Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
File:                     Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json)
Hash identifier:          sGluoJ5VuH73n2TZaoJc1s2anoQJGpzaGui9D4sjgCI=
Subject key identifier:   BD:77:52:EE:DA:16:46:F3:9E:4C:D5:25:0B:2F:C8:81:99:34:D6:C3
Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
Certificate issuer:       /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Certificate serial:       0AD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
Manifest number:          0AC5
Signing time:             Mon 02 Mar 2026 02:16:59 +0000
Manifest this update:     Mon 02 Mar 2026 02:16:57 +0000
Manifest next update:     Mon 09 Mar 2026 02:16:57 +0000
Files and hashes:         1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: 9SdlicOpK1Z9p0BsTGT9iWLCWbT+Mxn+UFKei/ZeV/Y=)
                          2: 74637BD8AB5911F0A8E57D4AC4F9AE02.roa (hash: th+/tvMvg+ad5+YQ/zoIufkXoQMlFYiSs+rYqVFCmXs=)
                          3: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: dcrlUq/LfqIpPMteaZR03KFsAdJIOdisOuX79mITHI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
                          rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2773 (0xad5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
        Validity
            Not Before: Mar  2 02:16:57 2026 GMT
            Not After : Mar  9 02:16:57 2026 GMT
        Subject: CN=69a4f31b-177e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:06:30:c6:e2:77:be:61:db:90:43:f6:80:45:
                    19:7f:4b:47:68:9d:93:6d:67:55:74:d1:53:ba:06:
                    e4:66:5b:97:c5:3f:d2:b2:62:9a:03:df:c7:71:91:
                    4b:48:8c:b1:e8:1f:fe:6b:05:49:d5:88:4b:1d:52:
                    72:d6:02:d6:0d:72:8e:12:05:d1:d2:37:84:1c:f7:
                    0a:97:94:9c:11:ca:12:05:76:e8:9b:97:13:37:23:
                    74:6d:9e:ab:86:9d:6d:a4:86:fd:1f:78:3b:9e:e5:
                    b5:a1:94:7d:6e:39:6e:be:9d:b6:1d:6f:75:47:5d:
                    d3:22:b0:20:bc:15:89:70:d4:f5:e0:5e:90:6f:7d:
                    2d:0a:4b:9c:6e:1d:03:56:d6:30:14:ee:ae:74:35:
                    20:c3:8b:b5:06:9f:39:90:07:ba:fc:7c:1a:44:83:
                    d3:09:11:28:63:a9:fd:47:cd:30:b6:e5:9b:2f:31:
                    1f:8b:6e:a5:c9:2c:d3:de:d5:f3:cd:7d:80:41:50:
                    bc:68:4c:9b:5f:2f:c4:ac:e9:ce:b1:e8:97:09:27:
                    7a:37:03:73:36:53:f3:77:ef:91:a0:fb:ff:6a:22:
                    25:d5:65:d6:b9:57:5d:e9:17:84:bc:f9:96:06:4e:
                    a5:b5:e7:40:3e:9c:75:02:41:b5:e2:ed:76:e3:19:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:77:52:EE:DA:16:46:F3:9E:4C:D5:25:0B:2F:C8:81:99:34:D6:C3
            X509v3 Authority Key Identifier:
                keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d0:ad:bd:97:24:1e:a0:f6:61:a0:9c:e4:d2:40:84:77:e4:
         0c:71:9f:6e:9d:e5:bb:8b:9d:84:f2:41:ac:53:4a:95:09:ea:
         80:88:c9:98:79:a6:d6:ab:aa:72:87:df:e6:04:86:f0:ae:a6:
         f1:ab:d2:5d:e9:17:b3:24:9f:d5:70:a3:ae:24:5f:7c:37:e2:
         20:c2:bd:18:42:59:dc:c3:44:63:fd:d4:ec:8d:e4:10:28:16:
         17:72:fb:2b:87:58:5b:6a:dd:87:42:5d:fa:67:34:b8:23:0a:
         fe:e3:65:52:ca:b0:d1:37:d4:5e:0d:03:a3:e3:a4:eb:27:50:
         e6:ba:22:eb:98:a2:8c:b8:7c:2d:06:41:fd:ad:79:da:d2:34:
         91:a4:ef:23:c4:24:b9:aa:90:4c:64:53:69:44:7b:7f:a6:cc:
         62:ea:07:df:e1:26:a4:4f:ef:08:5e:0a:17:60:11:6c:bb:5b:
         ce:30:ac:eb:36:7d:21:a7:6f:b8:61:2f:eb:93:ba:b5:c8:9d:
         34:5d:ae:61:af:57:09:69:5c:6e:cc:33:3f:0d:e8:0a:50:a0:
         4f:63:71:c8:b5:10:10:e5:0c:2d:fd:ff:b6:2a:75:ba:43:24:
         cf:32:41:bb:23:57:38:e3:5c:7b:0d:2d:5f:70:85:ae:81:74:
         cb:4b:68:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY1MzcxMTAvBgNVBAUTKDNFQ0VFQUZFOEFDN0I0QjEzOEUyODQ1Rjc4NjEyRDkz
RDVDNTMwQzYwHhcNMjYwMzAyMDIxNjU3WhcNMjYwMzA5MDIxNjU3WjAYMRYwFAYD
VQQDEw02OWE0ZjMxYi0xNzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlwYwxuJ3vmHbkEP2gEUZf0tHaJ2TbWdVdNFTugbkZluXxT/SsmKaA9/HcZFL
SIyx6B/+awVJ1YhLHVJy1gLWDXKOEgXR0jeEHPcKl5ScEcoSBXbom5cTNyN0bZ6r
hp1tpIb9H3g7nuW1oZR9bjluvp22HW91R13TIrAgvBWJcNT14F6Qb30tCkucbh0D
VtYwFO6udDUgw4u1Bp85kAe6/HwaRIPTCREoY6n9R80wtuWbLzEfi26lySzT3tXz
zX2AQVC8aEybXy/ErOnOseiXCSd6NwNzNlPzd++RoPv/aiIl1WXWuVdd6ReEvPmW
Bk6ltedAPpx1AkG14u124xnI3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL13Uu7a
FkbznkzVJQsvyIGZNNbDMB8GA1UdIwQYMBaAFD7O6v6Kx7SxOOKEX3hhLZPVxTDG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUzNy9CRUIwRDkxQTZE
OUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRMRTQ0b1JmZUdFdGs5WEZN
TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BzN3Ffb3JIdExFNDRvUmZlR0V0azlYRk1NWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjUzNy9CRUIwRDkxQTZEOUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRM
RTQ0b1JmZUdFdGs5WEZNTVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWdCtvZckHqD2YaCc5NJAhHfkDHGfbp3lu4udhPJBrFNKlQnqgIjJmHmm1quq
coff5gSG8K6m8avSXekXsySf1XCjriRffDfiIMK9GEJZ3MNEY/3U7I3kECgWF3L7
K4dYW2rdh0Jd+mc0uCMK/uNlUsqw0TfUXg0Do+Ok6ydQ5roi65iijLh8LQZB/a15
2tI0kaTvI8QkuaqQTGRTaUR7f6bMYuoH3+EmpE/vCF4KF2ARbLtbzjCs6zZ9Iadv
uGEv65O6tcidNF2uYa9XCWlcbswzPw3oClCgT2NxyLUQEOUMLf3/tip1ukMkzzJB
uyNXOONcew0tX3CFroF0y0toiA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:12 2026 by rpki-client