Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
File:                     7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json)
Hash identifier:          A8/qYEOOWeX+uO1vJRTqkVmcHdY7smHq2wpaBAKJpGk=
Subject key identifier:   42:EC:70:CA:DE:06:ED:67:60:4E:8B:21:BA:E9:59:EF:9F:87:8C:76
Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0
Certificate issuer:       /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
Manifest number:          015E
Signing time:             Sun 01 Mar 2026 05:59:09 +0000
Manifest this update:     Sun 01 Mar 2026 05:59:08 +0000
Manifest next update:     Sun 08 Mar 2026 05:59:08 +0000
Files and hashes:         1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: WMhCTaGDlSDGwlafgMUxUMjYhCUKnSoGDYCjfgqR6nU=)
                          2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: 7/3ODwQ2dlZbxqeVnJstobH8SWsvoF3IBlCZtLMYHu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl
                          rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0
        Validity
            Not Before: Mar  1 05:59:08 2026 GMT
            Not After : Mar  8 05:59:08 2026 GMT
        Subject: CN=69a3d5ad-38b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:7e:51:15:6d:6f:70:1c:4d:47:bf:64:f3:
                    43:66:02:a8:34:93:f0:13:8c:08:9f:4f:ca:f1:3d:
                    80:04:78:2f:73:55:1d:58:34:88:04:25:b3:c6:31:
                    ac:6e:1e:1f:40:91:a1:07:f5:9f:f3:29:ee:43:4a:
                    39:02:04:68:ae:7f:89:1c:50:22:0e:78:72:d6:1a:
                    e0:ad:79:d9:e5:4e:74:36:1d:28:90:db:70:e5:69:
                    a6:dd:e6:5b:aa:91:70:e8:15:b6:ce:9d:0f:60:b0:
                    91:66:85:62:23:56:34:27:98:d9:d7:95:15:8e:28:
                    6a:5d:f6:5b:a5:97:e4:71:a3:c4:e9:23:ab:11:fd:
                    48:cf:0b:44:82:4e:7a:ae:c8:4c:41:ca:a7:63:59:
                    3c:78:6a:7e:b0:6f:c2:a6:a1:6c:ab:e9:e7:53:05:
                    1e:1d:00:24:9b:b8:d6:77:bc:83:b7:4c:25:49:5e:
                    f4:fa:df:f6:02:57:d5:6e:e1:af:95:6b:19:63:6c:
                    4e:db:df:42:ae:7d:3b:ee:aa:12:e3:12:7e:52:eb:
                    30:c3:13:d6:ec:8a:1c:c6:3c:97:52:66:90:0f:4d:
                    eb:18:f1:d1:84:70:36:6f:cc:4f:e7:86:6f:ab:c5:
                    8e:78:19:52:38:74:cb:92:7f:a3:9e:41:77:e9:5f:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EC:70:CA:DE:06:ED:67:60:4E:8B:21:BA:E9:59:EF:9F:87:8C:76
            X509v3 Authority Key Identifier:
                keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:20:0c:0d:aa:aa:e1:78:00:94:70:94:94:6f:e8:31:dd:26:
         54:b7:50:a2:1f:73:40:6d:ab:74:21:d6:3e:31:8d:47:64:66:
         1d:f8:09:0d:5f:51:d3:60:9c:1c:2a:bc:6b:af:ec:0f:88:42:
         03:3f:19:40:c0:2a:b4:20:57:ac:de:9e:1f:89:a4:20:cd:e8:
         18:ae:fa:3d:6d:0e:6a:4d:af:b3:e7:47:75:80:be:18:da:4f:
         54:37:24:4b:6c:08:be:0b:a4:b9:a0:d7:53:fa:f3:25:bf:33:
         eb:11:35:25:9e:79:45:0e:78:28:ce:76:59:76:03:ed:7c:39:
         d8:c8:e5:0b:38:0c:32:53:ae:88:94:24:c5:79:33:dc:d9:56:
         46:17:64:e4:c6:64:9b:df:82:b1:cc:93:f9:29:b8:9d:f5:29:
         ab:5a:07:f2:b4:ed:32:b0:bb:41:29:10:c6:aa:e3:bc:38:85:
         2c:cd:73:d9:7c:59:19:0b:dc:57:cc:91:2d:a1:8d:cd:a3:ca:
         b4:46:50:f6:89:00:c7:7b:a5:9e:11:b7:51:6a:38:de:da:25:
         4b:53:16:ce:ba:19:d4:4c:ed:cf:17:af:fc:74:c3:f4:44:7e:
         6b:02:38:5a:e6:b3:ea:9a:f2:76:79:04:e0:a7:dc:44:ef:3c:
         80:1f:a3:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUxQjUxMTAvBgNVBAUTKEVFQzBFOTk5ODdEQzFFQTlENDAyRjg4NEZDREE5N0Uw
MzE0NUE0QTAwHhcNMjYwMzAxMDU1OTA4WhcNMjYwMzA4MDU1OTA4WjAYMRYwFAYD
VQQDEw02OWEzZDVhZC0zOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwHZ+URVtb3AcTUe/ZPNDZgKoNJPwE4wIn0/K8T2ABHgvc1UdWDSIBCWzxjGs
bh4fQJGhB/Wf8ynuQ0o5AgRorn+JHFAiDnhy1hrgrXnZ5U50Nh0okNtw5Wmm3eZb
qpFw6BW2zp0PYLCRZoViI1Y0J5jZ15UVjihqXfZbpZfkcaPE6SOrEf1IzwtEgk56
rshMQcqnY1k8eGp+sG/CpqFsq+nnUwUeHQAkm7jWd7yDt0wlSV70+t/2AlfVbuGv
lWsZY2xO299Crn077qoS4xJ+UuswwxPW7IocxjyXUmaQD03rGPHRhHA2b8xP54Zv
q8WOeBlSOHTLkn+jnkF36V/GewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELscMre
Bu1nYE6LIbrpWe+fh4x2MB8GA1UdIwQYMBaAFO7A6ZmH3B6p1AL4hPzal+AxRaSg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTFCNS84QjQwNUU1RTAw
M0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hxblVBdmlFX05xWDRERkZw
S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBLQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTFCNS84QjQwNUU1RTAwM0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hx
blVBdmlFX05xWDRERkZwS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZCAMDaqq4XgAlHCUlG/oMd0mVLdQoh9zQG2rdCHWPjGNR2RmHfgJDV9R02Cc
HCq8a6/sD4hCAz8ZQMAqtCBXrN6eH4mkIM3oGK76PW0Oak2vs+dHdYC+GNpPVDck
S2wIvgukuaDXU/rzJb8z6xE1JZ55RQ54KM52WXYD7Xw52MjlCzgMMlOuiJQkxXkz
3NlWRhdk5MZkm9+CscyT+Sm4nfUpq1oH8rTtMrC7QSkQxqrjvDiFLM1z2XxZGQvc
V8yRLaGNzaPKtEZQ9okAx3ulnhG3UWo43tolS1MWzroZ1Eztzxev/HTD9ER+awI4
Wuaz6prydnkE4KfcRO88gB+jJw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:57 2026 by rpki-client