Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
File:                     hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json)
Hash identifier:          b7rDcSsPKWLrgb/EmNC+lFh1nal+Uf4FnpDECUWM+OM=
Subject key identifier:   03:14:E4:22:BE:1F:86:40:8C:32:5A:F3:DE:C4:43:AB:A3:68:A9:88
Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D
Certificate issuer:       /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
Manifest number:          013C
Signing time:             Sun 01 Mar 2026 06:26:47 +0000
Manifest this update:     Sun 01 Mar 2026 06:26:46 +0000
Manifest next update:     Sun 08 Mar 2026 06:26:46 +0000
Files and hashes:         1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: 3bBwFo4yYbn8xueZXeGD8ya3+qKJ0nP/gssLX41QDms=)
                          2: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: NjBAV+BZBuGQVA2KV6NfHJRJuvgRL/XOA20W9Q3lchw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl
                          rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D
        Validity
            Not Before: Mar  1 06:26:46 2026 GMT
            Not After : Mar  8 06:26:46 2026 GMT
        Subject: CN=69a3dc27-f746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:63:82:ae:45:17:c2:86:7e:4b:f9:7a:62:17:
                    d5:7e:df:80:84:2b:f1:0b:af:25:4e:bf:51:6e:61:
                    bd:b6:4a:39:0d:75:e5:2a:e3:d3:14:c2:3d:7f:6a:
                    56:3e:95:45:67:6c:86:8f:0d:26:22:3f:46:64:b2:
                    f7:11:94:9b:a1:8e:39:f1:e3:8a:e1:b5:a1:0d:76:
                    4f:fc:0e:ff:f2:49:a2:6e:80:5e:39:c9:c6:03:8b:
                    e8:fd:cc:0a:de:66:40:0a:6e:09:4e:2b:ee:30:90:
                    d2:8e:ef:dc:b7:ea:df:1a:00:51:4d:43:4d:e0:00:
                    35:bd:78:1c:a0:3e:31:a0:f1:07:c4:52:f8:3f:31:
                    0f:9b:5a:bd:26:dc:24:c8:6f:cb:07:fa:f2:d1:f4:
                    9e:8d:d5:7f:22:c5:7f:88:e9:46:c0:d2:57:06:c9:
                    56:fc:6b:8b:26:e2:b3:d1:9f:79:01:e0:54:da:7b:
                    a4:43:8e:7e:9d:28:5d:2f:6f:44:6e:bd:c0:b1:17:
                    7d:f5:b8:31:49:b9:54:ce:ab:24:79:c5:19:2d:8a:
                    60:e8:08:84:d4:0e:0e:5b:75:1d:30:b7:49:4e:8c:
                    e4:30:3a:9e:9c:37:24:6e:18:e7:4b:dc:e5:5f:ce:
                    2d:f7:dd:86:19:5d:bc:c2:6d:99:69:d4:33:a0:4d:
                    0e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:14:E4:22:BE:1F:86:40:8C:32:5A:F3:DE:C4:43:AB:A3:68:A9:88
            X509v3 Authority Key Identifier:
                keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:bc:52:14:3e:3a:ed:50:48:00:c8:2b:b1:47:0b:e5:5c:f9:
         38:33:b5:83:22:8c:52:73:89:fe:9f:06:1f:c5:ad:1f:fc:64:
         f9:85:13:10:fd:01:4f:5e:f5:fc:a0:08:9d:ae:dc:82:12:98:
         c0:b5:d7:f9:7b:a7:5b:b7:f4:bf:a1:a5:44:cd:23:79:ad:2e:
         00:6a:9a:b6:82:9e:09:ba:b2:9f:2b:cb:5a:54:f6:ef:b7:b4:
         21:b9:12:54:53:09:14:69:10:dd:8a:4f:73:33:6a:57:2e:e6:
         a9:11:91:16:cb:18:58:9b:81:4c:f5:40:12:88:42:64:f2:e8:
         e6:8b:dd:57:80:60:cb:24:f2:f9:34:2c:9a:c6:a9:3c:dd:7e:
         84:11:1c:f0:67:22:bf:76:be:22:1c:57:1b:4e:38:aa:0f:ae:
         ca:51:9e:11:a2:ea:b8:79:fc:65:3b:b1:72:48:9b:1a:7e:71:
         0a:ae:f3:33:6b:62:13:e7:2a:b7:59:f2:64:22:ee:6b:27:fa:
         07:4e:33:18:bf:e1:be:09:15:13:2e:26:1d:35:70:d9:e7:67:
         63:31:2a:74:1a:16:da:37:da:d9:38:32:66:ee:2e:05:10:44:
         2b:bd:48:8f:c6:fb:ed:7d:3a:6e:b0:cd:cd:4b:39:cb:f2:13:
         f2:e1:85:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBRTIxMTAvBgNVBAUTKDg0NUQ4OEUwQTIxNTE0NUYzNjdEOTMwNEJGM0Y3MUFF
RThFQjRDMkQwHhcNMjYwMzAxMDYyNjQ2WhcNMjYwMzA4MDYyNjQ2WjAYMRYwFAYD
VQQDEw02OWEzZGMyNy1mNzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwmOCrkUXwoZ+S/l6YhfVft+AhCvxC68lTr9RbmG9tko5DXXlKuPTFMI9f2pW
PpVFZ2yGjw0mIj9GZLL3EZSboY458eOK4bWhDXZP/A7/8kmiboBeOcnGA4vo/cwK
3mZACm4JTivuMJDSju/ct+rfGgBRTUNN4AA1vXgcoD4xoPEHxFL4PzEPm1q9Jtwk
yG/LB/ry0fSejdV/IsV/iOlGwNJXBslW/GuLJuKz0Z95AeBU2nukQ45+nShdL29E
br3AsRd99bgxSblUzqskecUZLYpg6AiE1A4OW3UdMLdJTozkMDqenDckbhjnS9zl
X84t992GGV28wm2ZadQzoE0OTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMU5CK+
H4ZAjDJa897EQ6ujaKmIMB8GA1UdIwQYMBaAFIRdiOCiFRRfNn2TBL8/ca7o60wt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFFMi8yNkE2RjQ0QzNC
QUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZGODJmWk1Fdno5eHJ1anJU
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hGMkk0S0lWRkY4MmZaTUV2ejl4cnVqclRDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEFFMi8yNkE2RjQ0QzNCQUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZG
ODJmWk1Fdno5eHJ1anJUQzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtrxSFD467VBIAMgrsUcL5Vz5ODO1gyKMUnOJ/p8GH8WtH/xk+YUTEP0BT171
/KAIna7cghKYwLXX+XunW7f0v6GlRM0jea0uAGqatoKeCbqynyvLWlT277e0IbkS
VFMJFGkQ3YpPczNqVy7mqRGRFssYWJuBTPVAEohCZPLo5ovdV4BgyyTy+TQsmsap
PN1+hBEc8Gciv3a+IhxXG044qg+uylGeEaLquHn8ZTuxckibGn5xCq7zM2tiE+cq
t1nyZCLuayf6B04zGL/hvgkVEy4mHTVw2ednYzEqdBoW2jfa2TgyZu4uBRBEK71I
j8b77X06brDNzUs5y/IT8uGFMA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:04 2026 by rpki-client