Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
File:                     iEiqzfKVEwPnCY9BnYygBCKJDGk.mft (raw, json)
Hash identifier:          Wj0m/r3HNmo8PVaCiJjz4PwEjcbKWGyBnJMutZ94bH8=
Subject key identifier:   11:78:EB:11:14:4A:D5:E2:47:86:44:B3:BC:1D:9E:A1:57:47:08:1C
Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69
Certificate issuer:       /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
Manifest number:          0100
Signing time:             Sun 01 Mar 2026 07:18:30 +0000
Manifest this update:     Sun 01 Mar 2026 07:18:29 +0000
Manifest next update:     Sun 08 Mar 2026 07:18:29 +0000
Files and hashes:         1: iEiqzfKVEwPnCY9BnYygBCKJDGk.crl (hash: 7gW4GZlNGyFovgY9WUFzjrIHPHPAHMfbMdKKvgv/EOA=)
                          2: 07BAAB7C9B1611EFB5C28465C4F9AE02.roa (hash: ofbztl5uVlglZWvlUxP/w/vzUs13H0jw290VgxrDPX8=)
                          3: 029310329B1911EFA0BD6470C4F9AE02.roa (hash: ipUtH6de1n3QDXNmS4idd62IMEQfE9S8Kl6BBzpD9nQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl
                          rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8047, serialNumber=8848AACDF2951303E7098F419D8CA00422890C69
        Validity
            Not Before: Mar  1 07:18:29 2026 GMT
            Not After : Mar  8 07:18:29 2026 GMT
        Subject: CN=69a3e846-dd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5b:5a:e6:9f:b2:f7:49:e6:9f:71:0e:13:bd:
                    8b:6d:98:1f:b8:30:28:da:9a:0e:33:81:83:f2:ca:
                    1b:59:0f:30:11:9e:88:ef:f7:97:ec:b8:c7:76:cc:
                    5c:a9:1c:d6:7e:df:ed:1b:f8:11:54:dc:a4:84:c7:
                    39:e4:cc:6f:73:69:72:11:b1:8f:78:2e:ff:38:0a:
                    92:cc:fa:bc:e4:40:f9:af:89:61:54:8d:12:a8:69:
                    5e:3d:7f:6f:cc:19:19:de:23:c6:f1:f7:57:4a:6a:
                    d3:1c:b9:4a:61:85:f0:14:47:2b:81:93:2e:cd:9e:
                    19:47:88:2b:b0:2e:ca:c9:e9:7d:45:10:2c:e6:c2:
                    d4:9f:44:68:42:65:87:06:87:10:d9:0b:2d:40:3d:
                    5b:f5:9c:d6:b9:e8:ba:ab:be:c8:60:09:5a:e1:f0:
                    53:aa:13:b9:bb:b9:a1:92:f8:b3:2a:3e:d8:f8:78:
                    50:3b:c1:78:65:21:c2:77:6e:d3:e3:f6:0a:f7:62:
                    82:dc:e5:8a:cd:94:6b:86:09:09:93:76:ad:70:01:
                    15:7b:bd:56:93:90:c4:55:3c:0e:06:e7:d3:ba:60:
                    60:f0:dc:f5:ad:24:f6:a9:8f:1d:82:6f:26:92:86:
                    91:d1:ac:41:fd:91:bd:0a:46:2a:db:bf:9d:90:65:
                    40:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:78:EB:11:14:4A:D5:E2:47:86:44:B3:BC:1D:9E:A1:57:47:08:1C
            X509v3 Authority Key Identifier:
                keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ae:01:d3:b6:a1:e8:63:7e:d2:d1:e6:b1:ff:70:04:d5:69:
         ba:93:9d:4c:dc:87:65:37:de:19:99:e7:be:3f:f1:41:b8:78:
         45:79:18:c5:3a:b2:fc:86:04:0c:7f:d5:6b:e4:77:5f:38:d6:
         06:13:b9:02:ec:82:02:70:69:71:49:6c:b4:d3:b3:b0:8b:62:
         8a:cb:d8:59:76:f2:46:ad:f4:c9:3a:df:54:63:b7:8e:46:57:
         b1:e4:a5:63:0a:2d:2c:19:8a:0e:4b:49:95:a6:93:f1:49:4e:
         93:a4:95:ad:1a:e3:ad:1d:37:bb:11:6a:14:4f:89:7c:15:c7:
         b0:45:a3:98:ae:6c:93:17:c3:ac:1b:9f:80:12:0f:e8:c5:52:
         11:2e:ee:e9:ce:9f:ef:46:69:c8:b1:75:2f:ef:b4:8a:58:81:
         50:fe:de:84:81:98:81:7e:f3:16:3e:0c:3e:62:28:fb:3e:50:
         ca:ce:55:de:42:b3:13:58:21:52:e2:cc:71:6a:91:41:e5:fe:
         11:79:a7:52:89:78:9f:59:d0:25:c5:e1:b6:e1:df:2b:9a:91:
         3c:f6:96:9f:27:fa:c3:5b:c9:6c:74:35:62:46:3a:59:2c:1e:
         ee:53:65:42:fe:ec:42:6e:62:9f:d8:aa:2b:47:b5:a0:1e:75:
         63:21:45:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgwNDcxMTAvBgNVBAUTKDg4NDhBQUNERjI5NTEzMDNFNzA5OEY0MTlEOENBMDA0
MjI4OTBDNjkwHhcNMjYwMzAxMDcxODI5WhcNMjYwMzA4MDcxODI5WjAYMRYwFAYD
VQQDEw02OWEzZTg0Ni1kZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmlta5p+y90nmn3EOE72LbZgfuDAo2poOM4GD8sobWQ8wEZ6I7/eX7LjHdsxc
qRzWft/tG/gRVNykhMc55Mxvc2lyEbGPeC7/OAqSzPq85ED5r4lhVI0SqGlePX9v
zBkZ3iPG8fdXSmrTHLlKYYXwFEcrgZMuzZ4ZR4grsC7Kyel9RRAs5sLUn0RoQmWH
BocQ2QstQD1b9ZzWuei6q77IYAla4fBTqhO5u7mhkvizKj7Y+HhQO8F4ZSHCd27T
4/YK92KC3OWKzZRrhgkJk3atcAEVe71Wk5DEVTwOBufTumBg8Nz1rST2qY8dgm8m
koaR0axB/ZG9CkYq27+dkGVAmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBF46xEU
StXiR4ZEs7wdnqFXRwgcMB8GA1UdIwQYMBaAFIhIqs3ylRMD5wmPQZ2MoAQiiQxp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODA0Ny8zNDRBMDFBMjlC
MTUxMUVGODZFQjM3NDZDNEY5QUUwMi9pRWlxemZLVkV3UG5DWTlCbll5Z0JDS0pE
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lFaXF6ZktWRXdQbkNZOUJuWXlnQkNLSkRHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODA0Ny8zNDRBMDFBMjlCMTUxMUVGODZFQjM3NDZDNEY5QUUwMi9pRWlxemZLVkV3
UG5DWTlCbll5Z0JDS0pER2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr64B07ah6GN+0tHmsf9wBNVpupOdTNyHZTfeGZnnvj/xQbh4RXkYxTqy/IYE
DH/Va+R3XzjWBhO5AuyCAnBpcUlstNOzsItiisvYWXbyRq30yTrfVGO3jkZXseSl
YwotLBmKDktJlaaT8UlOk6SVrRrjrR03uxFqFE+JfBXHsEWjmK5skxfDrBufgBIP
6MVSES7u6c6f70ZpyLF1L++0iliBUP7ehIGYgX7zFj4MPmIo+z5Qys5V3kKzE1gh
UuLMcWqRQeX+EXmnUol4n1nQJcXhtuHfK5qRPPaWnyf6w1vJbHQ1YkY6WSwe7lNl
Qv7sQm5in9iqK0e1oB51YyFFHQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:08:11 2026 by rpki-client