Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
File:                     lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json)
Hash identifier:          9alRYgvtbYOeX6ZHPluq8lP3gPDqqqbzkYX2gUjx6MY=
Subject key identifier:   9B:41:12:98:C7:45:86:D5:85:41:80:80:DD:5E:B1:D9:6F:33:AD:8A
Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B
Certificate issuer:       /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
Certificate serial:       01CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
Manifest number:          01C6
Signing time:             Mon 02 Mar 2026 03:03:47 +0000
Manifest this update:     Mon 02 Mar 2026 03:03:45 +0000
Manifest next update:     Mon 09 Mar 2026 03:03:45 +0000
Files and hashes:         1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: tYGR/CeeNX3P2SxITGpo1VClPYTQEg9uWbWeZN22VSI=)
                          2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: UORe/0TZF8IoRoAarwALcIbpOxjo7QBKBArFHjwhFB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl
                          rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:03:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
        Validity
            Not Before: Mar  2 03:03:45 2026 GMT
            Not After : Mar  9 03:03:45 2026 GMT
        Subject: CN=69a4fe12-0637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:bf:c8:2d:cf:84:2d:8b:a6:87:70:93:fa:
                    e2:72:28:2d:2b:84:f2:c8:64:65:f8:e1:1e:01:31:
                    3e:04:dd:a2:48:00:3c:08:0b:cc:9a:25:26:9a:58:
                    e6:02:cd:1c:8d:49:38:7f:d2:6b:f4:a0:75:1f:3a:
                    1d:22:92:8d:a5:90:c2:19:49:27:70:e7:73:f0:2c:
                    eb:3f:2e:48:31:5a:b1:6f:c7:30:ea:62:7e:61:04:
                    54:6d:af:fb:23:7c:6c:35:9e:95:15:24:bf:b5:dd:
                    25:e6:f1:0c:12:f8:aa:98:10:c3:97:a6:c5:97:f5:
                    59:4c:8a:b9:6f:5f:f2:60:68:74:3a:f6:67:4b:bb:
                    68:23:e8:90:8f:a8:95:f7:b2:a2:bd:08:0c:4c:7e:
                    b6:55:06:89:d7:83:ee:c1:70:fa:4a:b5:91:f9:63:
                    1d:48:c2:d7:85:b0:f7:5e:7d:0f:fc:0b:e4:9b:c3:
                    e3:cf:bd:61:d0:12:90:fc:7f:d2:c1:fe:48:3f:66:
                    3f:71:1c:33:0d:17:fb:9c:b4:fb:ae:87:6b:b7:e5:
                    bb:fa:26:81:4c:32:3b:40:fa:5f:d7:44:14:7e:1b:
                    3b:8a:24:95:7e:95:10:ef:2f:06:b8:0c:32:0a:b0:
                    11:ef:dd:14:0d:15:b1:6d:91:a7:b5:e2:80:6c:a7:
                    6d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:41:12:98:C7:45:86:D5:85:41:80:80:DD:5E:B1:D9:6F:33:AD:8A
            X509v3 Authority Key Identifier:
                keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:96:74:e3:b4:ce:28:cb:45:59:ea:5e:56:ab:16:97:21:53:
         d9:b2:55:3a:ca:39:fc:65:57:df:42:04:3c:08:28:0d:ba:69:
         26:5c:d8:4b:58:8c:e2:66:3f:89:78:8e:29:1c:30:0d:5b:c1:
         c8:7a:0b:9c:48:25:f0:e3:3e:56:5b:f3:be:de:f8:cd:10:60:
         55:44:3e:4f:39:38:e4:82:21:9f:65:e3:52:be:8a:f4:47:d0:
         d5:bd:08:6d:0d:26:a3:44:f0:39:f9:18:65:3b:59:62:ce:8a:
         6d:b3:c1:67:9e:66:88:41:8a:33:f9:28:74:df:ee:7e:64:24:
         74:41:1a:31:67:86:bc:26:40:58:9b:a9:be:db:e8:93:3f:f6:
         81:75:7a:7a:5a:b4:b7:d9:ea:73:41:50:ed:27:d5:d5:c7:4b:
         57:a6:26:36:c7:b8:47:29:e4:15:ba:9a:1d:a0:f0:e9:b6:1c:
         bd:ee:8d:14:f8:bc:fe:36:21:b8:ce:e0:7b:db:76:45:d6:dc:
         c6:55:d9:a7:8d:05:4a:9b:e7:17:6b:d3:6c:f9:e8:75:8b:75:
         fa:f9:15:25:dc:53:41:98:b0:0f:85:9d:42:3b:86:05:35:ea:
         ae:65:0f:e9:72:8f:2d:df:86:9b:55:59:3c:83:36:2a:cd:f4:
         76:71:e3:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM5NEIxMTAvBgNVBAUTKDk0MDhFOUQ3QjZDRUI4MzRDQTkwOTAxRTQ1Nzg2MDEw
QzA2OUMzMkIwHhcNMjYwMzAyMDMwMzQ1WhcNMjYwMzA5MDMwMzQ1WjAYMRYwFAYD
VQQDEw02OWE0ZmUxMi0wNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtme/yC3PhC2Lpodwk/ricigtK4TyyGRl+OEeATE+BN2iSAA8CAvMmiUmmljm
As0cjUk4f9Jr9KB1HzodIpKNpZDCGUkncOdz8CzrPy5IMVqxb8cw6mJ+YQRUba/7
I3xsNZ6VFSS/td0l5vEMEviqmBDDl6bFl/VZTIq5b1/yYGh0OvZnS7toI+iQj6iV
97KivQgMTH62VQaJ14PuwXD6SrWR+WMdSMLXhbD3Xn0P/Avkm8Pjz71h0BKQ/H/S
wf5IP2Y/cRwzDRf7nLT7rodrt+W7+iaBTDI7QPpf10QUfhs7iiSVfpUQ7y8GuAwy
CrAR790UDRWxbZGnteKAbKdtIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJtBEpjH
RYbVhUGAgN1esdlvM62KMB8GA1UdIwQYMBaAFJQI6de2zrg0ypCQHkV4YBDAacMr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk0Qi8xMEFDQUIwQTYx
QjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VEVEtrSkFlUlhoZ0VNQnB3
eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Mzk0Qi8xMEFDQUIwQTYxQjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VE
VEtrSkFlUlhoZ0VNQnB3eXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX5Z047TOKMtFWepeVqsWlyFT2bJVOso5/GVX30IEPAgoDbppJlzYS1iM4mY/
iXiOKRwwDVvByHoLnEgl8OM+Vlvzvt74zRBgVUQ+Tzk45IIhn2XjUr6K9EfQ1b0I
bQ0mo0TwOfkYZTtZYs6KbbPBZ55miEGKM/kodN/ufmQkdEEaMWeGvCZAWJupvtvo
kz/2gXV6elq0t9nqc0FQ7SfV1cdLV6YmNse4RynkFbqaHaDw6bYcve6NFPi8/jYh
uM7ge9t2RdbcxlXZp40FSpvnF2vTbPnodYt1+vkVJdxTQZiwD4WdQjuGBTXqrmUP
6XKPLd+Gm1VZPIM2Ks30dnHjIA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:21 2026 by rpki-client