Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
File:                     a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json)
Hash identifier:          yGp5mCTHBDOHUOh/Wt/w4Rn2rB0ZkniOvRNTqGoEI4A=
Subject key identifier:   3F:7A:3F:3A:A9:9C:FB:8E:45:A9:8C:EF:1E:83:D8:B2:CC:43:2A:5A
Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
Certificate issuer:       /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Certificate serial:       0907
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
Manifest number:          08FE
Signing time:             Mon 02 Mar 2026 02:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:46 +0000
Manifest next update:     Mon 09 Mar 2026 02:00:46 +0000
Files and hashes:         1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: fw0nTWu+mvProSXzv1YL6naNcJfiZisnUVaEnPABnFE=)
                          2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: A+vGSKzHOEr6WQMmXCqrBXQC5qCQ1zLl1m8jTRo1SXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
                          rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2311 (0x907)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
        Validity
            Not Before: Mar  2 02:00:46 2026 GMT
            Not After : Mar  9 02:00:46 2026 GMT
        Subject: CN=69a4ef50-9af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:27:a9:c8:0d:04:9e:73:dd:f3:19:33:a7:b7:
                    0f:1a:34:aa:3a:b3:10:a9:0c:09:e8:e5:98:e2:c5:
                    e8:f3:ad:23:90:c7:91:1e:59:36:04:7d:4f:a7:45:
                    d5:5f:27:6a:9e:f8:39:50:ab:47:a0:25:c1:35:06:
                    f7:67:ab:f0:26:d5:e0:6d:a9:b9:02:b2:a2:20:5e:
                    7c:38:24:97:c9:05:b5:7d:e3:9e:66:61:b3:1e:6b:
                    2c:b0:4c:36:c1:e6:ab:7b:a6:4c:62:5a:36:47:69:
                    08:b5:d3:de:65:4b:1f:44:cc:d2:29:30:b6:3e:ce:
                    16:e7:5d:25:7d:b7:5a:d2:61:0f:ae:ab:d7:c2:9d:
                    52:5c:d6:68:c0:b5:28:8b:a1:07:49:45:c9:4b:d6:
                    44:dc:d4:50:59:bd:46:fd:09:5a:e9:7f:46:4f:97:
                    6f:03:d1:48:21:4d:c0:e8:fb:5f:ff:4a:44:72:21:
                    45:bd:bc:83:ff:43:2f:72:90:c9:a7:c1:a7:13:1b:
                    5a:e0:c2:4e:3c:e2:47:26:bb:c2:5b:9b:b4:9a:3a:
                    d0:d6:7d:eb:bf:75:16:b9:f5:4e:5e:f8:3f:3d:a2:
                    95:4e:4c:86:7f:77:ed:3a:05:33:7b:81:b5:41:11:
                    4e:f6:38:7c:62:94:7f:1b:6b:2d:bd:df:12:cb:f7:
                    a0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7A:3F:3A:A9:9C:FB:8E:45:A9:8C:EF:1E:83:D8:B2:CC:43:2A:5A
            X509v3 Authority Key Identifier:
                keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:df:e1:a9:54:1b:14:bb:ee:77:3d:9d:fd:05:1c:ae:b3:dc:
         e6:67:fc:b9:5a:f6:26:12:5c:58:2c:c8:28:17:51:8e:f6:47:
         56:ba:c5:22:21:23:f5:a9:11:c9:1f:a8:3c:d3:f3:2b:0b:7d:
         08:a5:49:0f:88:cb:5d:de:17:0b:44:52:b4:56:8b:25:56:a5:
         cd:a3:24:7d:bc:e5:fc:5a:1a:96:f9:86:11:51:03:26:18:19:
         25:bf:87:fd:fd:98:0b:ef:07:6c:b7:2d:08:f5:cf:4b:27:92:
         c3:4d:2a:36:50:82:4d:a6:b2:29:24:cd:b9:76:d3:de:bb:8a:
         c7:68:ea:ff:22:ef:3e:e2:61:fd:fd:2e:7f:67:f2:ad:ac:4b:
         4b:9a:3e:8a:a3:53:04:b9:a4:7a:ab:ce:62:13:b7:b0:18:de:
         71:8b:45:89:97:3b:30:7d:e6:4c:51:20:4a:67:f1:7e:0d:c6:
         db:4a:87:85:74:09:7b:67:3d:03:b4:86:a3:d6:51:71:47:21:
         c9:95:c5:46:56:99:94:57:33:2d:b6:ea:3d:ec:01:00:23:81:
         3d:0a:d3:d0:a7:c8:e0:11:c8:cb:fd:9a:34:b2:21:54:31:69:
         13:38:82:e8:f3:c2:68:a6:fd:70:65:ef:c0:28:3b:7f:f8:39:
         5e:08:68:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3
RUE3QTRGMDIwHhcNMjYwMzAyMDIwMDQ2WhcNMjYwMzA5MDIwMDQ2WjAYMRYwFAYD
VQQDEw02OWE0ZWY1MC05YWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6yepyA0EnnPd8xkzp7cPGjSqOrMQqQwJ6OWY4sXo860jkMeRHlk2BH1Pp0XV
Xydqnvg5UKtHoCXBNQb3Z6vwJtXgbam5ArKiIF58OCSXyQW1feOeZmGzHmsssEw2
weare6ZMYlo2R2kItdPeZUsfRMzSKTC2Ps4W510lfbda0mEPrqvXwp1SXNZowLUo
i6EHSUXJS9ZE3NRQWb1G/Qla6X9GT5dvA9FIIU3A6Ptf/0pEciFFvbyD/0MvcpDJ
p8GnExta4MJOPOJHJrvCW5u0mjrQ1n3rv3UWufVOXvg/PaKVTkyGf3ftOgUze4G1
QRFO9jh8YpR/G2stvd8Sy/egFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD96Pzqp
nPuORamM7x6D2LLMQypaMB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0
QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw
dExwampOeUhuQXAtcDZUd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFt/hqVQbFLvudz2d/QUcrrPc5mf8uVr2JhJcWCzIKBdRjvZHVrrFIiEj9akR
yR+oPNPzKwt9CKVJD4jLXd4XC0RStFaLJValzaMkfbzl/FoalvmGEVEDJhgZJb+H
/f2YC+8HbLctCPXPSyeSw00qNlCCTaayKSTNuXbT3ruKx2jq/yLvPuJh/f0uf2fy
raxLS5o+iqNTBLmkeqvOYhO3sBjecYtFiZc7MH3mTFEgSmfxfg3G20qHhXQJe2c9
A7SGo9ZRcUchyZXFRlaZlFczLbbqPewBACOBPQrT0KfI4BHIy/2aNLIhVDFpEziC
6PPCaKb9cGXvwCg7f/g5Xghoow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:10 2026 by rpki-client