Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
File:                     ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json)
Hash identifier:          wSNeSB+IijAyWcZZKuHD2sqagOR0rM616FX56ohpMoo=
Subject key identifier:   DE:68:6D:6C:04:DF:49:18:34:9A:BD:72:15:72:08:F0:05:9B:C5:0B
Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67
Certificate issuer:       /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
Certificate serial:       0C47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
Manifest number:          0C33
Signing time:             Mon 02 Mar 2026 02:22:36 +0000
Manifest this update:     Mon 02 Mar 2026 02:22:34 +0000
Manifest next update:     Mon 09 Mar 2026 02:22:34 +0000
Files and hashes:         1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: NWEjLsgGaI7YaWOH0Y/PA+S0URA85A8Qg4pMJ4zbGqw=)
                          2: 7AC6992E655411F088401528C4F9AE02.roa (hash: pTt0bboHk4i5KvWhd2IOroHa91kNethIzbOKv9fQupQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl
                          rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3143 (0xc47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC79, serialNumber=76CD021E0C281DA5FE64D87803553808889A1167
        Validity
            Not Before: Mar  2 02:22:34 2026 GMT
            Not After : Mar  9 02:22:34 2026 GMT
        Subject: CN=69a4f46b-6434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:ce:27:44:d3:8a:4c:f8:4a:70:f5:3f:e9:
                    05:4b:40:7a:18:76:be:97:ba:67:aa:8a:87:91:e9:
                    bc:62:b3:d0:5c:58:9d:72:7c:99:04:5a:6b:80:ed:
                    ab:fb:41:02:6b:f5:5e:84:e2:37:be:35:55:d0:14:
                    86:ae:76:18:d3:84:0c:f7:95:eb:61:ac:8d:3f:05:
                    ec:39:06:84:e6:55:4d:00:f9:0e:88:af:b9:56:22:
                    23:f6:9c:97:5b:aa:1f:c5:22:1b:44:f2:3c:e0:42:
                    fd:7b:ce:b8:69:8f:1e:5d:74:c2:0c:6d:36:c0:79:
                    07:b9:27:7f:45:5b:13:c3:9f:89:d5:df:41:04:11:
                    72:17:03:62:bd:0a:e7:c5:bb:8b:37:a6:30:42:46:
                    ad:9c:02:b2:93:8c:d2:b0:e7:70:b1:3e:0f:8a:02:
                    b4:c3:7e:6f:10:3e:19:f8:41:4f:75:91:70:37:64:
                    ef:3e:66:c8:ae:09:74:d5:15:16:06:59:a2:0f:48:
                    3e:f3:4a:09:32:d4:59:e2:76:9f:b7:56:7f:62:99:
                    1c:aa:e9:7b:ef:92:83:5d:f7:d7:64:b2:0e:5e:a5:
                    2b:a5:5b:b4:26:b0:f8:b6:6b:3e:6c:ba:c2:4a:f5:
                    1b:91:ce:49:8b:4e:0a:63:a8:b3:2c:e5:45:2a:6c:
                    b7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:68:6D:6C:04:DF:49:18:34:9A:BD:72:15:72:08:F0:05:9B:C5:0B
            X509v3 Authority Key Identifier:
                keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:81:67:45:43:98:94:0c:8a:cf:92:1b:05:96:fb:c2:64:61:
         fa:49:9d:ba:cb:e7:ee:f3:f0:c3:d0:c7:b6:2f:42:2d:cc:62:
         20:c4:96:ab:36:5e:9e:2a:3d:7f:61:c8:fa:44:51:16:a9:12:
         ae:2f:c7:a7:9c:05:0a:16:d7:d8:72:bb:52:12:ea:8a:00:28:
         c5:74:6d:8e:a2:40:1b:d8:52:af:2e:12:38:20:4e:e6:b8:8d:
         1b:30:61:ca:56:38:74:1b:51:03:46:ad:7e:25:c8:4d:23:27:
         d3:3a:a2:4e:50:2e:f6:5f:c9:06:8a:4b:d6:8d:bf:d7:a9:25:
         fd:66:16:30:48:e6:31:fc:6c:5f:5b:11:6b:92:d6:c9:fc:96:
         91:62:f7:47:48:9d:3c:0a:83:dd:28:ca:27:0d:bd:63:03:07:
         3d:7d:8b:70:08:5b:ff:19:41:a5:fe:79:5b:05:6a:b7:e1:0f:
         95:fd:de:87:6f:80:60:95:ea:17:b0:9d:6d:19:65:85:39:d9:
         97:fd:76:f0:81:45:89:02:76:aa:37:4d:68:72:82:87:e1:67:
         f6:45:95:1c:c9:cd:61:7d:f8:4f:07:c1:cd:b5:80:ed:bd:5b:
         d5:ec:a5:11:34:57:e5:71:b2:12:6b:8b:7a:80:d2:cf:39:3d:
         a8:99:54:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURDNzkxMTAvBgNVBAUTKDc2Q0QwMjFFMEMyODFEQTVGRTY0RDg3ODAzNTUzODA4
ODg5QTExNjcwHhcNMjYwMzAyMDIyMjM0WhcNMjYwMzA5MDIyMjM0WjAYMRYwFAYD
VQQDEw02OWE0ZjQ2Yi02NDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVLOJ0TTikz4SnD1P+kFS0B6GHa+l7pnqoqHkem8YrPQXFidcnyZBFprgO2r
+0ECa/VehOI3vjVV0BSGrnYY04QM95XrYayNPwXsOQaE5lVNAPkOiK+5ViIj9pyX
W6ofxSIbRPI84EL9e864aY8eXXTCDG02wHkHuSd/RVsTw5+J1d9BBBFyFwNivQrn
xbuLN6YwQkatnAKyk4zSsOdwsT4PigK0w35vED4Z+EFPdZFwN2TvPmbIrgl01RUW
BlmiD0g+80oJMtRZ4naft1Z/Ypkcqul775KDXffXZLIOXqUrpVu0JrD4tms+bLrC
SvUbkc5Ji04KY6izLOVFKmy3kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN5obWwE
30kYNJq9chVyCPAFm8ULMB8GA1UdIwQYMBaAFHbNAh4MKB2l/mTYeANVOAiImhFn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3OS9BNjNGOTNENjI3
Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hhWC1aTmg0QTFVNENJaWFF
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RzMENIZ3dvSGFYLVpOaDRBMVU0Q0lpYUVXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
REM3OS9BNjNGOTNENjI3Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hh
WC1aTmg0QTFVNENJaWFFV2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaIFnRUOYlAyKz5IbBZb7wmRh+kmdusvn7vPww9DHti9CLcxiIMSWqzZenio9
f2HI+kRRFqkSri/Hp5wFChbX2HK7UhLqigAoxXRtjqJAG9hSry4SOCBO5riNGzBh
ylY4dBtRA0atfiXITSMn0zqiTlAu9l/JBopL1o2/16kl/WYWMEjmMfxsX1sRa5LW
yfyWkWL3R0idPAqD3SjKJw29YwMHPX2LcAhb/xlBpf55WwVqt+EPlf3eh2+AYJXq
F7CdbRllhTnZl/128IFFiQJ2qjdNaHKCh+Fn9kWVHMnNYX34TwfBzbWA7b1b1eyl
ETRX5XGyEmuLeoDSzzk9qJlUVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:16:41 2026 by rpki-client