Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
File:                     t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json)
Hash identifier:          /ikjkHXTCq4g1t+XTIEwsKfgl2EikTflRgNfVy5y2UU=
Subject key identifier:   A5:5B:DD:13:5E:C7:C8:A0:AD:8A:06:8C:E2:1F:D3:6B:F9:D7:1A:19
Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04
Certificate issuer:       /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
Certificate serial:       020A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
Manifest number:          0204
Signing time:             Mon 02 Mar 2026 15:14:38 +0000
Manifest this update:     Mon 02 Mar 2026 15:14:37 +0000
Manifest next update:     Mon 09 Mar 2026 15:14:37 +0000
Files and hashes:         1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: f+R2qXXibwx60ivSkrIA+4+rsKfnXolECs9XL80Xbqk=)
                          2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: UjPClW0uFtHm8QVkzT1vV63CuJ+wSKL/8pPiNqjGxQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
        Validity
            Not Before: Mar  2 15:14:37 2026 GMT
            Not After : Mar  9 15:14:37 2026 GMT
        Subject: CN=69a5a95e-8f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:c8:39:70:d8:ba:75:bd:c8:8f:e2:12:4b:
                    3e:46:0a:b5:be:22:d7:f6:72:98:31:a5:77:6f:8d:
                    1d:20:91:d8:54:03:78:c9:1b:86:2c:72:98:9b:d2:
                    9e:7e:b6:87:cb:83:b9:b3:35:79:ce:02:34:8f:f1:
                    d9:06:cd:b3:57:b0:eb:16:a4:b4:fa:b1:ec:39:1f:
                    43:ed:24:30:3e:92:52:90:48:2b:a1:e1:da:6e:f7:
                    2c:5e:c8:c3:c5:e0:39:ed:1c:a4:d8:bd:a1:92:63:
                    1e:44:dd:cf:e3:eb:62:7a:f6:8e:9a:7f:56:d6:40:
                    5f:95:9a:59:21:30:0e:17:23:8f:81:3b:d5:f2:82:
                    aa:bb:b8:95:d4:aa:33:85:31:74:bc:7c:63:5d:b3:
                    fa:99:6a:96:31:c8:f6:f9:ea:af:2a:ce:2e:86:d1:
                    3a:37:ac:84:78:e4:6b:fc:e5:a9:3f:f4:8f:76:8d:
                    ee:15:58:9a:f3:79:73:a1:67:db:92:dd:a6:73:5a:
                    36:47:15:4c:7e:41:af:9e:4a:e8:64:1b:a3:60:c9:
                    8c:fb:c2:bf:1b:05:25:e5:90:c3:1a:9c:1f:79:06:
                    87:ea:33:c8:0f:71:e1:1e:c8:de:47:61:56:12:70:
                    39:c7:29:72:39:3d:ed:fc:01:cf:a7:4b:e9:e4:a1:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5B:DD:13:5E:C7:C8:A0:AD:8A:06:8C:E2:1F:D3:6B:F9:D7:1A:19
            X509v3 Authority Key Identifier:
                keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:30:38:00:25:36:29:d8:61:ad:81:a4:a7:26:17:db:d5:92:
         7b:36:7f:99:54:e5:2e:ff:0c:d2:50:6c:46:4c:ca:81:88:db:
         03:0e:5d:05:85:0d:f7:fb:10:bb:0b:d0:57:7d:06:de:eb:66:
         06:19:e4:9e:6b:00:e9:ca:1d:43:79:55:f6:69:1b:95:83:5c:
         4e:88:52:a4:c4:37:5a:32:f9:d8:e2:d2:ae:4f:82:51:26:b0:
         d0:a7:7c:f4:8b:34:db:0e:05:86:12:be:bf:6c:ba:59:14:c2:
         e3:93:39:08:ad:ea:26:94:df:d4:75:ee:d4:14:ba:5c:44:17:
         09:e3:dd:27:13:fe:fd:72:67:37:35:cc:d8:f4:54:d5:ff:b5:
         43:ce:28:af:3c:14:99:57:4d:79:58:d9:04:9f:82:b0:f0:c9:
         8d:dd:77:00:8c:f3:10:f7:4b:10:7c:d9:c1:4f:ff:ae:ed:f4:
         d3:86:20:af:2f:49:cb:1b:cf:36:91:30:c4:d3:9c:4e:b2:23:
         f3:fa:f9:8c:0f:52:42:10:dc:c9:97:13:ef:f6:a5:d2:0e:06:
         c8:f4:74:ef:59:e6:60:f6:bf:bf:a4:6d:a9:a9:ca:d1:e7:33:
         5e:bf:90:03:a2:a3:ce:ba:61:4d:9a:a6:54:21:ec:b6:04:9b:
         01:1e:11:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkxOTcxMTAvBgNVBAUTKEI3RkU2QTQyNERCNTY1MjYxQjQ3M0E3MTIzMUQ1OUUy
MThEQzQ1MDQwHhcNMjYwMzAyMTUxNDM3WhcNMjYwMzA5MTUxNDM3WjAYMRYwFAYD
VQQDEw02OWE1YTk1ZS04ZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq4jIOXDYunW9yI/iEks+Rgq1viLX9nKYMaV3b40dIJHYVAN4yRuGLHKYm9Ke
fraHy4O5szV5zgI0j/HZBs2zV7DrFqS0+rHsOR9D7SQwPpJSkEgroeHabvcsXsjD
xeA57Ryk2L2hkmMeRN3P4+tievaOmn9W1kBflZpZITAOFyOPgTvV8oKqu7iV1Koz
hTF0vHxjXbP6mWqWMcj2+eqvKs4uhtE6N6yEeORr/OWpP/SPdo3uFVia83lzoWfb
kt2mc1o2RxVMfkGvnkroZBujYMmM+8K/GwUl5ZDDGpwfeQaH6jPID3HhHsjeR2FW
EnA5xylyOT3t/AHPp0vp5KFU5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVb3RNe
x8igrYoGjOIf02v51xoZMB8GA1UdIwQYMBaAFLf+akJNtWUmG0c6cSMdWeIY3EUE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTE5Ny80RjNDNzk4QTA2
OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpTWWJSenB4SXgxWjRoamNS
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RfNXFRazIxWlNZYlJ6cHhJeDFaNGhqY1JRUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTE5Ny80RjNDNzk4QTA2OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpT
WWJSenB4SXgxWjRoamNSUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALjA4ACU2KdhhrYGkpyYX29WSezZ/mVTlLv8M0lBsRkzKgYjbAw5dBYUN9/sQ
uwvQV30G3utmBhnknmsA6codQ3lV9mkblYNcTohSpMQ3WjL52OLSrk+CUSaw0Kd8
9Is02w4FhhK+v2y6WRTC45M5CK3qJpTf1HXu1BS6XEQXCePdJxP+/XJnNzXM2PRU
1f+1Q84orzwUmVdNeVjZBJ+CsPDJjd13AIzzEPdLEHzZwU//ru3004Ygry9JyxvP
NpEwxNOcTrIj8/r5jA9SQhDcyZcT7/al0g4GyPR071nmYPa/v6RtqanK0eczXr+Q
A6KjzrphTZqmVCHstgSbAR4RBA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:57:42 2026 by rpki-client