Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
File:                     lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft (raw, json)
Hash identifier:          yfZw2EmgcKia2Kt+pc604iZxhzmuZ0IeoyDr7otiXxI=
Subject key identifier:   4B:D5:80:01:EC:0B:19:D2:51:DB:7B:A7:CE:EB:14:A0:C2:79:B5:EC
Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E
Certificate issuer:       /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E
Certificate serial:       061C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
Manifest number:          0609
Signing time:             Sat 28 Feb 2026 23:27:34 +0000
Manifest this update:     Sat 28 Feb 2026 23:27:34 +0000
Manifest next update:     Sat 07 Mar 2026 23:27:34 +0000
Files and hashes:         1: lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl (hash: lnksT/RjgCjHTRFbOreKQixuDE8Rr6UyE6QcCIw/qMQ=)
                          2: 53BCB840EA4211EB846B8757C4F9AE02.roa (hash: lxZNfyimV3NQpo4JPb58fRVzNwdRpPB3SMYQ8hq+yFg=)
                          3: 368F5308A27311EFA8731822C4F9AE02.roa (hash: Hs0kfftH2V+1dVTeEFiwGCNE8QZlZWgBetHvEQLVaTU=)
                          4: 229CD24AF9FB11EB8CFF5E7DC4F9AE02.roa (hash: n04Y3sGneIDc0gFY4gtPPq0L4eOtSWnQu7Ei64M+chk=)
                          5: 37F43E66A27311EFA8731822C4F9AE02.roa (hash: vy2TZeybvxjXMBwVfAEFXRXQN3w7mLcQMjLoNDfW68Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564 (0x61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E
        Validity
            Not Before: Feb 28 23:27:34 2026 GMT
            Not After : Mar  7 23:27:34 2026 GMT
        Subject: CN=69a379e6-8e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:e4:86:03:c0:68:42:e3:c1:1c:86:f3:d3:
                    a9:3f:36:52:db:f4:6f:da:e5:4b:c6:b0:93:45:a9:
                    57:62:3a:4d:bc:e5:1d:00:36:87:35:6a:fa:71:a2:
                    c1:e0:e6:4d:97:73:f2:96:fb:a1:f4:83:8c:f0:b1:
                    44:cd:13:28:ae:6d:42:29:0a:12:90:a3:7a:6c:9c:
                    3a:85:22:8a:e1:b7:cd:3b:51:1d:74:ba:61:38:55:
                    e4:4d:f1:d0:89:e8:54:ec:a9:b3:09:82:25:da:45:
                    fc:81:a4:f8:7c:02:87:7d:be:29:a3:6b:92:a8:80:
                    1d:62:99:e5:ec:22:dd:ce:3b:c5:3b:5a:e9:3a:4e:
                    57:69:48:03:de:b4:28:3a:d1:99:c0:3a:32:1a:28:
                    05:13:d4:df:82:b0:ca:10:bc:3e:e1:a3:06:99:75:
                    51:34:d9:93:14:06:4b:42:4b:7c:57:ad:b9:52:52:
                    4d:a2:96:3e:e6:92:2d:1b:a3:05:a3:50:f9:e2:4b:
                    c8:2f:b8:39:c8:d6:a4:55:c5:d4:db:82:ee:87:da:
                    53:01:1c:55:a8:9d:be:b4:7d:ff:53:4e:ec:2a:19:
                    12:94:9c:7c:69:82:70:ce:ef:7a:0f:98:bc:2e:09:
                    aa:a3:9e:b9:9c:30:bb:cc:1e:cc:70:c6:36:0b:22:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D5:80:01:EC:0B:19:D2:51:DB:7B:A7:CE:EB:14:A0:C2:79:B5:EC
            X509v3 Authority Key Identifier:
                keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:36:41:ae:2d:63:73:c5:9d:04:fe:27:f6:de:6d:cb:c2:83:
         f6:24:db:12:c8:ec:50:23:04:01:f8:97:08:d6:02:5a:dc:13:
         41:12:f7:d3:17:63:9e:55:82:40:7c:39:a4:9b:b9:f9:4b:98:
         15:1b:7a:3b:f7:7b:7a:b2:9d:67:c5:03:7c:f8:f4:aa:1f:32:
         36:69:7a:a4:af:3b:14:b4:a6:c8:de:6e:ab:93:6e:57:c1:f4:
         77:2d:72:48:c9:7e:17:90:99:03:be:1b:61:ee:9a:40:ec:3e:
         6e:32:a9:3f:b3:38:1b:83:0d:10:25:4b:0a:a7:bf:55:a8:50:
         f6:a0:de:0a:f6:04:2e:e4:ec:f5:84:87:07:35:05:9e:83:88:
         0c:e3:94:a3:a4:68:da:c2:91:d2:ec:24:e4:2a:72:c2:13:c6:
         d5:17:e0:29:b7:ec:50:1c:bb:d8:2f:e5:de:01:88:51:d2:b8:
         07:ff:8e:58:df:20:8d:5f:86:44:16:b8:64:16:cd:81:5c:26:
         1e:38:71:4f:df:31:7b:f9:ca:5b:8d:2c:d5:71:6a:b7:13:e3:
         ad:c1:99:64:78:fc:cc:88:96:4b:6d:14:d1:cf:f6:17:d3:f5:
         7b:03:e1:b7:7d:94:19:7f:73:e7:a3:7d:fe:4d:a5:eb:29:af:
         fe:e1:35:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVENkUxMTAvBgNVBAUTKDk1MjRFQTlCODIzQzIwRkE3ODkyM0JFNjY2N0UxNEY2
QzRDM0I0N0UwHhcNMjYwMjI4MjMyNzM0WhcNMjYwMzA3MjMyNzM0WjAYMRYwFAYD
VQQDDA02OWEzNzllNi04ZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtDPkhgPAaELjwRyG89OpPzZS2/Rv2uVLxrCTRalXYjpNvOUdADaHNWr6caLB
4OZNl3Pylvuh9IOM8LFEzRMorm1CKQoSkKN6bJw6hSKK4bfNO1EddLphOFXkTfHQ
iehU7KmzCYIl2kX8gaT4fAKHfb4po2uSqIAdYpnl7CLdzjvFO1rpOk5XaUgD3rQo
OtGZwDoyGigFE9TfgrDKELw+4aMGmXVRNNmTFAZLQkt8V625UlJNopY+5pItG6MF
o1D54kvIL7g5yNakVcXU24Luh9pTARxVqJ2+tH3/U07sKhkSlJx8aYJwzu96D5i8
Lgmqo565nDC7zB7McMY2CyKGnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvVgAHs
CxnSUdt7p87rFKDCebXsMB8GA1UdIwQYMBaAFJUk6puCPCD6eJI75mZ+FPbEw7R+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS80Q0JGRjRBRURG
RjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQcDRranZtWm40VTlzVER0
SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xTVHFtNEk4SVBwNGtqdm1abjRVOXNURHRINC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUQ2RS80Q0JGRjRBRURGRjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQ
cDRranZtWm40VTlzVER0SDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcDZBri1jc8WdBP4n9t5ty8KD9iTbEsjsUCMEAfiXCNYCWtwTQRL30xdjnlWC
QHw5pJu5+UuYFRt6O/d7erKdZ8UDfPj0qh8yNml6pK87FLSmyN5uq5NuV8H0dy1y
SMl+F5CZA74bYe6aQOw+bjKpP7M4G4MNECVLCqe/VahQ9qDeCvYELuTs9YSHBzUF
noOIDOOUo6Ro2sKR0uwk5CpywhPG1RfgKbfsUBy72C/l3gGIUdK4B/+OWN8gjV+G
RBa4ZBbNgVwmHjhxT98xe/nKW40s1XFqtxPjrcGZZHj8zIiWS20U0c/2F9P1ewPh
t32UGX9z56N9/k2l6ymv/uE10g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:14 2026 by rpki-client