Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft
File:                     mTXGObPDUdvtWyk5lPcvgUzPm6k.mft (raw, json)
Hash identifier:          T8slzCMojKFNW4HEV4GYm8BwETjFDR4xQCzgHAm7GrE=
Subject key identifier:   56:0A:A4:99:00:5A:9F:E6:CB:73:E6:E5:A6:01:0A:1B:DB:70:B1:7F
Authority key identifier: 99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9
Certificate issuer:       /CN=A9195D93/serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9
Certificate serial:       222E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft
Manifest number:          2215
Signing time:             Sat 28 Feb 2026 15:54:36 +0000
Manifest this update:     Sat 28 Feb 2026 15:54:36 +0000
Manifest next update:     Sat 07 Mar 2026 15:54:36 +0000
Files and hashes:         1: mTXGObPDUdvtWyk5lPcvgUzPm6k.crl (hash: 8GgQn4weCNR1xuG0CJHqRP5/WistWPomPaAPW5wHZyk=)
                          2: 5D2D29A2966D11EA96C50E81C4F9AE02.roa (hash: xq1A/DwEya72JUauXcCDXoZyXlE8M2olRWGCrYUUkIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl
                          rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8750 (0x222e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195D93, serialNumber=9935C639B3C351DBED5B293994F72F814CCF9BA9
        Validity
            Not Before: Feb 28 15:54:36 2026 GMT
            Not After : Mar  7 15:54:36 2026 GMT
        Subject: CN=69a30fbc-2cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:eb:91:80:31:bd:e2:44:c8:a5:5e:fe:58:
                    b7:ca:9a:33:f9:25:82:c9:8f:5d:52:08:37:66:1a:
                    b3:8c:80:27:6f:55:5d:c2:92:d9:24:7f:90:f1:84:
                    70:91:ca:97:30:ea:7b:30:f8:1d:d0:9b:12:af:d8:
                    5f:ec:bf:6a:0d:30:cd:53:6d:66:e6:27:c4:fd:66:
                    da:13:22:91:a7:83:48:4b:ec:22:c2:76:4c:f2:88:
                    59:a1:e2:3c:40:7a:1f:77:70:6e:4a:16:f2:cc:75:
                    1b:90:af:94:d8:c6:8c:ad:55:07:ed:e9:6e:6b:50:
                    e6:63:35:79:d9:91:42:5e:62:2c:be:8d:21:cb:d0:
                    e6:22:bc:89:59:61:7a:d8:b1:18:b1:00:b6:57:95:
                    78:af:e1:4e:3e:96:ec:3a:80:b5:61:bd:4d:e0:57:
                    65:0e:7a:f3:97:ae:ed:19:ef:ae:92:19:36:6d:0f:
                    26:54:72:2f:e5:ab:9a:91:53:22:17:df:88:21:9e:
                    27:d5:5e:9e:97:78:b0:39:85:e1:e6:7a:0c:8e:6e:
                    d4:c9:42:70:79:f4:03:03:52:d1:04:b5:f8:82:42:
                    ac:90:5b:fd:e5:ca:2e:40:94:65:ca:fd:be:25:6f:
                    46:a1:45:5c:0b:5b:fd:b4:86:60:8a:45:4a:2d:61:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0A:A4:99:00:5A:9F:E6:CB:73:E6:E5:A6:01:0A:1B:DB:70:B1:7F
            X509v3 Authority Key Identifier:
                keyid:99:35:C6:39:B3:C3:51:DB:ED:5B:29:39:94:F7:2F:81:4C:CF:9B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTXGObPDUdvtWyk5lPcvgUzPm6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195D93/5C10A810DC5D11E5B325452EC4F9AE02/mTXGObPDUdvtWyk5lPcvgUzPm6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5f:62:2a:cd:a4:62:7f:b4:03:9c:8e:d1:a5:d2:d4:d0:54:
         7a:e5:3c:cd:bb:75:cf:8f:1a:db:df:26:80:19:c5:a6:7d:b9:
         b9:87:fb:3e:e3:94:60:47:95:35:62:5b:38:e8:dc:8b:89:25:
         b2:6d:bc:9a:7c:96:a8:f8:e7:4f:c9:62:ad:ca:f5:b7:4d:62:
         4d:34:8d:cb:75:31:dd:b6:02:7a:6a:44:af:d0:20:2a:ca:d5:
         f8:ec:b0:66:7e:68:d0:8d:b2:7e:48:50:49:8e:49:8e:db:9f:
         bd:84:f1:d4:56:c2:90:1f:31:9e:36:58:4a:6a:df:71:87:ae:
         09:fb:bc:85:b5:f6:67:9b:b2:7e:84:9c:81:96:28:60:77:a2:
         53:1b:d0:71:02:7f:69:61:d9:8c:48:31:47:3a:8e:82:a5:89:
         ec:69:1d:73:29:dd:07:5f:4d:f0:d6:ec:60:4d:ff:90:f0:e7:
         76:8b:42:42:1d:c0:8a:e6:ee:40:82:56:5b:89:34:08:5b:71:
         c6:88:6e:a4:be:b7:f0:74:6a:da:77:c4:d0:91:fa:46:ac:2b:
         2f:4c:7d:58:94:23:c8:d3:c9:6d:ed:bc:6f:63:ab:5b:b3:09:
         8c:c0:98:98:ca:95:b6:42:da:19:e7:ea:24:0e:40:5b:ac:aa:
         ee:4e:2a:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVEOTMxMTAvBgNVBAUTKDk5MzVDNjM5QjNDMzUxREJFRDVCMjkzOTk0RjcyRjgx
NENDRjlCQTkwHhcNMjYwMjI4MTU1NDM2WhcNMjYwMzA3MTU1NDM2WjAYMRYwFAYD
VQQDDA02OWEzMGZiYy0yY2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzEDrkYAxveJEyKVe/li3ypoz+SWCyY9dUgg3ZhqzjIAnb1VdwpLZJH+Q8YRw
kcqXMOp7MPgd0JsSr9hf7L9qDTDNU21m5ifE/WbaEyKRp4NIS+wiwnZM8ohZoeI8
QHofd3BuShbyzHUbkK+U2MaMrVUH7elua1DmYzV52ZFCXmIsvo0hy9DmIryJWWF6
2LEYsQC2V5V4r+FOPpbsOoC1Yb1N4FdlDnrzl67tGe+ukhk2bQ8mVHIv5auakVMi
F9+IIZ4n1V6el3iwOYXh5noMjm7UyUJwefQDA1LRBLX4gkKskFv95couQJRlyv2+
JW9GoUVcC1v9tIZgikVKLWHJQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFYKpJkA
Wp/my3Pm5aYBChvbcLF/MB8GA1UdIwQYMBaAFJk1xjmzw1Hb7VspOZT3L4FMz5up
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUQ5My81QzEwQTgxMERD
NUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVkdnRXeWs1bFBjdmdVelBt
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21UWEdPYlBEVWR2dFd5azVsUGN2Z1V6UG02ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NUQ5My81QzEwQTgxMERDNUQxMUU1QjMyNTQ1MkVDNEY5QUUwMi9tVFhHT2JQRFVk
dnRXeWs1bFBjdmdVelBtNmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANV9iKs2kYn+0A5yO0aXS1NBUeuU8zbt1z48a298mgBnFpn25uYf7PuOUYEeV
NWJbOOjci4klsm28mnyWqPjnT8lircr1t01iTTSNy3Ux3bYCempEr9AgKsrV+Oyw
Zn5o0I2yfkhQSY5JjtufvYTx1FbCkB8xnjZYSmrfcYeuCfu8hbX2Z5uyfoScgZYo
YHeiUxvQcQJ/aWHZjEgxRzqOgqWJ7GkdcyndB19N8NbsYE3/kPDndotCQh3Aiubu
QIJWW4k0CFtxxohupL638HRq2nfE0JH6RqwrL0x9WJQjyNPJbe28b2OrW7MJjMCY
mMqVtkLaGefqJA5AW6yq7k4qdA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:39:57 2026 by rpki-client