Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
File:                     7enmnD0KkdKXM8a3AvPMSL7dzuk.mft (raw, json)
Hash identifier:          gfs63RHH2qn6TnYqspvj8IqVD8bDXINkRQX0OSIOOv4=
Subject key identifier:   66:94:F6:22:40:B6:78:AD:97:8F:90:5A:01:1B:6D:32:12:45:96:26
Authority key identifier: ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9
Certificate issuer:       /CN=A9193869/serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
Manifest number:          41
Signing time:             Sun 01 Mar 2026 09:50:31 +0000
Manifest this update:     Sun 01 Mar 2026 09:50:31 +0000
Manifest next update:     Sun 08 Mar 2026 09:50:31 +0000
Files and hashes:         1: 7enmnD0KkdKXM8a3AvPMSL7dzuk.crl (hash: aaWcFLnYtUGKVlG77f0X3uJ5k2b5SpgoLBRubaJBIj8=)
                          2: 00C05CEAB7D511F0AE891D43C4F9AE02.roa (hash: kvQNF7TaPuCVQY6DNWwT5gPRwcZV8e8e+6EbmMvjSpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl
                          rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193869, serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
        Validity
            Not Before: Mar  1 09:50:31 2026 GMT
            Not After : Mar  8 09:50:31 2026 GMT
        Subject: CN=69a40be7-50e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:d5:1c:f5:26:ac:77:9e:0c:a7:99:d8:b1:
                    99:30:bb:8a:13:5e:fa:be:05:0f:f0:65:59:c9:78:
                    7c:48:43:4b:07:6d:75:e1:34:b2:bb:c5:6b:d4:3a:
                    95:dc:6b:05:fe:27:79:17:b7:fd:60:b8:fe:b1:d7:
                    e8:6c:58:93:32:e1:b5:3e:10:a3:88:93:c1:67:23:
                    51:dd:2b:13:0a:8a:fc:df:2e:76:0e:90:68:09:95:
                    71:67:9e:3c:a8:e4:64:dc:87:57:da:2c:a2:14:1f:
                    27:44:e5:59:56:6e:3f:4b:19:40:a7:b5:92:6f:9b:
                    18:0a:71:62:d5:4a:5e:ff:c7:e2:9b:be:ca:e1:61:
                    a7:8e:ce:57:81:69:27:44:1d:ec:04:2b:ab:a2:19:
                    62:99:ba:8e:5b:cc:27:48:9e:6d:82:26:a8:41:e5:
                    b7:7f:2d:ac:18:b9:ad:04:8b:b6:9c:9a:60:19:57:
                    ea:de:46:c9:69:79:03:87:7a:ca:12:53:60:77:c6:
                    fb:5f:06:b4:38:8e:cb:7a:28:21:2d:c6:c5:2c:f3:
                    70:11:90:5f:d2:7a:9b:d9:ae:92:8d:64:7b:9a:c1:
                    56:70:13:f1:83:16:6b:c2:05:4a:3d:e5:40:3c:09:
                    ae:3c:e6:ab:9c:bc:ab:e1:34:4c:34:89:27:60:e7:
                    3a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:94:F6:22:40:B6:78:AD:97:8F:90:5A:01:1B:6D:32:12:45:96:26
            X509v3 Authority Key Identifier:
                keyid:ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:24:ad:23:d1:80:08:d7:32:56:19:9a:48:c7:8f:8c:7d:d8:
         8b:5a:ba:a4:c5:0b:d0:2e:a2:f2:d5:b5:87:37:e7:3e:7a:a3:
         57:32:17:6f:5c:b7:34:f0:e5:03:79:b4:ae:67:23:e2:5f:91:
         62:ff:d7:e0:1a:55:69:b8:f3:e5:8e:33:63:a3:06:42:2f:94:
         79:09:87:74:9e:5c:cc:a5:8d:98:79:16:b5:ff:81:d6:6f:cf:
         6a:1f:7f:3d:c5:3b:db:56:4d:ec:76:c1:0f:68:27:b7:2c:c6:
         1c:18:84:58:9c:20:79:a4:42:61:a4:3f:a2:f9:bb:be:f9:65:
         81:d6:4b:bc:59:50:d3:72:15:2b:d8:85:2a:df:72:3c:2d:b7:
         d5:d2:9a:a7:72:d6:c5:2e:df:c8:bb:c9:9a:71:d7:4f:4f:c7:
         c4:9e:d7:9e:b7:d4:82:ce:7c:a4:a2:5b:e1:7c:a9:50:2c:3b:
         2b:08:81:fc:93:71:73:70:a4:d5:f0:aa:6d:1a:86:e6:cf:e7:
         f4:b7:29:a5:5d:af:43:f0:10:60:bd:73:30:77:aa:17:9f:f6:
         17:73:f3:47:22:d5:f9:1d:f8:ca:3c:d4:43:aa:1c:b5:aa:b9:
         65:4e:1b:ae:ae:8f:4c:f6:4b:8b:db:6b:36:23:f4:21:48:90:
         4e:86:26:c2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
Mzg2OTExMC8GA1UEBRMoRURFOUU2OUMzRDBBOTFEMjk3MzNDNkI3MDJGM0NDNDhC
RUREQ0VFOTAeFw0yNjAzMDEwOTUwMzFaFw0yNjAzMDgwOTUwMzFaMBgxFjAUBgNV
BAMTDTY5YTQwYmU3LTUwZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0DNUc9Sasd54Mp5nYsZkwu4oTXvq+BQ/wZVnJeHxIQ0sHbXXhNLK7xWvUOpXc
awX+J3kXt/1guP6x1+hsWJMy4bU+EKOIk8FnI1HdKxMKivzfLnYOkGgJlXFnnjyo
5GTch1faLKIUHydE5VlWbj9LGUCntZJvmxgKcWLVSl7/x+KbvsrhYaeOzleBaSdE
HewEK6uiGWKZuo5bzCdInm2CJqhB5bd/LawYua0Ei7acmmAZV+reRslpeQOHesoS
U2B3xvtfBrQ4jst6KCEtxsUs83ARkF/SepvZrpKNZHuawVZwE/GDFmvCBUo95UA8
Ca485qucvKvhNEw0iSdg5zpnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZpT2IkC2
eK2Xj5BaARttMhJFliYwHwYDVR0jBBgwFoAU7enmnD0KkdKXM8a3AvPMSL7dzukw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzODY5LzM2RjFBNDMyQjdE
NDExRjA4RTFEMDMyMEM0RjlBRTAyLzdlbm1uRDBLa2RLWE04YTNBdlBNU0w3ZHp1
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN2VubW5EMEtrZEtYTThhM0F2UE1TTDdkenVrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz
ODY5LzM2RjFBNDMyQjdENDExRjA4RTFEMDMyMEM0RjlBRTAyLzdlbm1uRDBLa2RL
WE04YTNBdlBNU0w3ZHp1ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBvJK0j0YAI1zJWGZpIx4+MfdiLWrqkxQvQLqLy1bWHN+c+eqNXMhdvXLc08OUD
ebSuZyPiX5Fi/9fgGlVpuPPljjNjowZCL5R5CYd0nlzMpY2YeRa1/4HWb89qH389
xTvbVk3sdsEPaCe3LMYcGIRYnCB5pEJhpD+i+bu++WWB1ku8WVDTchUr2IUq33I8
LbfV0pqnctbFLt/Iu8macddPT8fEnteet9SCznykolvhfKlQLDsrCIH8k3FzcKTV
8KptGobmz+f0tymlXa9D8BBgvXMwd6oXn/YXc/NHItX5HfjKPNRDqhy1qrllThuu
ro9M9kuL22s2I/QhSJBOhibC
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:24 2026 by rpki-client