Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
File:                     plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json)
Hash identifier:          ZFSbGeuq5eKCuEB0foN7YJJyUUoukhJ8/xdObxLIW5A=
Subject key identifier:   F8:DA:36:50:9F:DF:05:05:33:AA:26:34:D0:9F:D3:0C:7E:57:B1:8D
Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D
Certificate issuer:       /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D
Certificate serial:       28B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
Manifest number:          28AB
Signing time:             Sat 28 Feb 2026 15:37:06 +0000
Manifest this update:     Sat 28 Feb 2026 15:37:06 +0000
Manifest next update:     Sat 07 Mar 2026 15:37:06 +0000
Files and hashes:         1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: LlgE8HigNtFVMiU4b18rddRk/MtSBVf1uOMgdWgoj4Q=)
                          2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: ilkJ29yBOqKW1VNl3LfMOLm13wPfo28yqbUOr5Kvvtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl
                          rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10417 (0x28b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D
        Validity
            Not Before: Feb 28 15:37:06 2026 GMT
            Not After : Mar  7 15:37:06 2026 GMT
        Subject: CN=69a30ba2-00eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e3:0e:d7:b6:91:05:93:29:95:16:51:20:7f:
                    03:6a:41:b4:bf:6e:ec:92:ed:2f:15:94:af:c5:ca:
                    a0:20:3b:20:00:d4:7d:e8:5b:bd:c4:47:c6:01:c6:
                    4e:75:6f:a3:5e:4d:a1:7e:d3:15:6b:20:22:b6:ad:
                    95:aa:05:c5:ff:3a:b8:df:51:ae:ad:ae:05:ab:ee:
                    d8:8b:de:79:54:31:a1:57:e2:93:22:41:13:04:6e:
                    6f:13:9f:f1:3a:39:73:a8:6f:31:2e:25:5d:f2:90:
                    5b:38:69:64:18:6d:df:7b:5f:5f:5a:e6:6f:56:6a:
                    c4:dc:5e:58:de:c6:b4:71:9c:3d:e4:b2:89:44:4e:
                    d2:16:2f:6b:0c:dc:21:fa:2b:3b:27:b7:06:ff:9b:
                    8c:3a:a0:74:e4:ac:df:10:ac:89:57:de:11:25:80:
                    42:9e:9d:25:1b:0d:fd:4e:3d:c0:e6:2b:82:24:6c:
                    7b:a5:16:76:c1:d2:98:3c:10:93:35:b7:ec:57:91:
                    2a:5e:40:19:cf:c7:df:88:aa:52:f5:78:17:aa:74:
                    d4:10:cb:5e:97:ee:0c:a0:47:21:2e:74:2c:57:0c:
                    94:4c:b7:f7:77:a0:d8:b5:b6:d7:6d:bc:12:75:62:
                    78:41:25:6c:2b:2a:a8:57:33:71:c5:fc:54:a5:a9:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DA:36:50:9F:DF:05:05:33:AA:26:34:D0:9F:D3:0C:7E:57:B1:8D
            X509v3 Authority Key Identifier:
                keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:21:7c:19:06:fc:a9:3c:1a:dc:cb:24:8c:c8:1d:ce:f8:69:
         75:30:4b:71:88:c4:e3:68:1d:f4:53:80:26:11:8c:2c:91:25:
         1b:c4:42:92:a1:76:93:74:e9:a2:de:ce:24:1c:7b:2a:ae:ee:
         d8:5c:43:14:a3:6b:78:06:94:3e:92:38:a5:2e:89:1c:02:91:
         31:43:7b:cb:d1:b4:1b:95:27:8b:a4:82:c6:b8:e7:6f:e2:08:
         f3:42:b3:ab:e0:e8:2d:3e:7b:18:0a:74:34:eb:55:88:a4:4c:
         b9:04:de:c8:b4:3a:18:0a:fb:d6:6e:50:44:98:7c:f3:8f:2e:
         5a:a9:71:6d:e0:ae:ad:29:b3:2b:23:03:8e:3f:f1:5c:c1:1d:
         f2:8a:08:74:7a:7d:1f:d7:b7:b8:ac:9a:9f:50:4f:ba:3a:d1:
         5e:bb:2f:78:76:99:49:da:98:e7:9b:54:51:a4:12:78:d8:09:
         7a:ef:55:4c:60:dc:69:13:43:bc:67:e5:61:d0:c3:a6:e5:99:
         c2:0b:02:b6:50:c7:7e:e9:46:69:20:df:6a:ed:9c:1a:b3:23:
         b4:36:2e:c7:f9:6d:75:fb:05:34:da:99:70:66:31:9a:85:60:
         84:4d:e9:ba:78:b5:d1:2f:75:de:ef:e8:b3:68:09:17:42:29:
         2c:ff:03:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk4NkYxMTAvBgNVBAUTKEE2NTZGNjBEM0YxMTY0MUE1NzFCRDFGRkFEMjQ2MERE
NDU3NjMzMkQwHhcNMjYwMjI4MTUzNzA2WhcNMjYwMzA3MTUzNzA2WjAYMRYwFAYD
VQQDDA02OWEzMGJhMi0wMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnOMO17aRBZMplRZRIH8DakG0v27sku0vFZSvxcqgIDsgANR96Fu9xEfGAcZO
dW+jXk2hftMVayAitq2VqgXF/zq431Gura4Fq+7Yi955VDGhV+KTIkETBG5vE5/x
OjlzqG8xLiVd8pBbOGlkGG3fe19fWuZvVmrE3F5Y3sa0cZw95LKJRE7SFi9rDNwh
+is7J7cG/5uMOqB05KzfEKyJV94RJYBCnp0lGw39Tj3A5iuCJGx7pRZ2wdKYPBCT
NbfsV5EqXkAZz8ffiKpS9XgXqnTUEMtel+4MoEchLnQsVwyUTLf3d6DYtbbXbbwS
dWJ4QSVsKyqoVzNxxfxUpalVYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjaNlCf
3wUFM6omNNCf0wx+V7GNMB8GA1UdIwQYMBaAFKZW9g0/EWQaVxvR/60kYN1FdjMt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9FQzg3MEI4NjhG
MkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpCcFhHOUhfclNSZzNVVjJN
eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BsYjJEVDhSWkJwWEc5SF9yU1JnM1VWMk15MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTg2Ri9FQzg3MEI4NjhGMkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpC
cFhHOUhfclNSZzNVVjJNeTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABCF8GQb8qTwa3MskjMgdzvhpdTBLcYjE42gd9FOAJhGMLJElG8RCkqF2k3Tp
ot7OJBx7Kq7u2FxDFKNreAaUPpI4pS6JHAKRMUN7y9G0G5Uni6SCxrjnb+II80Kz
q+DoLT57GAp0NOtViKRMuQTeyLQ6GAr71m5QRJh8848uWqlxbeCurSmzKyMDjj/x
XMEd8ooIdHp9H9e3uKyan1BPujrRXrsveHaZSdqY55tUUaQSeNgJeu9VTGDcaRND
vGflYdDDpuWZwgsCtlDHfulGaSDfau2cGrMjtDYux/ltdfsFNNqZcGYxmoVghE3p
uni10S913u/os2gJF0IpLP8DQA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:26:59 2026 by rpki-client