Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File:                     V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier:          wonkkSy80LgVq5cyPWNC1zpx3e5qr5rMlPT0tN7DWnU=
Subject key identifier:   FB:7E:C6:5E:3B:18:A7:53:4F:12:91:BE:6F:59:47:84:1F:79:5F:CA
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer:       /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number:          0109
Signing time:             Sun 01 Mar 2026 07:09:55 +0000
Manifest this update:     Sun 01 Mar 2026 07:09:54 +0000
Manifest next update:     Sun 08 Mar 2026 07:09:54 +0000
Files and hashes:         1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: c6iTF9hF5P6GbmuSrWxF3XTy8PrymVGrxRYcvco/p28=)
                          2: 989991AAF7BB11F09FD41D305A6F56BC.roa (hash: 3v27BridXyOlb5DWU9W0bm/B0WuHQDXS6oikfNd7mWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
                          rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
        Validity
            Not Before: Mar  1 07:09:54 2026 GMT
            Not After : Mar  8 07:09:54 2026 GMT
        Subject: CN=69a3e643-ee93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ba:b8:3d:be:4e:10:c0:d3:50:99:ce:f3:e2:
                    52:6f:e0:78:6f:0d:dd:45:25:27:7b:3e:05:b7:3a:
                    96:06:fa:51:24:17:bc:f4:2f:34:f2:d6:bc:d3:25:
                    f8:59:a1:9f:48:67:1e:76:6e:fb:68:ad:86:4d:45:
                    ae:32:a7:c8:2d:b7:9c:6e:9a:a2:1c:3f:d6:76:c0:
                    0b:7a:49:ba:76:a3:a5:32:01:ee:93:c1:fe:9d:72:
                    2a:08:28:4e:d0:e1:12:f3:ba:ab:f2:db:80:9d:92:
                    5a:b6:b5:4f:a8:6e:bb:76:05:b2:7e:6c:f5:31:70:
                    f5:e8:a7:46:96:a7:d6:b6:34:8c:fc:11:0a:ac:1d:
                    64:a4:b2:23:96:7f:c8:c1:26:75:14:16:1e:7c:aa:
                    c4:ca:09:d5:cd:ca:38:56:bb:e9:8d:09:c3:6e:c7:
                    27:81:9f:5a:e4:0e:b0:0b:ec:d2:13:1e:9b:c8:7d:
                    50:1a:36:b2:93:be:e2:6f:4f:c0:7f:ed:88:1a:00:
                    a1:b0:42:b4:d8:50:eb:6c:32:64:9f:41:3c:08:07:
                    1c:65:fa:a9:b2:b7:57:77:b8:0c:12:26:2d:52:9b:
                    0b:11:67:f4:1b:3a:24:7c:f3:87:f2:65:71:33:3a:
                    99:34:36:f2:66:4f:c2:d5:b9:dc:d6:5c:10:42:e3:
                    85:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7E:C6:5E:3B:18:A7:53:4F:12:91:BE:6F:59:47:84:1F:79:5F:CA
            X509v3 Authority Key Identifier:
                keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1e:0a:ca:ff:c3:4c:17:f9:b6:8e:f2:7f:c9:4a:a7:49:f4:
         0e:6d:f9:b4:76:c6:00:3c:b0:8c:26:e6:c3:ff:81:3d:1a:89:
         1a:14:e8:4f:44:b4:3e:0e:9a:02:bb:3c:15:41:04:55:67:64:
         43:7b:cb:b7:91:15:21:3f:75:b5:1f:c7:0a:d4:eb:0e:b9:c1:
         05:97:0c:fe:f9:03:4e:6a:48:3d:fe:a5:19:a0:bb:ee:94:05:
         db:d7:23:44:e3:2f:45:d6:e0:ac:ce:6e:e3:34:11:23:db:82:
         12:32:88:ef:8d:ae:97:5a:72:2d:ab:d8:9f:37:3c:19:0a:72:
         d4:fd:52:2b:05:5d:89:a2:f6:b6:8d:c2:7e:48:74:7a:fd:83:
         6d:2e:04:d2:1b:6e:50:79:9c:a4:8b:a6:ad:70:aa:51:00:59:
         4a:0f:91:3a:ff:40:5a:42:a6:14:9d:a5:44:11:af:82:c2:21:
         42:9a:0a:37:9d:7a:9d:2a:ab:36:d4:06:aa:fe:27:89:de:33:
         46:4a:0d:a4:90:10:d9:58:43:78:2b:4a:ef:f9:d8:8a:a0:79:
         60:1c:07:a7:b1:0e:11:6d:b0:c8:1e:00:ca:92:7a:f1:b6:6f:
         72:78:9f:08:cd:f6:5a:98:ea:19:47:9e:2e:78:6a:18:ec:b5:
         e9:8c:bb:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI3QzUxMTAvBgNVBAUTKDU3NUE2RUQzMEMzNzNBRDQzNEQxNUE2NjVEREEyRTc2
NEVDODlBQ0EwHhcNMjYwMzAxMDcwOTU0WhcNMjYwMzA4MDcwOTU0WjAYMRYwFAYD
VQQDEw02OWEzZTY0My1lZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoLq4Pb5OEMDTUJnO8+JSb+B4bw3dRSUnez4FtzqWBvpRJBe89C808ta80yX4
WaGfSGcedm77aK2GTUWuMqfILbecbpqiHD/WdsALekm6dqOlMgHuk8H+nXIqCChO
0OES87qr8tuAnZJatrVPqG67dgWyfmz1MXD16KdGlqfWtjSM/BEKrB1kpLIjln/I
wSZ1FBYefKrEygnVzco4VrvpjQnDbscngZ9a5A6wC+zSEx6byH1QGjayk77ib0/A
f+2IGgChsEK02FDrbDJkn0E8CAccZfqpsrdXd7gMEiYtUpsLEWf0GzokfPOH8mVx
MzqZNDbyZk/C1bnc1lwQQuOFvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPt+xl47
GKdTTxKRvm9ZR4QfeV/KMB8GA1UdIwQYMBaAFFdabtMMNzrUNNFaZl3aLnZOyJrK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdDNS9EMDY1QUJCNDhB
RDkxMUVGOTgxQzgyODNDNEY5QUUwMi9WMXB1MHd3M090UTAwVnBtWGRvdWRrN0lt
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1YxcHUwd3czT3RRMDBWcG1YZG91ZGs3SW1zby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjdDNS9EMDY1QUJCNDhBRDkxMUVGOTgxQzgyODNDNEY5QUUwMi9WMXB1MHd3M090
UTAwVnBtWGRvdWRrN0ltc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjR4Kyv/DTBf5to7yf8lKp0n0Dm35tHbGADywjCbmw/+BPRqJGhToT0S0Pg6a
Ars8FUEEVWdkQ3vLt5EVIT91tR/HCtTrDrnBBZcM/vkDTmpIPf6lGaC77pQF29cj
ROMvRdbgrM5u4zQRI9uCEjKI742ul1pyLavYnzc8GQpy1P1SKwVdiaL2to3Cfkh0
ev2DbS4E0htuUHmcpIumrXCqUQBZSg+ROv9AWkKmFJ2lRBGvgsIhQpoKN516nSqr
NtQGqv4nid4zRkoNpJAQ2VhDeCtK7/nYiqB5YBwHp7EOEW2wyB4AypJ68bZvcnif
CM32WpjqGUeeLnhqGOy16Yy7Hg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:02 2026 by rpki-client