Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
File:                     9Avota0WsYR_wNT0cI-dQUkxq6Y.mft (raw, json)
Hash identifier:          TznXnZSZdhVRZ0jjYC8cPXyUPYjHBZOGLaEvHJ1mzus=
Subject key identifier:   CF:97:28:2D:26:C0:5A:28:F7:F7:74:5B:F8:8C:29:28:B9:75:ED:2F
Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
Certificate issuer:       /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Certificate serial:       0353
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
Manifest number:          0327
Signing time:             Sun 01 Mar 2026 02:07:41 +0000
Manifest this update:     Sun 01 Mar 2026 02:07:41 +0000
Manifest next update:     Sun 08 Mar 2026 02:07:41 +0000
Files and hashes:         1: 9Avota0WsYR_wNT0cI-dQUkxq6Y.crl (hash: 5sJFBK22tDfiSLX/d3mdoD6nVDtrlNkCE8DE6Hu7CME=)
                          2: E6E564502DD811EF8471C475C4F9AE02.roa (hash: Tr9asl+9bdm0TeSvn9r/O8sCMPe6OQ4Bqr4X3WrBuL8=)
                          3: 36660EAE679E11EFBAD37686C4F9AE02.roa (hash: xvHNzzMV7f1gxQWEGQg7Uu7grR61uCNrb99drLaVCJw=)
                          4: 6C92164E8E7111F095FEDD1FC4F9AE02.roa (hash: p9Kse7D2GRgFk2ojVpA2GrgFV3dn4x52lP6u7UEBcJM=)
                          5: 214E67EA1EF911EDAAC3AE62C4F9AE02.roa (hash: a4uhbXD/6QpvqZpvGb3TRBkEFO6veICTLlQsVLL56TI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl
                          rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851 (0x353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BCEE, serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
        Validity
            Not Before: Mar  1 02:07:41 2026 GMT
            Not After : Mar  8 02:07:41 2026 GMT
        Subject: CN=69a39f6d-a776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:64:5a:bb:8a:39:77:16:55:c8:01:a5:33:
                    29:32:cf:44:76:61:53:88:9e:2e:91:1e:71:41:9c:
                    87:2b:52:7b:ba:0d:65:37:2f:44:a9:f2:92:12:05:
                    6c:e4:fa:8e:69:7c:fd:0a:a0:40:22:a0:86:f8:d0:
                    f8:c9:82:13:84:c7:c1:04:14:a3:44:b2:49:3c:e6:
                    36:38:da:19:d4:c0:80:f6:d1:14:25:9d:42:df:0e:
                    94:ce:ab:af:bb:15:1d:08:ac:e0:b0:39:d7:62:97:
                    5b:e3:1a:17:a6:e4:9a:cc:60:60:78:63:bd:f8:b4:
                    39:5d:54:8a:77:0e:fc:a1:8f:9e:6f:8e:d3:9f:e1:
                    f8:85:24:30:ec:86:cc:9c:84:88:96:bd:57:9d:7f:
                    ed:8b:8d:e2:4b:76:d5:ed:6f:c1:a6:a2:db:a5:20:
                    c6:c3:22:3a:b9:f5:ca:9f:f4:a9:c8:b7:4c:d9:67:
                    98:02:17:60:16:cd:37:32:39:9e:ca:69:61:c9:73:
                    22:a8:99:2e:e4:35:d3:a1:91:60:25:34:d7:d1:9a:
                    23:3b:55:39:09:3c:a6:19:0d:6b:2f:93:df:f5:d3:
                    8b:e7:da:f2:46:09:0d:8f:a6:b7:39:c9:ed:61:a9:
                    74:dd:04:66:3f:0c:91:cb:9f:07:27:6c:0e:f8:c2:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:97:28:2D:26:C0:5A:28:F7:F7:74:5B:F8:8C:29:28:B9:75:ED:2F
            X509v3 Authority Key Identifier:
                keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e7:68:c2:26:25:a4:17:74:9a:49:1e:fa:c0:25:5f:98:81:
         89:59:24:91:fe:e0:61:ae:14:ca:78:0f:f1:bb:cf:69:7a:37:
         79:d5:89:a3:2a:31:3c:16:c8:3b:40:b7:23:1e:de:58:80:09:
         5e:03:79:78:a8:b3:26:56:10:4d:f6:30:c6:78:a4:ad:cf:f2:
         83:f9:a8:7a:6a:32:cc:57:b3:c0:8e:60:e0:99:6c:fe:6b:56:
         f9:a1:38:30:f4:2b:75:6b:97:48:24:a3:19:d1:89:72:f7:4b:
         04:88:48:49:2c:c6:5a:d6:e4:b9:a6:e6:d6:09:b6:a4:b5:1f:
         5a:05:1f:1e:78:6b:65:4c:21:da:8a:ae:85:32:d3:16:e5:39:
         68:2d:5c:84:e3:58:7f:63:04:2a:74:af:30:d0:6c:48:8b:1c:
         24:63:8a:c2:9d:57:03:3c:c1:36:d9:f6:72:fa:f9:6c:75:18:
         76:2d:0c:76:a3:c4:ef:06:06:95:80:4b:d1:32:80:e4:b4:a5:
         18:1d:f7:49:2f:73:66:58:54:94:1f:de:a6:7f:fe:49:11:9d:
         35:d0:f5:39:7f:28:c9:82:ad:7c:56:05:ed:f8:ec:cc:37:0c:
         74:17:8e:61:f0:60:03:2a:be:12:16:e6:b9:aa:d8:fd:87:a8:
         65:d7:b3:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJDRUUxMTAvBgNVBAUTKEY0MEJFOEI1QUQxNkIxODQ3RkMwRDRGNDcwOEY5RDQx
NDkzMUFCQTYwHhcNMjYwMzAxMDIwNzQxWhcNMjYwMzA4MDIwNzQxWjAYMRYwFAYD
VQQDDA02OWEzOWY2ZC1hNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMFkWruKOXcWVcgBpTMpMs9EdmFTiJ4ukR5xQZyHK1J7ug1lNy9EqfKSEgVs
5PqOaXz9CqBAIqCG+ND4yYIThMfBBBSjRLJJPOY2ONoZ1MCA9tEUJZ1C3w6Uzquv
uxUdCKzgsDnXYpdb4xoXpuSazGBgeGO9+LQ5XVSKdw78oY+eb47Tn+H4hSQw7IbM
nISIlr1XnX/ti43iS3bV7W/BpqLbpSDGwyI6ufXKn/SpyLdM2WeYAhdgFs03Mjme
ymlhyXMiqJku5DXToZFgJTTX0ZojO1U5CTymGQ1rL5Pf9dOL59ryRgkNj6a3Ocnt
Yal03QRmPwyRy58HJ2wO+MK3swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+XKC0m
wFoo9/d0W/iMKSi5de0vMB8GA1UdIwQYMBaAFPQL6LWtFrGEf8DU9HCPnUFJMaum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkNFRS82OEMzNTYzMDEz
RkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZUl93TlQwY0ktZFFVa3hx
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlBdm90YTBXc1lSX3dOVDBjSS1kUVVreHE2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkNFRS82OEMzNTYzMDEzRkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZ
Ul93TlQwY0ktZFFVa3hxNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACudowiYlpBd0mkke+sAlX5iBiVkkkf7gYa4UyngP8bvPaXo3edWJoyoxPBbI
O0C3Ix7eWIAJXgN5eKizJlYQTfYwxnikrc/yg/moemoyzFezwI5g4Jls/mtW+aE4
MPQrdWuXSCSjGdGJcvdLBIhISSzGWtbkuabm1gm2pLUfWgUfHnhrZUwh2oquhTLT
FuU5aC1chONYf2MEKnSvMNBsSIscJGOKwp1XAzzBNtn2cvr5bHUYdi0MdqPE7wYG
lYBL0TKA5LSlGB33SS9zZlhUlB/epn/+SRGdNdD1OX8oyYKtfFYF7fjszDcMdBeO
YfBgAyq+EhbmuarY/YeoZdezug==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:00:27 2026 by rpki-client