Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
File:                     _tgXL4qVo1IC1RxvdfqUfehE9M0.mft (raw, json)
Hash identifier:          HFWGK4xUaTjQY+TiSdfRFwpb/ViMxb64UjwFK0E8RFk=
Subject key identifier:   CE:CB:39:95:E6:38:E3:82:4D:06:B4:FE:EA:40:5D:53:68:B6:9B:07
Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
Certificate issuer:       /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
Manifest number:          0170
Signing time:             Sun 01 Mar 2026 05:43:09 +0000
Manifest this update:     Sun 01 Mar 2026 05:43:08 +0000
Manifest next update:     Sun 08 Mar 2026 05:43:08 +0000
Files and hashes:         1: _tgXL4qVo1IC1RxvdfqUfehE9M0.crl (hash: TLq2t+m3ACJlQzLkEkm/8S4QdAjcOO+8/Z860QRMrqM=)
                          2: 994A883AE06511EEA8CEC61EC4F9AE02.roa (hash: VIkL73Ao9GMOlF5higO2xRTxCND3iZkpVBfNLk5tPMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
                          rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198D95, serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
        Validity
            Not Before: Mar  1 05:43:08 2026 GMT
            Not After : Mar  8 05:43:08 2026 GMT
        Subject: CN=69a3d1ec-c025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6c:b3:3d:13:69:d3:03:ea:a7:59:f3:91:21:
                    cd:19:53:bc:d8:38:9f:20:08:20:c4:c2:84:cc:45:
                    7e:1b:d8:1f:63:61:80:4e:18:29:c8:9a:92:0e:14:
                    62:72:21:5c:70:96:f7:b7:b4:87:a1:cb:90:0f:7e:
                    aa:3e:2b:a5:ec:a4:a2:3e:cb:88:d4:17:a4:ab:4c:
                    d6:5e:bb:7a:dd:69:81:08:ff:7d:c0:26:ad:f7:96:
                    2a:61:25:33:1a:71:fa:e7:6f:c7:d9:ea:2c:c1:cd:
                    e5:bc:14:80:25:00:6e:d6:fd:a6:06:0b:d5:51:73:
                    a7:72:87:49:0c:af:0f:05:34:9f:5e:66:51:e4:3a:
                    a8:1f:5a:60:3f:89:4d:6e:32:d7:b3:49:2c:9c:8a:
                    7e:c7:42:c8:08:25:3a:b0:34:0e:d9:e9:f1:2e:f7:
                    d4:b3:96:91:13:49:26:cb:af:e7:dc:cb:9f:79:33:
                    b2:d9:d3:2a:1f:d6:1a:c3:a5:42:2a:ba:da:e1:48:
                    ea:a3:98:39:91:46:77:6b:7f:79:32:10:4f:79:05:
                    d9:d8:97:e7:13:41:f3:c6:de:79:0f:0d:4a:61:f0:
                    a1:ad:d0:4a:76:32:02:23:85:02:24:83:75:12:8a:
                    91:c7:bd:14:7a:fe:35:eb:a8:0d:a5:1e:99:d7:ff:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CB:39:95:E6:38:E3:82:4D:06:B4:FE:EA:40:5D:53:68:B6:9B:07
            X509v3 Authority Key Identifier:
                keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:de:2d:72:4b:7c:1c:db:bb:24:e5:42:7b:a7:d4:88:43:cf:
         d9:9b:c0:7b:be:ef:b4:9c:cf:74:f4:0b:19:73:9b:ee:52:3a:
         f9:40:7c:41:91:9c:79:cc:8a:7f:64:44:bf:67:6f:32:39:f1:
         9c:b2:b4:63:48:8e:3a:66:f3:93:14:4b:7c:e9:66:5f:08:9c:
         cf:e3:9c:0d:2b:27:5f:6a:dd:f8:8b:ff:7d:6b:80:13:04:26:
         f3:10:57:25:65:22:76:75:7b:0f:39:86:28:1a:92:ec:45:33:
         c7:75:b8:91:78:9d:43:f7:ee:7f:b3:75:01:58:d8:35:6a:05:
         b0:1a:4a:ce:1f:24:49:0d:15:2f:b0:0a:07:d2:aa:07:17:ca:
         10:27:6c:91:b7:fc:b8:c2:8d:f4:49:0b:af:49:f1:66:4d:c4:
         d1:f9:01:ab:f5:3a:80:46:03:ae:27:f9:a4:39:53:6d:19:58:
         44:9d:45:61:6b:a8:81:3b:4d:71:c6:48:1b:29:2b:92:6a:70:
         a8:21:21:2a:62:04:cf:c5:70:37:fe:f8:88:7a:63:38:fd:6d:
         68:e2:56:31:f4:a8:ef:d2:91:c6:56:74:21:0a:39:60:50:86:
         92:0d:84:da:53:20:d2:a3:f9:57:eb:9e:4d:a9:c3:56:6f:0a:
         3c:14:2d:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OThEOTUxMTAvBgNVBAUTKEZFRDgxNzJGOEE5NUEzNTIwMkQ1MUM2Rjc1RkE5NDdE
RTg0NEY0Q0QwHhcNMjYwMzAxMDU0MzA4WhcNMjYwMzA4MDU0MzA4WjAYMRYwFAYD
VQQDEw02OWEzZDFlYy1jMDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA82yzPRNp0wPqp1nzkSHNGVO82DifIAggxMKEzEV+G9gfY2GAThgpyJqSDhRi
ciFccJb3t7SHocuQD36qPiul7KSiPsuI1Bekq0zWXrt63WmBCP99wCat95YqYSUz
GnH652/H2eoswc3lvBSAJQBu1v2mBgvVUXOncodJDK8PBTSfXmZR5DqoH1pgP4lN
bjLXs0ksnIp+x0LICCU6sDQO2enxLvfUs5aRE0kmy6/n3MufeTOy2dMqH9Yaw6VC
Krra4Ujqo5g5kUZ3a395MhBPeQXZ2JfnE0Hzxt55Dw1KYfChrdBKdjICI4UCJIN1
EoqRx70Uev4166gNpR6Z1/+RuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7LOZXm
OOOCTQa0/upAXVNotpsHMB8GA1UdIwQYMBaAFP7YFy+KlaNSAtUcb3X6lH3oRPTN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQ5NS80OEVEMjk2QUUw
NjUxMUVFQjM1RjQyMUVDNEY5QUUwMi9fdGdYTDRxVm8xSUMxUnh2ZGZxVWZlaEU5
TTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL190Z1hMNHFWbzFJQzFSeHZkZnFVZmVoRTlNMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OEQ5NS80OEVEMjk2QUUwNjUxMUVFQjM1RjQyMUVDNEY5QUUwMi9fdGdYTDRxVm8x
SUMxUnh2ZGZxVWZlaEU5TTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlN4tckt8HNu7JOVCe6fUiEPP2ZvAe77vtJzPdPQLGXOb7lI6+UB8QZGcecyK
f2REv2dvMjnxnLK0Y0iOOmbzkxRLfOlmXwicz+OcDSsnX2rd+Iv/fWuAEwQm8xBX
JWUidnV7DzmGKBqS7EUzx3W4kXidQ/fuf7N1AVjYNWoFsBpKzh8kSQ0VL7AKB9Kq
BxfKECdskbf8uMKN9EkLr0nxZk3E0fkBq/U6gEYDrif5pDlTbRlYRJ1FYWuogTtN
ccZIGykrkmpwqCEhKmIEz8VwN/74iHpjOP1taOJWMfSo79KRxlZ0IQo5YFCGkg2E
2lMg0qP5V+ueTanDVm8KPBQtPg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:22 2026 by rpki-client