Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
File:                     qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft (raw, json)
Hash identifier:          nmPmZ/R9Xjysz2QIsEd4SXoZFYidiAq+KZv9NZktxWw=
Subject key identifier:   B4:A8:70:53:13:67:83:10:A9:F3:88:B2:89:6C:CC:56:23:01:FF:C0
Authority key identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74
Certificate issuer:       /CN=A9192A47/serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
Manifest number:          E7
Signing time:             Sun 01 Mar 2026 07:37:13 +0000
Manifest this update:     Sun 01 Mar 2026 07:37:13 +0000
Manifest next update:     Sun 08 Mar 2026 07:37:13 +0000
Files and hashes:         1: qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl (hash: 1jNvui3p2nc8k9UMnwYOBJSQNtTA6lA9885gzcVBWZ4=)
                          2: 8F32CF70B52911F0A8B8B043C4F9AE02.roa (hash: AuZYVHQZgukMvQbSIT5eZVhwVaF0IcOcC6ubQHkO3ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
        Validity
            Not Before: Mar  1 07:37:13 2026 GMT
            Not After : Mar  8 07:37:13 2026 GMT
        Subject: CN=69a3eca9-213e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:0c:b8:23:5c:3c:2d:60:f0:5c:69:46:89:
                    05:08:4e:e8:5c:98:15:24:7d:da:31:5c:99:dc:c6:
                    b7:d5:67:7e:0e:01:bb:27:da:29:aa:f2:87:b4:07:
                    f9:2c:58:7c:38:60:fa:1d:15:22:73:0e:2b:21:d7:
                    68:d0:f1:b8:52:fa:82:53:38:f8:8c:9a:58:51:7d:
                    8d:63:19:50:43:8d:2c:0f:75:8c:e5:3c:44:a9:48:
                    a6:60:84:d9:d7:e6:4d:af:22:08:4a:81:c9:28:49:
                    32:86:4e:7d:44:21:1d:61:14:e3:5d:75:4f:ab:08:
                    05:7b:75:8e:d5:ec:42:52:b2:b1:c9:f8:3f:81:f4:
                    6a:16:16:89:d4:9e:00:02:90:8f:03:7b:db:b3:39:
                    27:e5:2b:33:8f:f7:09:2b:4c:e8:fc:3e:e7:5c:f0:
                    32:b0:78:da:d9:5a:31:88:44:52:d4:28:18:50:5b:
                    22:2e:3e:a8:b7:e5:37:be:65:64:36:a6:f3:09:10:
                    cd:52:2a:ba:53:13:88:d2:07:9c:75:a9:d6:f1:59:
                    6d:46:66:1c:5b:3d:cc:4a:84:1b:d8:6c:45:17:fe:
                    69:eb:4b:ef:99:23:3d:72:1d:3b:08:5a:e0:7a:dd:
                    72:96:91:21:8b:40:6b:4c:ab:33:08:0a:b5:3b:70:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A8:70:53:13:67:83:10:A9:F3:88:B2:89:6C:CC:56:23:01:FF:C0
            X509v3 Authority Key Identifier:
                keyid:A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:92:d3:25:03:fc:d5:66:02:28:c5:11:56:f7:ff:5c:e2:c2:
         2c:a6:64:a5:31:2f:00:19:d7:5f:c0:19:41:d5:20:24:10:4e:
         71:7e:00:dd:76:fb:d8:32:8e:17:f7:c2:8f:ad:13:e5:97:84:
         2b:a8:7f:14:8c:dc:e5:2e:62:b8:17:1d:97:8b:7b:46:94:54:
         cf:e9:4b:37:c2:b7:9b:54:52:79:2d:0b:d0:77:ee:6b:5f:98:
         f4:39:ff:9c:d8:b6:ed:e0:64:b6:de:de:3e:2d:9f:a6:78:d3:
         3f:4c:f7:52:61:21:91:b8:a6:5f:42:34:09:6c:48:89:26:10:
         40:19:1e:a1:83:5f:da:fb:e4:14:95:24:03:b9:04:bf:4c:f4:
         51:2a:df:54:1e:44:b6:60:b8:cc:46:51:f0:ac:96:b2:77:63:
         ac:67:ac:ba:23:36:cd:cf:4b:9c:fc:91:41:9b:c8:57:ff:b2:
         67:eb:0c:51:5b:cc:be:a8:80:f8:fa:47:a9:3e:8b:78:45:60:
         a0:bb:f6:ef:8f:e3:0e:49:0f:47:c9:84:30:ee:63:f0:fb:bb:
         6f:38:fa:96:fe:3d:9d:e6:d1:d9:a8:54:5c:1b:dc:ab:3e:69:
         54:87:67:7d:dd:d2:35:c6:74:8b:06:fd:f1:d4:b1:11:b9:25:
         8d:4e:90:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJBNDcxMTAvBgNVBAUTKEE4NkU1RDQwQUExNTI5RDRGRjIyQjMyQzRFOTMwMDZE
MEZBMkNBNzQwHhcNMjYwMzAxMDczNzEzWhcNMjYwMzA4MDczNzEzWjAYMRYwFAYD
VQQDEw02OWEzZWNhOS0yMTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuoEMuCNcPC1g8FxpRokFCE7oXJgVJH3aMVyZ3Ma31Wd+DgG7J9opqvKHtAf5
LFh8OGD6HRUicw4rIddo0PG4UvqCUzj4jJpYUX2NYxlQQ40sD3WM5TxEqUimYITZ
1+ZNryIISoHJKEkyhk59RCEdYRTjXXVPqwgFe3WO1exCUrKxyfg/gfRqFhaJ1J4A
ApCPA3vbszkn5Sszj/cJK0zo/D7nXPAysHja2VoxiERS1CgYUFsiLj6ot+U3vmVk
NqbzCRDNUiq6UxOI0gecdanW8VltRmYcWz3MSoQb2GxFF/5p60vvmSM9ch07CFrg
et1ylpEhi0BrTKszCAq1O3BZzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLSocFMT
Z4MQqfOIsolszFYjAf/AMB8GA1UdIwQYMBaAFKhuXUCqFSnU/yKzLE6TAG0Posp0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE0Ny9FRUI5NEQ3MkI4
MjAxMUVGQUFFNkY1NjdDNEY5QUUwMi9xRzVkUUtvVktkVF9Jck1zVHBNQWJRLWl5
blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FHNWRRS29WS2RUX0lyTXNUcE1BYlEtaXluUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkE0Ny9FRUI5NEQ3MkI4MjAxMUVGQUFFNkY1NjdDNEY5QUUwMi9xRzVkUUtvVktk
VF9Jck1zVHBNQWJRLWl5blEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYpLTJQP81WYCKMURVvf/XOLCLKZkpTEvABnXX8AZQdUgJBBOcX4A3Xb72DKO
F/fCj60T5ZeEK6h/FIzc5S5iuBcdl4t7RpRUz+lLN8K3m1RSeS0L0Hfua1+Y9Dn/
nNi27eBktt7ePi2fpnjTP0z3UmEhkbimX0I0CWxIiSYQQBkeoYNf2vvkFJUkA7kE
v0z0USrfVB5EtmC4zEZR8KyWsndjrGesuiM2zc9LnPyRQZvIV/+yZ+sMUVvMvqiA
+PpHqT6LeEVgoLv274/jDkkPR8mEMO5j8Pu7bzj6lv49nebR2ahUXBvcqz5pVIdn
fd3SNcZ0iwb98dSxEbkljU6Qwg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:27 2026 by rpki-client