Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
File:                     7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft (raw, json)
Hash identifier:          mgh6C3nrhuWFBT00xQ3Qlb/0/9FSHu23F6X8rtoro3g=
Subject key identifier:   6A:53:81:79:06:A2:4B:B9:A2:91:A0:37:8F:92:E9:40:52:C0:D9:56
Authority key identifier: EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC
Certificate issuer:       /CN=A91A1D8C/serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
Manifest number:          32
Signing time:             Sun 01 Mar 2026 10:06:59 +0000
Manifest this update:     Sun 01 Mar 2026 10:06:58 +0000
Manifest next update:     Sun 08 Mar 2026 10:06:58 +0000
Files and hashes:         1: 7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl (hash: VI5/ZBCSGPjxDjPLXqK+pngf72aqx2AFTJ7NKqm0N4o=)
                          2: C50D496ED01711F09F944781C4F9AE02.roa (hash: uFv39uSSaT436HVJNG6HonRgD8h69dX/W5dSzZ3uUCk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D8C, serialNumber=EE3231D5AA565F4052419792AB82C427884BC2EC
        Validity
            Not Before: Mar  1 10:06:58 2026 GMT
            Not After : Mar  8 10:06:58 2026 GMT
        Subject: CN=69a40fc3-87db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:00:5e:6c:9a:f0:65:b4:cc:f1:cf:a0:e8:
                    42:57:f0:ef:57:74:90:23:1a:8a:5b:f4:cc:69:ac:
                    a8:38:b5:e0:7e:68:24:b9:69:33:91:14:6b:3a:15:
                    1f:3f:99:62:b7:a8:46:50:93:aa:08:0f:c6:9b:4f:
                    b5:d6:86:44:3e:dc:eb:17:9a:69:d3:ee:6f:3d:3a:
                    49:15:a2:bc:84:eb:f9:0c:00:e3:6e:b8:02:4a:14:
                    62:af:11:ce:d9:02:31:e3:ce:7f:72:40:b7:e9:0a:
                    52:78:ef:0d:9a:12:f6:f5:63:b4:c9:b1:3c:d0:d8:
                    b5:7d:ca:6b:b8:55:51:6c:6d:75:10:30:7f:74:3d:
                    c1:81:85:74:9e:57:71:2b:aa:ee:b2:b3:87:8e:27:
                    17:c5:c1:e3:8f:48:5a:2a:f4:6e:d0:34:ba:8f:91:
                    1c:d0:83:29:e5:c9:49:27:fe:42:1d:87:59:17:1f:
                    ad:fd:d7:9e:b8:75:c7:90:30:6b:e1:94:d0:3f:99:
                    b0:98:75:92:85:f1:49:96:1d:35:5a:05:65:be:ac:
                    ea:e5:5d:fa:6d:f2:02:6a:1a:4b:ed:0b:4d:2d:59:
                    82:ca:f2:4a:01:d0:2a:16:37:99:2d:8f:a9:95:57:
                    bd:83:ba:98:4c:ad:f1:ed:9f:57:bc:38:2d:44:c3:
                    1b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:53:81:79:06:A2:4B:B9:A2:91:A0:37:8F:92:E9:40:52:C0:D9:56
            X509v3 Authority Key Identifier:
                keyid:EE:32:31:D5:AA:56:5F:40:52:41:97:92:AB:82:C4:27:88:4B:C2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7jIx1apWX0BSQZeSq4LEJ4hLwuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D8C/9754DA38D01611F0A6547A7EC4F9AE02/7jIx1apWX0BSQZeSq4LEJ4hLwuw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:df:11:11:35:8f:7e:7b:ee:61:d6:d2:6f:d3:8e:31:62:79:
         54:30:2b:54:00:f7:35:dd:4f:5c:44:fc:d3:1c:ae:46:38:fa:
         1c:d4:d6:86:34:bc:25:32:4e:f4:b8:bf:a5:0e:46:4a:84:c5:
         ef:6a:b5:c4:39:8a:35:09:e3:ed:d3:80:f1:aa:82:10:bc:78:
         69:7f:09:6c:4f:f7:e2:34:ea:9c:f6:5b:a0:c1:48:27:4d:e2:
         3b:0b:12:8c:ef:ad:3c:d9:ac:db:d2:a3:75:3d:0e:ba:47:a6:
         35:fe:36:f0:5e:50:7b:74:da:3e:90:fa:cb:a7:48:ef:d4:44:
         a7:c5:a4:7b:3d:d0:74:26:71:7c:ce:8e:2b:14:94:24:b7:50:
         cf:76:e5:e4:42:07:7b:65:17:66:e5:eb:a7:07:03:7e:d1:bf:
         a0:67:77:7f:54:c4:e3:98:46:6a:06:ff:a4:ed:74:cd:bf:82:
         f3:6b:72:57:09:e1:f6:21:48:05:4b:48:18:b7:b8:73:86:74:
         4f:e5:3b:a5:3e:50:e6:ec:8a:ad:a8:e3:84:e5:24:d8:c1:a6:
         4a:04:82:c8:4c:c1:0f:a5:6e:f4:fe:1b:22:88:36:a7:5c:8e:
         e6:79:cc:aa:f2:6e:31:69:04:78:5a:3e:3c:07:88:26:1c:ae:
         a3:58:05:30
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MUQ4QzExMC8GA1UEBRMoRUUzMjMxRDVBQTU2NUY0MDUyNDE5NzkyQUI4MkM0Mjc4
ODRCQzJFQzAeFw0yNjAzMDExMDA2NThaFw0yNjAzMDgxMDA2NThaMBgxFjAUBgNV
BAMTDTY5YTQwZmMzLTg3ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCbvwBebJrwZbTM8c+g6EJX8O9XdJAjGopb9MxprKg4teB+aCS5aTORFGs6FR8/
mWK3qEZQk6oID8abT7XWhkQ+3OsXmmnT7m89OkkVoryE6/kMAONuuAJKFGKvEc7Z
AjHjzn9yQLfpClJ47w2aEvb1Y7TJsTzQ2LV9ymu4VVFsbXUQMH90PcGBhXSeV3Er
qu6ys4eOJxfFweOPSFoq9G7QNLqPkRzQgynlyUkn/kIdh1kXH6391564dceQMGvh
lNA/mbCYdZKF8UmWHTVaBWW+rOrlXfpt8gJqGkvtC00tWYLK8koB0CoWN5ktj6mV
V72DuphMrfHtn1e8OC1EwxuHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUalOBeQai
S7mikaA3j5LpQFLA2VYwHwYDVR0jBBgwFoAU7jIx1apWX0BSQZeSq4LEJ4hLwuww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExRDhDLzk3NTREQTM4RDAx
NjExRjBBNjU0N0E3RUM0RjlBRTAyLzdqSXgxYXBXWDBCU1FaZVNxNExFSjRoTHd1
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvN2pJeDFhcFdYMEJTUVplU3E0TEVKNGhMd3V3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx
RDhDLzk3NTREQTM4RDAxNjExRjBBNjU0N0E3RUM0RjlBRTAyLzdqSXgxYXBXWDBC
U1FaZVNxNExFSjRoTHd1dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBX3xERNY9+e+5h1tJv044xYnlUMCtUAPc13U9cRPzTHK5GOPoc1NaGNLwlMk70
uL+lDkZKhMXvarXEOYo1CePt04DxqoIQvHhpfwlsT/fiNOqc9lugwUgnTeI7CxKM
76082azb0qN1PQ66R6Y1/jbwXlB7dNo+kPrLp0jv1ESnxaR7PdB0JnF8zo4rFJQk
t1DPduXkQgd7ZRdm5eunBwN+0b+gZ3d/VMTjmEZqBv+k7XTNv4Lza3JXCeH2IUgF
S0gYt7hzhnRP5TulPlDm7IqtqOOE5STYwaZKBILITMEPpW70/hsiiDanXI7mecyq
8m4xaQR4Wj48B4gmHK6jWAUw
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:06 2026 by rpki-client