Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File:                     I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier:          XE7CBuKFM5uYUWVPR3ZFHOH1jk1QTP1SwHTXITzbOnI=
Subject key identifier:   F5:12:22:F0:7D:0A:65:0B:25:42:75:9C:F4:F1:F2:35:01:4B:F5:19
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer:       /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial:       0CB4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number:          0C9C
Signing time:             Sat 28 Feb 2026 18:44:32 +0000
Manifest this update:     Sat 28 Feb 2026 18:44:31 +0000
Manifest next update:     Sat 07 Mar 2026 18:44:31 +0000
Files and hashes:         1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: QByOJe/G5zpKrSDnvsLldkRxH4fJ48Vs/AXzhWbdUEs=)
                          2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: etUn3zlWR2Zw860kX3JarECD9IQFwIx8V6PaqYCHfgs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
                          rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3252 (0xcb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
        Validity
            Not Before: Feb 28 18:44:31 2026 GMT
            Not After : Mar  7 18:44:31 2026 GMT
        Subject: CN=69a33790-b4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:af:63:89:c9:f7:44:fa:49:0b:13:aa:17:
                    86:be:9e:58:b8:ad:86:c3:c8:20:7a:32:04:37:fe:
                    cd:d0:c2:37:23:ab:84:d1:6d:2a:3d:a8:91:12:13:
                    e1:da:99:f5:56:e7:75:50:42:1e:2c:2c:6e:54:12:
                    e3:9d:df:76:4a:ad:d2:1b:af:57:58:5e:04:a6:86:
                    90:71:0b:c3:b7:ba:66:72:77:cf:eb:a1:dc:ad:f0:
                    54:35:5a:5e:43:b0:87:5d:a7:07:c3:a1:ec:8e:ce:
                    b0:0f:5d:da:7b:ec:cc:63:b8:20:80:3e:84:3c:53:
                    63:06:55:b5:d4:cc:fe:6a:42:ed:30:df:0b:bb:dd:
                    85:a0:60:8d:f1:37:83:b7:b8:e7:6f:54:6d:86:e8:
                    47:74:1f:da:65:cb:b2:28:c0:65:f7:3a:99:b3:00:
                    66:ee:1a:e0:8e:18:d5:06:15:31:ae:6b:59:9d:d8:
                    14:25:1a:82:a2:55:ad:67:55:56:54:36:26:1c:2f:
                    5d:85:bb:a7:51:b0:5a:5f:6e:c9:40:34:a7:8d:31:
                    0e:9d:36:e5:a0:ff:17:e0:b2:e3:80:dd:56:f3:02:
                    d7:a5:39:b6:4b:a5:68:78:6f:94:cb:1b:96:df:a1:
                    f2:7e:1d:2c:cb:f9:ef:9d:5f:ae:32:61:92:b8:b8:
                    73:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:12:22:F0:7D:0A:65:0B:25:42:75:9C:F4:F1:F2:35:01:4B:F5:19
            X509v3 Authority Key Identifier:
                keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1d:3e:65:50:4c:bb:1f:1a:a0:2f:22:7c:1a:30:d4:10:bd:
         e8:87:5b:3d:bb:46:8a:ec:de:27:b6:cc:a5:d5:e5:f0:b9:2a:
         eb:a5:fc:d9:42:7a:ca:88:1f:27:e1:63:79:fd:d7:80:46:a0:
         9f:88:82:39:a1:4d:f7:9c:80:3b:5c:b8:c4:dc:ac:50:40:ca:
         4d:70:f4:11:e0:fe:a5:8f:0b:c2:29:3a:5c:ba:89:4e:1a:8f:
         03:4e:42:51:34:d0:3b:21:50:02:10:56:d2:cc:e7:77:1a:1e:
         b7:92:a2:69:9c:a2:79:a9:ea:6e:6a:5f:f0:6e:a7:d0:f6:30:
         e5:89:34:38:1d:48:f1:27:fe:e8:9a:ed:7e:7d:5b:ec:10:b9:
         ba:5c:f0:0c:41:d8:0d:33:f6:42:2c:ff:ac:a8:7d:27:a7:25:
         7a:01:1c:f9:a6:13:8d:43:40:f9:7e:3c:ba:e7:b0:90:78:ec:
         fc:ec:b5:8c:d1:3d:d8:e4:cb:72:9f:a4:14:e7:65:41:3d:cf:
         60:d1:20:e1:35:93:c2:06:42:96:f5:2e:1c:37:1e:42:d6:c7:
         97:d0:e2:8d:7e:2d:9d:28:3f:3e:dc:37:ca:5c:e8:29:4c:d5:
         89:52:53:41:ad:7e:34:ab:76:a4:bd:b2:3e:82:b5:70:3a:6e:
         cd:b5:f5:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5
OTI1RkJENEYwHhcNMjYwMjI4MTg0NDMxWhcNMjYwMzA3MTg0NDMxWjAYMRYwFAYD
VQQDDA02OWEzMzc5MC1iNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmhKvY4nJ90T6SQsTqheGvp5YuK2Gw8ggejIEN/7N0MI3I6uE0W0qPaiREhPh
2pn1Vud1UEIeLCxuVBLjnd92Sq3SG69XWF4EpoaQcQvDt7pmcnfP66HcrfBUNVpe
Q7CHXacHw6Hsjs6wD13ae+zMY7gggD6EPFNjBlW11Mz+akLtMN8Lu92FoGCN8TeD
t7jnb1RthuhHdB/aZcuyKMBl9zqZswBm7hrgjhjVBhUxrmtZndgUJRqColWtZ1VW
VDYmHC9dhbunUbBaX27JQDSnjTEOnTbloP8X4LLjgN1W8wLXpTm2S6VoeG+UyxuW
36Hyfh0sy/nvnV+uMmGSuLhzlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUSIvB9
CmULJUJ1nPTx8jUBS/UZMB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0
MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2
VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj
TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaB0+ZVBMux8aoC8ifBow1BC96IdbPbtGiuzeJ7bMpdXl8Lkq66X82UJ6yogf
J+Fjef3XgEagn4iCOaFN95yAO1y4xNysUEDKTXD0EeD+pY8Lwik6XLqJThqPA05C
UTTQOyFQAhBW0szndxoet5KiaZyieanqbmpf8G6n0PYw5Yk0OB1I8Sf+6Jrtfn1b
7BC5ulzwDEHYDTP2Qiz/rKh9J6clegEc+aYTjUNA+X48uuewkHjs/Oy1jNE92OTL
cp+kFOdlQT3PYNEg4TWTwgZClvUuHDceQtbHl9DijX4tnSg/Ptw3ylzoKUzViVJT
Qa1+NKt2pL2yPoK1cDpuzbX1jg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:53 2026 by rpki-client