Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
File:                     -Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft (raw, json)
Hash identifier:          InYYu/cUymhQEUgZLGdNdTPLzf/GmGjwSWdr372yKgw=
Subject key identifier:   15:7F:3E:10:F6:41:CC:85:1B:5C:0E:9D:F0:5E:E0:98:D8:BB:69:13
Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81
Certificate issuer:       /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881
Certificate serial:       07CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
Manifest number:          07BF
Signing time:             Mon 02 Mar 2026 01:32:50 +0000
Manifest this update:     Mon 02 Mar 2026 01:32:48 +0000
Manifest next update:     Mon 09 Mar 2026 01:32:48 +0000
Files and hashes:         1: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl (hash: fpVWOn5p6crtqX/V4o2wxgKCjQhkdl2aUdHY321pTG0=)
                          2: AD7A378C334411EB901EBB81C4F9AE02.roa (hash: mMeGgDhlZB8BpJM1VuPAqYFwszYe58qsYy0dfc2aDiM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl
                          rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1996 (0x7cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA053, serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881
        Validity
            Not Before: Mar  2 01:32:48 2026 GMT
            Not After : Mar  9 01:32:48 2026 GMT
        Subject: CN=69a4e8c2-0d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:29:2f:0c:72:db:6b:36:9f:7b:eb:6c:ea:
                    2a:0d:09:37:4e:02:bf:fe:68:37:e6:a1:ee:1b:a5:
                    78:a9:3a:92:53:0a:e9:ee:d4:52:fc:89:68:36:3e:
                    b9:86:e1:8d:d5:5e:07:e3:52:fe:59:84:5f:70:8e:
                    37:84:c9:99:88:dd:92:ce:ee:21:6c:15:32:c0:8e:
                    f5:c6:44:e2:65:a9:9f:5d:b8:5f:cf:60:df:bc:b7:
                    39:c8:4d:6f:aa:5c:ff:6a:f7:e9:8c:da:c4:50:18:
                    0c:3b:74:9a:7e:8d:5d:f8:0a:78:88:0c:d2:44:fe:
                    1b:cd:31:be:ae:4f:bf:ff:46:42:ab:77:cd:57:fe:
                    1f:8f:9c:3e:fc:32:21:5b:9b:91:be:ed:3f:3c:2a:
                    54:1c:5e:6b:0e:64:14:8a:ee:0f:a7:e7:b5:05:2a:
                    27:b9:49:92:13:17:fb:f1:80:fe:e2:27:9b:5a:8b:
                    18:8b:c9:42:ce:2f:4d:b5:d7:6e:03:c1:ac:db:e7:
                    b6:bd:16:a6:7b:1a:ad:8d:ae:09:8f:5c:5f:51:db:
                    a7:74:4c:f8:20:3a:3e:da:ba:a9:23:a8:b2:32:89:
                    7b:4c:77:43:a9:e0:fb:37:15:a9:08:9d:91:91:2b:
                    65:2e:4b:c9:d1:93:c8:cf:26:36:e6:6f:f5:88:8e:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7F:3E:10:F6:41:CC:85:1B:5C:0E:9D:F0:5E:E0:98:D8:BB:69:13
            X509v3 Authority Key Identifier:
                keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:db:ad:8d:cb:fe:4e:c3:eb:82:1f:81:bd:92:40:03:66:be:
         f1:4a:42:c1:a0:36:8d:b6:3f:08:6e:0a:82:b4:ea:2b:dd:17:
         0b:e4:2f:32:ef:1b:3e:39:45:14:90:53:b6:4a:a8:e4:c1:ef:
         98:54:99:80:8f:18:22:0d:30:67:de:7f:a5:de:bf:f5:c3:f3:
         b2:d6:7d:9c:e3:34:89:6b:88:9a:5c:85:2f:07:b4:6b:88:bd:
         2b:cd:e9:57:53:bc:6b:cd:0e:3d:19:a8:e6:13:fb:6d:7f:81:
         80:a2:6d:09:36:d1:28:bd:ac:85:20:3f:da:8a:f1:07:a2:e8:
         ae:10:40:88:a4:cf:be:08:18:95:89:6b:84:21:a9:ee:d8:b6:
         a2:e7:3b:42:29:c8:7f:70:97:59:36:84:c2:8c:3d:8b:1c:26:
         3e:f6:b3:09:01:03:fd:72:7c:74:ef:6d:03:e0:fe:d8:c9:be:
         a4:5b:e9:48:97:ed:f3:cd:4d:2f:d9:82:92:0f:af:99:09:ea:
         28:7e:93:f2:13:26:9d:85:05:6b:f8:25:20:e4:71:c7:a6:85:
         70:52:d2:23:6a:0e:6a:8f:34:a0:51:68:57:aa:3b:8a:df:6c:
         e8:e1:49:13:41:85:11:32:de:f7:4b:53:23:fc:6b:d2:8e:f6:
         29:31:9a:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUEwNTMxMTAvBgNVBAUTKEY5MkE3NTBCNTI0Nzk0RDRGQkJGMjE4ODVCREFGNkQw
NzhGMUU4ODEwHhcNMjYwMzAyMDEzMjQ4WhcNMjYwMzA5MDEzMjQ4WjAYMRYwFAYD
VQQDEw02OWE0ZThjMi0wZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr7gpLwxy22s2n3vrbOoqDQk3TgK//mg35qHuG6V4qTqSUwrp7tRS/IloNj65
huGN1V4H41L+WYRfcI43hMmZiN2Szu4hbBUywI71xkTiZamfXbhfz2DfvLc5yE1v
qlz/avfpjNrEUBgMO3Safo1d+Ap4iAzSRP4bzTG+rk+//0ZCq3fNV/4fj5w+/DIh
W5uRvu0/PCpUHF5rDmQUiu4Pp+e1BSonuUmSExf78YD+4iebWosYi8lCzi9Ntddu
A8Gs2+e2vRamexqtja4Jj1xfUdundEz4IDo+2rqpI6iyMol7THdDqeD7NxWpCJ2R
kStlLkvJ0ZPIzyY25m/1iI6WtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBV/PhD2
QcyFG1wOnfBe4JjYu2kTMB8GA1UdIwQYMBaAFPkqdQtSR5TU+78hiFva9tB48eiB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My9BRkI2QkY3NjMz
NDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxOVDd2eUdJVzlyMjBIang2
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1TcDFDMUpIbE5UN3Z5R0lXOXIyMEhqeDZJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTA1My9BRkI2QkY3NjMzNDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxO
VDd2eUdJVzlyMjBIang2SUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB9utjcv+TsPrgh+BvZJAA2a+8UpCwaA2jbY/CG4KgrTqK90XC+QvMu8bPjlF
FJBTtkqo5MHvmFSZgI8YIg0wZ95/pd6/9cPzstZ9nOM0iWuImlyFLwe0a4i9K83p
V1O8a80OPRmo5hP7bX+BgKJtCTbRKL2shSA/2orxB6LorhBAiKTPvggYlYlrhCGp
7ti2ouc7QinIf3CXWTaEwow9ixwmPvazCQED/XJ8dO9tA+D+2Mm+pFvpSJft881N
L9mCkg+vmQnqKH6T8hMmnYUFa/glIORxx6aFcFLSI2oOao80oFFoV6o7it9s6OFJ
E0GFETLe90tTI/xr0o72KTGaaw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:06 2026 by rpki-client