Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
File:                     P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft (raw, json)
Hash identifier:          I7uYnTxjUDuGun8IMkdL0560E6aqcXUcoTZB7r0k08Q=
Subject key identifier:   B4:FC:A5:EE:57:14:C3:28:A9:AC:FA:23:81:D8:81:75:B3:E0:CD:E6
Authority key identifier: 3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F
Certificate issuer:       /CN=A9186753/serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
Manifest number:          B7
Signing time:             Sun 01 Mar 2026 08:21:30 +0000
Manifest this update:     Sun 01 Mar 2026 08:21:29 +0000
Manifest next update:     Sun 08 Mar 2026 08:21:29 +0000
Files and hashes:         1: P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl (hash: SyAOCu49oMXsdpbgGtVms+s0CqZKzCvC6VJ3g//rXrs=)
                          2: 62BBFF4A046A11F081D54156C4F9AE02.roa (hash: xpX9G0NL7p/NNncCCqEZshUQkS4i537bPo5i8cYsZqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl
                          rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186753, serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F
        Validity
            Not Before: Mar  1 08:21:29 2026 GMT
            Not After : Mar  8 08:21:29 2026 GMT
        Subject: CN=69a3f70a-69cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:01:d8:86:6c:ba:54:07:e7:5a:fa:4c:4f:
                    3e:cb:5d:aa:49:92:39:8e:35:6d:89:12:1f:66:b3:
                    db:9c:57:7b:0a:0e:c5:68:f6:5a:2f:30:06:63:09:
                    94:f8:78:45:94:5a:88:f1:b1:e3:f8:50:8d:03:eb:
                    3a:ef:9a:f0:a6:6e:25:8d:73:82:03:79:52:94:0e:
                    db:dc:2b:9e:3d:ac:47:13:6d:b9:f9:fd:0f:ab:50:
                    36:a4:6f:0e:e2:bf:7c:fa:56:bf:bc:49:59:ca:58:
                    92:e6:6b:57:af:db:53:2e:43:c4:76:73:cd:bb:f8:
                    e8:72:53:36:59:ba:d5:07:de:7c:d3:33:a1:8e:ef:
                    83:ab:11:82:01:0c:0a:01:0a:84:a6:5e:5c:2c:63:
                    8e:15:cf:1c:87:34:9c:58:f1:04:57:a6:5b:10:45:
                    b6:ed:a4:4a:9a:77:dd:e3:ae:52:fa:3a:d3:48:14:
                    73:f2:23:49:d8:8d:6f:d1:76:2d:04:a5:c7:47:65:
                    f9:cc:3d:a2:83:c1:43:a4:86:2c:a5:2b:09:1b:a9:
                    f0:f5:ce:c3:61:77:ec:3e:6b:b0:ab:7d:46:d4:d0:
                    88:09:5a:4e:26:42:7d:c5:dd:f8:c3:99:0f:34:f9:
                    b2:e8:90:21:46:af:99:51:5c:fe:f1:9e:62:96:13:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FC:A5:EE:57:14:C3:28:A9:AC:FA:23:81:D8:81:75:B3:E0:CD:E6
            X509v3 Authority Key Identifier:
                keyid:3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:26:28:4b:0d:15:8e:67:ab:2a:c3:2b:60:09:87:74:47:a2:
         30:b8:16:b9:e7:f3:2a:32:cb:10:72:1f:2d:5b:0a:82:3e:6a:
         72:75:bf:a6:d1:87:97:37:8f:e5:66:93:94:0b:e6:53:d0:4c:
         b0:1c:22:cd:30:e4:bf:08:1b:f9:0e:1f:72:1b:b4:bf:72:cc:
         4a:41:02:1a:10:56:45:ea:fe:de:8d:00:94:57:e0:31:b7:80:
         35:8b:6f:7c:81:9a:b4:da:6f:29:f3:c1:e4:07:50:42:55:16:
         80:1b:19:e3:25:4a:15:5e:c1:13:39:cf:18:05:b5:f9:43:53:
         83:8e:a6:74:12:a3:20:4c:10:05:d0:d6:2b:9d:38:81:c7:be:
         0b:67:0c:45:d9:fc:44:81:e6:25:bd:2e:1d:05:b3:0e:c3:e1:
         51:d1:ac:cb:a5:ab:6d:8b:e2:3d:43:a1:27:24:68:93:f2:0d:
         2a:f0:23:a7:0e:b0:e4:90:a3:52:c6:dc:f4:ab:a0:5c:33:c8:
         29:24:b5:9e:af:84:fd:b1:51:c0:85:c3:b3:eb:85:4c:d7:61:
         21:52:82:ef:d8:cb:ac:04:2a:91:85:0c:0d:47:98:7c:03:03:
         6c:f4:12:91:ec:b5:34:b9:af:9d:7f:c1:88:c9:47:2f:b2:7b:
         af:90:49:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY3NTMxMTAvBgNVBAUTKDNGOUZDOUQ5NDIxOThDNDcyMzM0QTM3RUFEM0RFQUI1
MDM5MkU4MkYwHhcNMjYwMzAxMDgyMTI5WhcNMjYwMzA4MDgyMTI5WjAYMRYwFAYD
VQQDEw02OWEzZjcwYS02OWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlU4B2IZsulQH51r6TE8+y12qSZI5jjVtiRIfZrPbnFd7Cg7FaPZaLzAGYwmU
+HhFlFqI8bHj+FCNA+s675rwpm4ljXOCA3lSlA7b3CuePaxHE225+f0Pq1A2pG8O
4r98+la/vElZyliS5mtXr9tTLkPEdnPNu/joclM2WbrVB9580zOhju+DqxGCAQwK
AQqEpl5cLGOOFc8chzScWPEEV6ZbEEW27aRKmnfd465S+jrTSBRz8iNJ2I1v0XYt
BKXHR2X5zD2ig8FDpIYspSsJG6nw9c7DYXfsPmuwq31G1NCICVpOJkJ9xd34w5kP
NPmy6JAhRq+ZUVz+8Z5ilhPbNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLT8pe5X
FMMoqaz6I4HYgXWz4M3mMB8GA1UdIwQYMBaAFD+fydlCGYxHIzSjfq096rUDkugv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njc1My83MjFCRDMxRTA0
NjcxMUYwODU3RTE3NjNDNEY5QUUwMi9QNV9KMlVJWmpFY2pOS04tclQzcXRRT1M2
QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A1X0oyVUlaakVjak5LTi1yVDNxdFFPUzZDOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Njc1My83MjFCRDMxRTA0NjcxMUYwODU3RTE3NjNDNEY5QUUwMi9QNV9KMlVJWmpF
Y2pOS04tclQzcXRRT1M2QzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsCYoSw0VjmerKsMrYAmHdEeiMLgWuefzKjLLEHIfLVsKgj5qcnW/ptGHlzeP
5WaTlAvmU9BMsBwizTDkvwgb+Q4fchu0v3LMSkECGhBWRer+3o0AlFfgMbeANYtv
fIGatNpvKfPB5AdQQlUWgBsZ4yVKFV7BEznPGAW1+UNTg46mdBKjIEwQBdDWK504
gce+C2cMRdn8RIHmJb0uHQWzDsPhUdGsy6WrbYviPUOhJyRok/INKvAjpw6w5JCj
Usbc9KugXDPIKSS1nq+E/bFRwIXDs+uFTNdhIVKC79jLrAQqkYUMDUeYfAMDbPQS
key1NLmvnX/BiMlHL7J7r5BJXQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:10:27 2026 by rpki-client