Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
File:                     o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json)
Hash identifier:          Y2Ts/NqQuC0az3baQ0DfmQn2UG29gAaYbjDYbYuw/qE=
Subject key identifier:   DC:59:86:37:6E:53:6D:DF:A7:8B:B7:78:CE:64:EC:5A:93:38:63:9F
Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
Certificate issuer:       /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Certificate serial:       03BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
Manifest number:          03B8
Signing time:             Sun 01 Mar 2026 01:30:50 +0000
Manifest this update:     Sun 01 Mar 2026 01:30:50 +0000
Manifest next update:     Sun 08 Mar 2026 01:30:50 +0000
Files and hashes:         1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: L0hXyjx3yY0EeSbwQa7LJ/OsA/uYCKG3fH0AzofQcjY=)
                          2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: 1PX1jYskVKNf+0dHErUm5h6atNXjuWOS1xYxAB/fHQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
                          rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 957 (0x3bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFB4B, serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
        Validity
            Not Before: Mar  1 01:30:50 2026 GMT
            Not After : Mar  8 01:30:50 2026 GMT
        Subject: CN=69a396ca-29c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:de:87:1a:87:51:4c:d3:87:7e:02:b9:91:
                    aa:cf:ca:53:1d:02:81:8f:26:92:d9:5e:37:ab:6d:
                    c4:51:0e:df:14:09:7c:aa:3e:77:2b:94:95:25:cc:
                    89:94:05:af:44:94:99:d2:89:a5:9c:71:6f:dc:91:
                    d7:12:20:36:5f:ad:99:64:2d:e3:88:41:66:5e:ad:
                    c3:c0:f3:ea:cc:26:16:7e:74:32:23:7e:10:ce:d8:
                    cf:75:ec:89:9f:11:e7:5e:90:42:46:d0:77:cb:ea:
                    66:3e:e0:e9:ea:4b:65:3c:a8:11:98:96:7d:3d:af:
                    b5:5e:7a:f9:f6:06:bf:5a:30:7b:4b:c0:e3:08:4d:
                    b5:f1:fe:8b:aa:73:c4:fa:a6:6e:a3:e8:aa:2c:cb:
                    a3:63:0a:3c:e0:97:6c:56:4c:2b:0a:15:49:a2:ef:
                    ef:a7:47:f4:45:44:45:27:82:cc:a8:37:ac:02:4d:
                    b0:c1:fc:24:9f:19:27:1f:f4:2d:8f:ce:db:70:b2:
                    e3:a9:33:20:d8:b3:2d:c9:23:f9:4a:f0:a8:88:a0:
                    b8:1b:32:78:65:01:98:f3:84:c6:fb:ee:fa:24:9d:
                    c4:5e:47:b9:41:65:ba:2f:07:5a:b0:8f:0b:dc:8e:
                    0d:ce:1a:92:56:38:f6:ba:72:77:2d:29:0d:a6:31:
                    45:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:59:86:37:6E:53:6D:DF:A7:8B:B7:78:CE:64:EC:5A:93:38:63:9F
            X509v3 Authority Key Identifier:
                keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:df:f5:d4:c0:ae:1d:e0:0b:f2:eb:11:35:9f:d6:43:58:2b:
         e6:a6:96:7e:ac:61:92:ee:65:6e:c5:1b:7a:8d:83:67:7f:ed:
         fb:a0:84:e3:27:4c:20:c5:6b:d6:e9:12:69:59:c0:f8:1a:77:
         62:05:a1:b6:c4:a3:0b:40:66:6b:ff:4b:80:33:03:a5:5b:41:
         61:22:f8:49:7e:83:d9:11:5a:66:1d:8d:33:57:30:cb:98:7b:
         8e:35:36:e7:32:00:7d:ab:ec:cc:bc:aa:91:2e:56:a7:b0:e8:
         52:cf:6a:86:51:a8:f0:0e:32:4e:8a:21:d0:11:5a:ac:67:40:
         00:40:ac:f3:d1:d5:df:37:14:3e:52:53:11:1a:b1:42:ad:05:
         b6:a5:fd:05:6d:71:4b:e6:85:6a:fd:ed:dd:2a:3f:fd:6b:63:
         d0:48:48:96:ad:80:54:5b:1f:a1:f5:a9:00:e2:b7:52:3b:3f:
         ea:83:be:67:49:b6:de:30:56:b4:83:b3:8d:aa:80:1c:b2:24:
         ba:b3:05:2b:17:c8:0b:86:e5:2c:48:c1:10:3a:f4:ea:f2:35:
         59:eb:c2:71:6d:e0:fc:a1:69:cf:f3:a8:6d:30:09:4d:11:88:
         6e:7a:30:41:ae:a9:9b:b7:2d:09:7e:e6:f4:06:0f:e3:a7:17:
         2c:30:3d:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZCNEIxMTAvBgNVBAUTKEEzNTU2MURBNDVBOTU1RjAyRDEyMkEwRDg4RThDNzYy
MzlFREY5MjAwHhcNMjYwMzAxMDEzMDUwWhcNMjYwMzA4MDEzMDUwWjAYMRYwFAYD
VQQDDA02OWEzOTZjYS0yOWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyazehxqHUUzTh34CuZGqz8pTHQKBjyaS2V43q23EUQ7fFAl8qj53K5SVJcyJ
lAWvRJSZ0omlnHFv3JHXEiA2X62ZZC3jiEFmXq3DwPPqzCYWfnQyI34QztjPdeyJ
nxHnXpBCRtB3y+pmPuDp6ktlPKgRmJZ9Pa+1Xnr59ga/WjB7S8DjCE218f6LqnPE
+qZuo+iqLMujYwo84JdsVkwrChVJou/vp0f0RURFJ4LMqDesAk2wwfwknxknH/Qt
j87bcLLjqTMg2LMtySP5SvCoiKC4GzJ4ZQGY84TG++76JJ3EXke5QWW6LwdasI8L
3I4NzhqSVjj2unJ3LSkNpjFFzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNxZhjdu
U23fp4u3eM5k7FqTOGOfMB8GA1UdIwQYMBaAFKNVYdpFqVXwLRIqDYjox2I57fkg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI0Qi84RTE2MjQzMEM3
NjAxMUVDOEU3RDk2MjlDNEY5QUUwMi9vMVZoMmtXcFZmQXRFaW9OaU9qSFlqbnQt
U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL28xVmgya1dwVmZBdEVpb05pT2pIWWpudC1TQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkI0Qi84RTE2MjQzMEM3NjAxMUVDOEU3RDk2MjlDNEY5QUUwMi9vMVZoMmtXcFZm
QXRFaW9OaU9qSFlqbnQtU0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaN/11MCuHeAL8usRNZ/WQ1gr5qaWfqxhku5lbsUbeo2DZ3/t+6CE4ydMIMVr
1ukSaVnA+Bp3YgWhtsSjC0Bma/9LgDMDpVtBYSL4SX6D2RFaZh2NM1cwy5h7jjU2
5zIAfavszLyqkS5Wp7DoUs9qhlGo8A4yTooh0BFarGdAAECs89HV3zcUPlJTERqx
Qq0FtqX9BW1xS+aFav3t3So//Wtj0EhIlq2AVFsfofWpAOK3Ujs/6oO+Z0m23jBW
tIOzjaqAHLIkurMFKxfIC4blLEjBEDr06vI1WevCcW3g/KFpz/OobTAJTRGIbnow
Qa6pm7ctCX7m9AYP46cXLDA9mA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:01:01 2026 by rpki-client