Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
File:                     fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json)
Hash identifier:          etjvO812PWcGL+TYDR9/QzCVRR+hBRQlpW51RtS/tN4=
Subject key identifier:   9E:37:9B:53:A0:D2:05:8D:CF:32:34:2F:DC:EC:8C:C4:C1:6D:C8:12
Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
Certificate issuer:       /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Certificate serial:       04E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
Manifest number:          04DB
Signing time:             Sun 01 Mar 2026 00:27:16 +0000
Manifest this update:     Sun 01 Mar 2026 00:27:15 +0000
Manifest next update:     Sun 08 Mar 2026 00:27:15 +0000
Files and hashes:         1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: shgh4/FqaS8bRqyEDZOPn1962CqrD5NA2ZPIMC+NcSI=)
                          2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: c5NMAe1CqQurJqS1H1w7Md/EROAKq1xZbqnKJkldnUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
                          rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251 (0x4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
        Validity
            Not Before: Mar  1 00:27:15 2026 GMT
            Not After : Mar  8 00:27:15 2026 GMT
        Subject: CN=69a387e3-e605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:f7:d4:89:ea:70:d2:ac:a5:30:60:b7:2f:
                    3d:87:d1:bc:41:ca:04:1d:d9:78:8b:0d:21:fd:21:
                    33:fd:8c:ed:1d:0d:d1:ae:0a:2e:bb:66:72:25:54:
                    82:0b:f7:ef:84:31:21:43:d0:2b:8c:b2:fa:e3:a4:
                    da:a9:36:ca:25:39:96:c0:f3:ca:e2:a0:03:89:c9:
                    a4:cc:fa:d8:21:3d:8e:f0:6e:0f:91:e7:dd:37:97:
                    10:3a:7d:70:5b:52:7b:cd:29:2e:a2:86:66:86:f2:
                    3e:8e:aa:34:c1:a6:c0:60:51:6e:ed:ae:d5:f5:62:
                    61:9e:0d:be:1b:f9:38:55:46:1f:03:f3:da:62:02:
                    1d:dc:27:b1:87:d1:28:fc:90:c3:19:bd:54:e9:9a:
                    18:a4:ea:af:0c:86:d3:00:b3:5f:e3:4e:52:8d:dd:
                    9c:fc:c3:f4:b9:c9:36:b8:2e:01:cd:c3:7b:c1:fd:
                    b1:3f:cc:58:cf:4c:79:bf:a6:55:9c:8c:01:b9:5f:
                    71:7b:d9:d3:38:fe:16:13:57:b2:2d:41:2c:02:0b:
                    43:2c:9c:f5:f3:97:0d:53:de:1d:0b:cd:35:62:74:
                    2d:59:f0:6e:fd:be:79:1e:dd:77:5a:fd:98:58:29:
                    46:dc:ce:ee:1c:8f:33:82:07:e5:b8:ed:a7:3a:e5:
                    84:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:37:9B:53:A0:D2:05:8D:CF:32:34:2F:DC:EC:8C:C4:C1:6D:C8:12
            X509v3 Authority Key Identifier:
                keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c2:b3:85:4b:dd:26:ce:05:ae:cf:cf:91:58:c5:cf:e7:15:
         a6:f1:a2:70:b4:cc:3c:45:cd:7c:74:f6:70:de:81:ad:bf:3b:
         d0:27:f9:90:6c:a4:84:39:2f:05:38:f4:36:33:7a:9e:99:28:
         1c:02:ee:33:a3:d6:26:11:ed:52:40:03:b0:03:4e:69:c5:e6:
         93:9b:6a:66:c9:38:82:e0:77:a3:73:77:fa:07:42:9a:2d:09:
         4e:4c:6f:c0:a1:2f:48:0f:bb:41:7e:3a:79:df:d8:8f:7b:d4:
         d0:cf:11:f8:44:db:99:9d:1c:00:6c:61:cb:f3:96:15:5e:56:
         59:03:4b:da:6e:82:b0:c9:d2:42:46:d7:fb:a6:d8:93:71:b3:
         98:26:6d:ff:d2:d6:b4:46:92:64:33:94:53:f1:df:e4:09:e7:
         49:9b:5a:72:b4:01:95:00:90:2f:b9:ef:db:e0:42:52:8b:49:
         00:e8:47:2b:74:9d:d7:d1:f7:33:44:5e:98:77:70:ae:cf:2a:
         49:42:3a:69:2e:28:8a:4f:75:49:bd:fe:ce:9b:b5:ee:af:e3:
         22:79:2e:31:b6:56:f2:bf:ba:e0:d7:dc:4a:c6:1b:b1:a6:7c:
         fe:c7:92:67:58:8d:2e:c5:90:35:c8:4a:40:26:ec:e4:e0:18:
         73:d7:9a:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw
OTYzNTNERDgwHhcNMjYwMzAxMDAyNzE1WhcNMjYwMzA4MDAyNzE1WjAYMRYwFAYD
VQQDDA02OWEzODdlMy1lNjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArNj31InqcNKspTBgty89h9G8QcoEHdl4iw0h/SEz/YztHQ3Rrgouu2ZyJVSC
C/fvhDEhQ9ArjLL646TaqTbKJTmWwPPK4qADicmkzPrYIT2O8G4PkefdN5cQOn1w
W1J7zSkuooZmhvI+jqo0wabAYFFu7a7V9WJhng2+G/k4VUYfA/PaYgId3Cexh9Eo
/JDDGb1U6ZoYpOqvDIbTALNf405Sjd2c/MP0uck2uC4BzcN7wf2xP8xYz0x5v6ZV
nIwBuV9xe9nTOP4WE1eyLUEsAgtDLJz185cNU94dC801YnQtWfBu/b55Ht13Wv2Y
WClG3M7uHI8zggfluO2nOuWEwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ43m1Og
0gWNzzI0L9zsjMTBbcgSMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3
ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ
ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2
R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlsKzhUvdJs4Frs/PkVjFz+cVpvGicLTMPEXNfHT2cN6Brb870Cf5kGykhDkv
BTj0NjN6npkoHALuM6PWJhHtUkADsANOacXmk5tqZsk4guB3o3N3+gdCmi0JTkxv
wKEvSA+7QX46ed/Yj3vU0M8R+ETbmZ0cAGxhy/OWFV5WWQNL2m6CsMnSQkbX+6bY
k3GzmCZt/9LWtEaSZDOUU/Hf5AnnSZtacrQBlQCQL7nv2+BCUotJAOhHK3Sd19H3
M0RemHdwrs8qSUI6aS4oik91Sb3+zpu17q/jInkuMbZW8r+64NfcSsYbsaZ8/seS
Z1iNLsWQNchKQCbs5OAYc9eaLQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:46 2026 by rpki-client