Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
File:                     _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json)
Hash identifier:          D+VhHnYz9J0AAaYhQRtbZxUJwn/6GvBohKauLNq47zc=
Subject key identifier:   DF:87:4F:47:2F:15:20:23:05:1A:F2:A8:F0:3F:6A:6A:66:A8:3D:B8
Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA
Certificate issuer:       /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
Certificate serial:       08E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
Manifest number:          08E3
Signing time:             Sat 28 Feb 2026 20:40:49 +0000
Manifest this update:     Sat 28 Feb 2026 20:40:48 +0000
Manifest next update:     Sat 07 Mar 2026 20:40:48 +0000
Files and hashes:         1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: JkpxsAVA7AU7zkT+G6s+xXHOm2+843f78jgWYQAAdRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl
                          rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919697D, serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA
        Validity
            Not Before: Feb 28 20:40:48 2026 GMT
            Not After : Mar  7 20:40:48 2026 GMT
        Subject: CN=69a352d1-96a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4d:2e:7c:1a:30:04:f5:46:f1:25:af:0b:ea:
                    41:f7:e9:cf:ac:8b:6b:cb:ff:02:71:fd:f5:16:a9:
                    21:9a:67:9c:fc:be:82:0c:07:7d:c9:d6:6e:f1:76:
                    bc:0c:25:66:ae:77:a8:b4:2d:77:cc:92:f2:15:e7:
                    30:0b:4d:d4:ac:61:82:18:21:dc:94:0e:9d:1e:db:
                    b3:b7:0b:81:27:aa:15:c8:06:b7:eb:f3:bc:4a:fe:
                    4e:f4:7e:48:3e:fc:95:e6:0b:d6:3d:0a:f1:59:d5:
                    d3:06:be:72:53:a5:f0:76:51:83:d8:1f:7e:6a:bc:
                    d7:ce:b4:54:e0:36:ec:37:e4:c0:25:bc:b2:38:a5:
                    83:93:db:da:0a:b4:7e:7d:3d:90:34:ac:ed:6a:ae:
                    f4:ee:90:cf:09:3c:0f:cf:eb:fb:cd:76:13:cf:35:
                    73:b0:2c:a7:d7:d4:ad:42:17:77:7d:25:dc:8e:f6:
                    1a:5b:5e:d8:32:40:a1:29:9b:ba:49:29:0c:b8:07:
                    ab:b9:c7:7f:2c:1f:f1:1d:f8:ad:11:1c:9b:e3:95:
                    7a:46:cc:f4:08:72:38:f1:f4:d8:06:00:55:3f:28:
                    dc:d3:d1:f9:7b:68:4a:fc:4a:89:c0:ad:d6:1a:b1:
                    9c:49:89:ca:5a:63:2d:94:67:3f:e8:8e:c0:96:5e:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:87:4F:47:2F:15:20:23:05:1A:F2:A8:F0:3F:6A:6A:66:A8:3D:B8
            X509v3 Authority Key Identifier:
                keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e5:58:31:c8:3d:d0:8e:28:7d:ba:21:d7:50:a5:d1:8b:65:
         98:bd:89:b1:41:4a:0f:b7:88:00:57:5d:f9:2d:27:ed:50:99:
         ad:66:bf:28:fa:99:3a:65:7a:f8:1b:6d:fb:35:d3:63:49:0b:
         6f:ff:09:4e:db:5b:e7:77:e2:30:b8:b8:d7:ae:a4:ad:07:c0:
         61:6a:f5:7b:8d:90:7a:17:df:89:6f:81:a2:c6:4c:cf:07:cd:
         8c:1f:40:ad:df:f0:df:bb:45:ac:9e:d0:7e:a5:e6:01:58:fb:
         3b:94:22:34:3b:e7:a0:cc:36:08:a2:91:13:89:a8:b2:d0:94:
         15:1a:1c:98:8b:a0:d8:26:b9:92:a1:c9:42:6a:b2:95:b3:cc:
         51:db:78:c9:d5:e3:a4:4d:78:6e:47:82:6b:e7:84:d5:67:1f:
         2d:0f:d0:0c:21:64:ea:99:06:b1:2a:1d:01:b5:41:b8:70:a0:
         9f:42:9f:59:ba:26:18:37:80:d3:66:22:77:5c:1c:54:04:b2:
         87:d7:e8:5b:a1:d4:c4:44:ed:94:d5:bb:cc:c5:e6:02:32:8a:
         e6:06:87:24:5d:11:7e:e9:59:ac:24:5a:55:23:82:5c:fc:78:
         7a:79:5e:4c:75:a2:a7:f2:18:29:5c:47:da:2c:58:5e:55:9a:
         f1:2c:12:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTY5N0QxMTAvBgNVBAUTKEZGRDBCREZDNkQxRDZGNEVENkVEMzgzOTAzOUY0MUU5
RURDNjZGQkEwHhcNMjYwMjI4MjA0MDQ4WhcNMjYwMzA3MjA0MDQ4WjAYMRYwFAYD
VQQDEw02OWEzNTJkMS05NmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl00ufBowBPVG8SWvC+pB9+nPrItry/8Ccf31Fqkhmmec/L6CDAd9ydZu8Xa8
DCVmrneotC13zJLyFecwC03UrGGCGCHclA6dHtuztwuBJ6oVyAa36/O8Sv5O9H5I
PvyV5gvWPQrxWdXTBr5yU6XwdlGD2B9+arzXzrRU4DbsN+TAJbyyOKWDk9vaCrR+
fT2QNKztaq707pDPCTwPz+v7zXYTzzVzsCyn19StQhd3fSXcjvYaW17YMkChKZu6
SSkMuAerucd/LB/xHfitERyb45V6Rsz0CHI48fTYBgBVPyjc09H5e2hK/EqJwK3W
GrGcSYnKWmMtlGc/6I7All4MUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN+HT0cv
FSAjBRryqPA/ampmqD24MB8GA1UdIwQYMBaAFP/QvfxtHW9O1u04OQOfQentxm+6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3RC85RDI4RUMwQ0M3
QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIwN1c3VGc1QTU5QjZlM0di
N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL185QzlfRzBkYjA3VzdUZzVBNTlCNmUzR2I3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Njk3RC85RDI4RUMwQ0M3QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIw
N1c3VGc1QTU5QjZlM0diN28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApOVYMcg90I4ofboh11Cl0YtlmL2JsUFKD7eIAFdd+S0n7VCZrWa/KPqZOmV6
+Btt+zXTY0kLb/8JTttb53fiMLi4166krQfAYWr1e42QehffiW+BosZMzwfNjB9A
rd/w37tFrJ7QfqXmAVj7O5QiNDvnoMw2CKKRE4mostCUFRocmIug2Ca5kqHJQmqy
lbPMUdt4ydXjpE14bkeCa+eE1WcfLQ/QDCFk6pkGsSodAbVBuHCgn0KfWbomGDeA
02Yid1wcVASyh9foW6HUxETtlNW7zMXmAjKK5gaHJF0RfulZrCRaVSOCXPx4enle
THWip/IYKVxH2ixYXlWa8SwSJw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:44 2026 by rpki-client