Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
File:                     f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json)
Hash identifier:          nlE/ttk8wuxTNj1n3jjKndsISawya3x2qSdQEX0XxWk=
Subject key identifier:   9C:E3:A5:E6:8F:D4:02:33:E2:A3:92:09:C7:80:CA:1F:A2:62:63:71
Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Certificate issuer:       /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
Manifest number:          EA
Signing time:             Sun 01 Mar 2026 07:37:11 +0000
Manifest this update:     Sun 01 Mar 2026 07:37:10 +0000
Manifest next update:     Sun 08 Mar 2026 07:37:10 +0000
Files and hashes:         1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: x6kggP0B25ibVdRgl7HrbEl9MeQuR7wJlDr08GRpZHs=)
                          2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: VWuV3WTDHbFhKXSmycUNk+HMKCNIe035E4JGd1F1GZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
        Validity
            Not Before: Mar  1 07:37:10 2026 GMT
            Not After : Mar  8 07:37:10 2026 GMT
        Subject: CN=69a3eca7-fb4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:91:06:0f:fa:10:61:7d:cf:17:33:d7:af:
                    34:09:44:ce:c7:46:50:f0:15:df:69:c7:42:9c:d9:
                    9e:0b:77:f0:07:2f:2c:5e:05:56:17:86:54:86:c0:
                    41:1f:66:e0:ef:b4:f6:c4:26:0a:bb:4e:58:1e:05:
                    f3:4f:f1:0b:fe:5a:c4:9c:dd:d7:d0:6c:70:92:ba:
                    d7:95:66:4c:d0:7f:64:f8:bc:5b:c8:2c:19:d4:2a:
                    b6:b3:fa:c4:4f:4f:8c:0c:cd:d3:d9:2a:66:ce:75:
                    51:ba:e3:90:67:db:82:27:10:3a:93:05:48:70:47:
                    1c:93:90:75:5f:30:08:16:30:82:b9:08:85:49:dc:
                    f2:28:ce:e2:cc:ad:0d:8c:8a:16:61:6e:d5:6b:1b:
                    e3:0b:54:d1:c8:71:26:de:56:80:dd:12:7f:9a:56:
                    ea:66:9c:f7:7d:2f:fb:8f:0c:88:de:d0:77:25:05:
                    49:91:46:dc:07:8c:9c:ab:51:43:70:e9:9f:45:a3:
                    b7:4c:34:d7:93:82:e5:87:86:e1:cd:25:f8:70:9d:
                    e2:a3:51:ae:41:7c:e3:5a:8d:7c:f0:5f:eb:f1:12:
                    eb:3c:4d:9c:be:dd:ef:af:1e:ad:48:97:90:b3:46:
                    ce:6b:ab:9a:10:a5:be:c6:6a:b4:05:2c:86:d0:0e:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E3:A5:E6:8F:D4:02:33:E2:A3:92:09:C7:80:CA:1F:A2:62:63:71
            X509v3 Authority Key Identifier:
                keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:32:c2:7d:20:5b:f1:93:41:8c:32:88:aa:13:ce:72:cb:a4:
         98:ec:d7:24:6b:f7:1f:b0:f1:d4:e6:eb:e8:83:24:97:fc:8e:
         61:47:76:dd:e1:ae:9a:83:c4:f9:48:cf:ab:5f:c4:3a:59:30:
         f4:f1:d7:9f:44:0e:b4:7d:d7:72:fc:76:4c:a4:e1:aa:23:42:
         20:59:da:8b:a5:99:53:82:4e:2e:ef:cb:27:21:53:13:26:e6:
         95:80:7d:0c:88:d5:f5:f6:0a:12:ec:31:cb:34:52:06:e9:50:
         5c:da:05:29:b5:1a:7f:96:33:2a:94:31:8a:f8:df:07:98:80:
         18:70:47:9f:da:3a:7b:10:47:ad:24:7c:d7:c1:ce:88:b5:0c:
         2f:55:98:f6:ba:ec:fa:6e:1d:f1:ba:f6:a1:a6:c4:bf:79:8d:
         31:c1:73:34:24:03:3d:88:4c:79:37:f3:4d:fa:b2:98:c2:75:
         8e:3e:13:ea:14:79:05:02:4a:02:61:0d:8c:dd:55:77:6a:0c:
         70:26:88:40:94:94:55:d8:2c:ba:ca:1f:ed:4a:77:47:9d:b8:
         73:50:64:0a:fd:c0:98:c6:92:6f:3b:03:10:37:61:15:f6:09:
         2b:a0:6a:79:df:0c:d4:8f:a9:07:3d:08:40:83:17:f6:9e:2d:
         7a:79:f0:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJBNDcxMTAvBgNVBAUTKDdGNzc1OTIwNDJFM0M4N0JFNTZFRUQ4MUQ5Q0NCMEU5
NzQwMkNERDcwHhcNMjYwMzAxMDczNzEwWhcNMjYwMzA4MDczNzEwWjAYMRYwFAYD
VQQDEw02OWEzZWNhNy1mYjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsVWRBg/6EGF9zxcz1680CUTOx0ZQ8BXfacdCnNmeC3fwBy8sXgVWF4ZUhsBB
H2bg77T2xCYKu05YHgXzT/EL/lrEnN3X0GxwkrrXlWZM0H9k+LxbyCwZ1Cq2s/rE
T0+MDM3T2SpmznVRuuOQZ9uCJxA6kwVIcEcck5B1XzAIFjCCuQiFSdzyKM7izK0N
jIoWYW7VaxvjC1TRyHEm3laA3RJ/mlbqZpz3fS/7jwyI3tB3JQVJkUbcB4ycq1FD
cOmfRaO3TDTXk4Llh4bhzSX4cJ3io1GuQXzjWo188F/r8RLrPE2cvt3vrx6tSJeQ
s0bOa6uaEKW+xmq0BSyG0A68swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzjpeaP
1AIz4qOSCceAyh+iYmNxMB8GA1UdIwQYMBaAFH93WSBC48h75W7tgdnMsOl0As3X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE0Ny8xNTkwN0MyMkI4
MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlIdmxidTJCMmN5dzZYUUN6
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2YzZFpJRUxqeUh2bGJ1MkIyY3l3NlhRQ3pkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkE0Ny8xNTkwN0MyMkI4MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlI
dmxidTJCMmN5dzZYUUN6ZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlDLCfSBb8ZNBjDKIqhPOcsukmOzXJGv3H7Dx1Obr6IMkl/yOYUd23eGumoPE
+UjPq1/EOlkw9PHXn0QOtH3Xcvx2TKThqiNCIFnai6WZU4JOLu/LJyFTEybmlYB9
DIjV9fYKEuwxyzRSBulQXNoFKbUaf5YzKpQxivjfB5iAGHBHn9o6exBHrSR818HO
iLUML1WY9rrs+m4d8br2oabEv3mNMcFzNCQDPYhMeTfzTfqymMJ1jj4T6hR5BQJK
AmENjN1Vd2oMcCaIQJSUVdgsusof7Up3R524c1BkCv3AmMaSbzsDEDdhFfYJK6Bq
ed8M1I+pBz0IQIMX9p4tennwyA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:11:31 2026 by rpki-client