Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
File:                     M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft (raw, json)
Hash identifier:          QLZk8M0HOLyQV4pTms+ASR7BT21xdpM+AB0tdMguJGw=
Subject key identifier:   2F:62:F8:BF:2C:95:2F:AF:C5:68:B4:54:12:D9:CA:C9:A8:44:22:01
Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
Certificate issuer:       /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
Manifest number:          A6
Signing time:             Sun 01 Mar 2026 08:32:23 +0000
Manifest this update:     Sun 01 Mar 2026 08:32:22 +0000
Manifest next update:     Sun 08 Mar 2026 08:32:22 +0000
Files and hashes:         1: M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl (hash: P7QMiqA19h6xwVN8qW7R8glBHEb0FGeBsT/wvG4+RmI=)
                          2: 35C008E818C811F0BF9E881FC4F9AE02.roa (hash: P1yTaYpQKdP44uCNWcm3GSLyQQ9HAPHAkjE1wN6st/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
                          rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
        Validity
            Not Before: Mar  1 08:32:22 2026 GMT
            Not After : Mar  8 08:32:22 2026 GMT
        Subject: CN=69a3f997-4ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:59:89:cc:ee:cf:40:5d:0a:34:50:df:a4:
                    04:00:50:26:a8:c9:53:44:24:56:90:f6:96:21:ed:
                    96:c8:ae:3f:b5:bc:21:8f:78:dc:c5:eb:5f:86:12:
                    e5:3b:4b:11:81:40:91:63:b1:cd:b8:02:a3:d4:66:
                    89:72:71:3c:6d:43:65:6e:49:4d:c1:dc:c3:dc:a0:
                    c2:a2:e4:04:f5:29:7f:80:e6:dd:69:39:46:7f:e9:
                    1e:c9:42:cd:e3:0a:88:1b:94:51:b1:e9:e1:58:b2:
                    07:21:67:a0:76:83:cb:28:3f:de:c8:4b:0d:f7:6a:
                    f5:da:a2:df:99:ca:b8:5e:f6:4b:36:fc:24:8f:a2:
                    67:fd:24:f8:c9:c8:6e:d1:0d:59:30:37:aa:58:00:
                    27:44:9d:ba:71:1a:52:0c:c0:33:64:8e:66:e9:31:
                    80:18:a3:44:f1:af:66:42:55:62:8e:c2:1d:13:7b:
                    ca:51:ce:14:7e:f9:62:5d:44:2b:c4:de:ab:1f:ac:
                    fa:4d:a3:bb:92:fa:d0:9e:61:2a:7d:3c:f3:d0:3e:
                    84:95:89:d8:cd:bf:99:fe:2b:5d:5d:7e:39:da:c5:
                    91:79:1b:c0:b6:46:c2:2a:46:90:3a:46:cd:f1:9a:
                    76:10:07:d6:03:a4:05:84:ab:95:68:44:80:5e:eb:
                    f7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:62:F8:BF:2C:95:2F:AF:C5:68:B4:54:12:D9:CA:C9:A8:44:22:01
            X509v3 Authority Key Identifier:
                keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:79:64:03:a2:19:2c:8f:ec:02:aa:32:70:0f:80:3f:9f:e3:
         b9:0a:cd:22:e8:e0:4d:17:51:53:af:a2:c2:eb:6a:c5:b8:94:
         5f:f7:ec:c4:1f:16:ec:d9:91:0f:0e:d4:39:9a:6d:cf:9b:06:
         b9:97:70:19:bc:3a:ef:66:3c:2c:02:10:10:5b:cf:2b:ef:78:
         80:ab:82:f3:a0:f3:12:3b:b1:58:b8:5d:50:7b:0d:0f:31:b1:
         44:17:1c:72:de:52:da:d6:52:a9:21:27:61:ad:39:9e:f2:ab:
         2f:98:c1:27:bc:aa:93:16:f0:eb:c6:f5:5d:dc:76:68:8b:e5:
         98:04:73:36:8f:82:32:1e:57:3f:9b:8d:5c:53:4b:00:a5:73:
         ea:40:49:cf:ca:24:81:36:86:6f:16:73:3a:8d:d6:21:f4:78:
         22:a1:11:9a:ab:99:9d:80:6f:a9:cd:75:8d:fb:c3:0a:85:c2:
         e7:04:b9:83:ca:76:a6:df:97:87:d8:6f:fd:3b:fb:d0:29:b7:
         ec:28:80:67:11:3f:fc:f8:8e:a5:d7:b8:49:d9:49:64:da:6c:
         eb:f4:c3:c4:be:0f:4a:f9:7d:9f:f5:ac:71:35:9f:37:51:0f:
         c1:19:3c:04:20:2e:c4:68:d4:f1:fe:46:f3:26:a4:01:db:35:
         a1:e6:e1:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQzRjkxMTAvBgNVBAUTKDMzNjJBQzU4RURCMTg5Q0YyNTc4M0MyN0Q5MEE3RDJG
QTMyOTc3QzUwHhcNMjYwMzAxMDgzMjIyWhcNMjYwMzA4MDgzMjIyWjAYMRYwFAYD
VQQDEw02OWEzZjk5Ny00ZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkdpZiczuz0BdCjRQ36QEAFAmqMlTRCRWkPaWIe2WyK4/tbwhj3jcxetfhhLl
O0sRgUCRY7HNuAKj1GaJcnE8bUNlbklNwdzD3KDCouQE9Sl/gObdaTlGf+keyULN
4wqIG5RRsenhWLIHIWegdoPLKD/eyEsN92r12qLfmcq4XvZLNvwkj6Jn/ST4ychu
0Q1ZMDeqWAAnRJ26cRpSDMAzZI5m6TGAGKNE8a9mQlVijsIdE3vKUc4UfvliXUQr
xN6rH6z6TaO7kvrQnmEqfTzz0D6ElYnYzb+Z/itdXX452sWReRvAtkbCKkaQOkbN
8Zp2EAfWA6QFhKuVaESAXuv3MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC9i+L8s
lS+vxWi0VBLZysmoRCIBMB8GA1UdIwQYMBaAFDNirFjtsYnPJXg8J9kKfS+jKXfF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDNGOS8xMjIyMzZFNjE4
QzcxMUYwODA1NDE3N0VDNEY5QUUwMi9NMktzV08yeGljOGxlRHduMlFwOUw2TXBk
OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00yS3NXTzJ4aWM4bGVEd24yUXA5TDZNcGQ4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDNGOS8xMjIyMzZFNjE4QzcxMUYwODA1NDE3N0VDNEY5QUUwMi9NMktzV08yeGlj
OGxlRHduMlFwOUw2TXBkOFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdXlkA6IZLI/sAqoycA+AP5/juQrNIujgTRdRU6+iwutqxbiUX/fsxB8W7NmR
Dw7UOZptz5sGuZdwGbw672Y8LAIQEFvPK+94gKuC86DzEjuxWLhdUHsNDzGxRBcc
ct5S2tZSqSEnYa05nvKrL5jBJ7yqkxbw68b1Xdx2aIvlmARzNo+CMh5XP5uNXFNL
AKVz6kBJz8okgTaGbxZzOo3WIfR4IqERmquZnYBvqc11jfvDCoXC5wS5g8p2pt+X
h9hv/Tv70Cm37CiAZxE//PiOpde4SdlJZNps6/TDxL4PSvl9n/WscTWfN1EPwRk8
BCAuxGjU8f5G8yakAds1oebhTw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:10:57 2026 by rpki-client