Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
File:                     J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json)
Hash identifier:          2ZSfrNWynDT/KTkvxz5UgFiKfgeATQHYEb5m9doRnQQ=
Subject key identifier:   B9:A5:1C:0F:B9:86:FE:69:6C:85:68:52:34:23:CF:1C:95:71:EA:24
Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD
Certificate issuer:       /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD
Certificate serial:       07E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
Manifest number:          07DA
Signing time:             Mon 02 Mar 2026 02:37:37 +0000
Manifest this update:     Mon 02 Mar 2026 02:37:35 +0000
Manifest next update:     Mon 09 Mar 2026 02:37:35 +0000
Files and hashes:         1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: j8AzPeCjThJH64/aNZZ2ljigZuqNdB1YuTzQ1OLNXO8=)
                          2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: MGp5NvaWmsdbvQARv7j0xLY5ZLqFaH4JtDxSWJQ+zS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2020 (0x7e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD
        Validity
            Not Before: Mar  2 02:37:35 2026 GMT
            Not After : Mar  9 02:37:35 2026 GMT
        Subject: CN=69a4f7f0-5856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bd:c8:57:60:ee:89:31:d3:b1:6a:51:f3:58:
                    38:0e:13:10:c5:46:d1:de:b6:8a:bf:7e:11:61:44:
                    be:98:e7:60:b4:e2:7d:c4:bb:9f:1f:8d:28:d1:3b:
                    af:93:a2:f3:95:e6:62:12:22:ed:da:12:21:c8:20:
                    40:cb:e3:d5:a1:d2:a1:74:a4:98:63:57:78:ee:b5:
                    bb:31:e1:b8:67:ee:91:ba:41:f2:3c:63:47:6d:75:
                    16:c0:59:df:73:08:ae:91:fb:93:4e:a8:89:70:32:
                    ad:cf:92:08:e6:2e:02:4a:cb:65:16:27:26:09:1c:
                    40:d8:fb:3a:bf:88:81:94:34:f1:d2:2d:87:39:45:
                    18:d2:82:80:4c:8e:e0:71:f6:59:a8:a0:ce:c0:9e:
                    9f:93:00:d6:94:e3:8c:f6:cb:3a:d7:b9:b8:6d:f5:
                    6c:36:90:ac:c7:60:fd:ab:e5:08:37:bf:56:19:79:
                    7e:b1:3f:c7:c1:c0:f1:58:67:9f:13:4b:34:ab:80:
                    e3:7c:4f:51:e8:2b:92:4c:e4:74:c4:48:27:70:a0:
                    bd:04:de:17:ac:59:99:4f:72:69:b6:23:21:07:07:
                    8c:ae:e4:f2:f3:3a:59:65:7e:3d:4e:46:bf:2a:50:
                    f2:70:5b:3d:bb:f8:9c:94:a2:bf:bc:7e:e4:f1:c3:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A5:1C:0F:B9:86:FE:69:6C:85:68:52:34:23:CF:1C:95:71:EA:24
            X509v3 Authority Key Identifier:
                keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a7:3c:83:24:aa:e2:fb:f5:18:50:75:e7:ba:3b:68:ce:06:
         40:5b:c4:45:f8:4d:78:32:5b:b8:21:8d:62:04:0e:63:b1:cc:
         93:87:b9:54:f7:d6:84:e6:cd:4a:ed:ec:51:14:5a:77:0c:de:
         33:99:f0:11:86:83:4b:f9:0a:1c:56:71:78:ae:bf:b1:ba:f1:
         02:66:6a:8d:93:56:5a:c1:f0:d0:ae:b2:00:48:d1:2a:a2:92:
         98:5e:84:32:15:9f:76:bc:55:5d:be:20:85:df:23:31:45:28:
         6f:c8:2b:b9:2b:a7:9e:3b:f4:11:6e:c4:6e:39:61:ce:67:d9:
         b7:29:55:2c:a5:84:ae:6e:9e:27:64:df:24:56:55:5f:81:5d:
         bb:59:af:82:fa:b8:3f:01:cf:de:48:a7:4a:5c:72:14:a2:51:
         5e:ca:3c:99:b0:c7:a1:bc:f0:39:e6:c4:97:25:7d:64:74:63:
         99:c9:c1:41:92:8f:33:cb:fe:98:b1:e5:95:81:45:83:9f:15:
         e4:02:f9:61:1e:9a:e6:12:da:65:4f:ec:68:6f:3f:c8:36:ff:
         2b:b1:92:0e:b7:b1:85:07:b5:b3:1c:1e:c6:4f:8a:45:56:c3:
         62:28:99:e5:a2:8c:67:0c:d9:aa:1f:7c:5f:8a:43:68:52:4a:
         dc:55:7c:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFBMjMxMTAvBgNVBAUTKDI3QzM5MDBGQkQ3N0VFMjJDQjcxRTlBOTBFODE1NzRD
REU0NjQ0QUQwHhcNMjYwMzAyMDIzNzM1WhcNMjYwMzA5MDIzNzM1WjAYMRYwFAYD
VQQDEw02OWE0ZjdmMC01ODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA073IV2DuiTHTsWpR81g4DhMQxUbR3raKv34RYUS+mOdgtOJ9xLufH40o0Tuv
k6LzleZiEiLt2hIhyCBAy+PVodKhdKSYY1d47rW7MeG4Z+6RukHyPGNHbXUWwFnf
cwiukfuTTqiJcDKtz5II5i4CSstlFicmCRxA2Ps6v4iBlDTx0i2HOUUY0oKATI7g
cfZZqKDOwJ6fkwDWlOOM9ss617m4bfVsNpCsx2D9q+UIN79WGXl+sT/HwcDxWGef
E0s0q4DjfE9R6CuSTOR0xEgncKC9BN4XrFmZT3JptiMhBweMruTy8zpZZX49Tka/
KlDycFs9u/iclKK/vH7k8cONLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmlHA+5
hv5pbIVoUjQjzxyVceokMB8GA1UdIwQYMBaAFCfDkA+9d+4iy3HpqQ6BV0zeRkSt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUEyMy9BQzUzM0RFRTI4
OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdpTExjZW1wRG9GWFRONUdS
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o4T1FENzEzN2lMTGNlbXBEb0ZYVE41R1JLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUEyMy9BQzUzM0RFRTI4OTYxMUVCQkFBRDU3MjFDNEY5QUUwMi9KOE9RRDcxMzdp
TExjZW1wRG9GWFRONUdSSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWqc8gySq4vv1GFB157o7aM4GQFvERfhNeDJbuCGNYgQOY7HMk4e5VPfWhObN
Su3sURRadwzeM5nwEYaDS/kKHFZxeK6/sbrxAmZqjZNWWsHw0K6yAEjRKqKSmF6E
MhWfdrxVXb4ghd8jMUUob8gruSunnjv0EW7EbjlhzmfZtylVLKWErm6eJ2TfJFZV
X4Fdu1mvgvq4PwHP3kinSlxyFKJRXso8mbDHobzwOebElyV9ZHRjmcnBQZKPM8v+
mLHllYFFg58V5AL5YR6a5hLaZU/saG8/yDb/K7GSDrexhQe1sxwexk+KRVbDYiiZ
5aKMZwzZqh98X4pDaFJK3FV8Uw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:28 2026 by rpki-client