46:62:d8:8e:49:58:3f:
         df:1a:7f:c2:e8:20:8f:31:5e:9f:b8:15:0b:8d:6a:69:93:89:
         3d:62:c6:05:03:5a:fb:05:29:c9:41:29:06:61:9d:1f:7f:25:
         f0:54:06:f2:15:0e:e1:16:c8:cb:2c:94:ef:b4:47:cf:87:4b:
         2c:56:2e:30:b2:59:e3:2c:88:44:3f:8a:00:09:04:73:40:34:
         63:db:35:e5:81:28:a0:23:49:69:47:b2:cb:0a:22:f6:4a:25:
         bb:fc:c8:33:6d:ce:15:fc:3f:48:09:d2:ca:b8:b7:05:98:fa:
         68:49:57:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE3RTYxMTAvBgNVBAUTKEJEMzdGMUQ0MDc0N0JFNkM1RjVDNkJBMzMwN0RGNjU2
MEFCNjgxQTMwHhcNMjYwMjI4MjAyNjA5WhcNMjYwMzA3MjAyNjA5WjAYMRYwFAYD
VQQDDA02OWEzNGY2Mi0xMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2+spVgyBq+OrdL8kFyLJRKETeqzIxCC8begjCjETlXuPN5ytgpQflOqQsGnO
vNpUk3V5xH6xE8DowzKf847ozsvDjH26EbHaKILr67bgjT2nxgEG7sMwww28YHxE
sI89auPRCiSCe0zvmaMlZnXbTaZhfIfyfYVsF9xXE+C39Wn3t/i0IEx7d4lerhg9
PjhisRVmXQBd/JuMcgmWRw34nDcZzOLmoecXrGCIylYcPjYHdMVysgAKEygBqJDg
aBqtsjxoaJhL6cGTwRs33H3Sntocj41QGarg/YGWjVIRbbGHlQ9y8Inbef+CoODf
LLSYkRBAE8RGGHac8jLFqxxlJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGNVGocM
BVG0upU6qKzGS0ngxIklMB8GA1UdIwQYMBaAFL038dQHR75sX1xrozB99lYKtoGj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz
QjMxMUVBQjE5OENFMERDNEY5QUUwMi92VGZ4MUFkSHZteGZYR3VqTUgzMlZncTJn
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZUZngxQWRIdm14ZlhHdWpNSDMyVmdxMmdhTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi92VGZ4MUFkSHZt
eGZYR3VqTUgzMlZncTJnYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQGkg1KUEkJ+im+y26eNGe4+5XXwEIbhRqsYhNBtOaC+A+k8a7p14U1wWY5Ju
OsJUAhno5QtqQ/nq71NQCqndC2hdCCdt+rzI6LE0UlVViMbkxuVJ+Zh69K0WS8n+
hJUWmKO1IlLkBnY4tVGW7mxIBRB10m8IGUljwukqphitVvXvROga+F1jKOtGYtiO
SVg/3xp/wuggjzFen7gVC41qaZOJPWLGBQNa+wUpyUEpBmGdH38l8FQG8hUO4RbI
yyyU77RHz4dLLFYuMLJZ4yyIRD+KAAkEc0A0Y9s15YEooCNJaUeyywoi9kolu/zI
M23OFfw/SAnSyri3BZj6aElXlQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:13 2026 by rpki-client