Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
File:                     H_TjPtdzDc4yMdLttU2W2eq19_Y.mft (raw, json)
Hash identifier:          4wFKFgVJsOa1zGSutmszaIN16wy7w1TH8brfIA/c7Qc=
Subject key identifier:   17:F9:63:7E:3E:C6:59:51:4E:70:92:63:97:72:B9:2E:08:C0:C4:48
Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6
Certificate issuer:       /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6
Certificate serial:       093D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
Manifest number:          0933
Signing time:             Sun 01 Mar 2026 23:47:01 +0000
Manifest this update:     Sun 01 Mar 2026 23:47:00 +0000
Manifest next update:     Sun 08 Mar 2026 23:47:00 +0000
Files and hashes:         1: H_TjPtdzDc4yMdLttU2W2eq19_Y.crl (hash: gatxBtZWnvqHFRqbWSi8JcLHgoJfuaF0rMDYiYtaSis=)
                          2: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (hash: 4YdALQWxtpdN9J6DXUQvSn2pgzESyQXrj0UTon65zjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2365 (0x93d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B809B, serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6
        Validity
            Not Before: Mar  1 23:47:00 2026 GMT
            Not After : Mar  8 23:47:00 2026 GMT
        Subject: CN=69a4cff5-b490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:f8:37:8a:ce:ff:cb:17:46:82:dc:15:d3:
                    2a:4b:5b:2c:17:d6:9e:6c:4f:34:51:b3:ee:6f:22:
                    16:2a:b5:14:db:86:44:28:e8:d7:98:91:e5:96:13:
                    36:9a:ac:4b:24:65:f2:5c:db:6a:63:8e:c2:7e:4d:
                    e8:3b:ad:da:74:b0:2d:6c:99:be:73:c3:4b:4b:75:
                    90:20:93:49:3b:d3:0d:5f:31:4f:29:b5:7d:f6:d4:
                    56:66:bb:d5:39:69:46:e6:43:66:dd:58:73:6a:14:
                    47:05:f5:e9:1e:76:6f:47:60:3a:42:35:cb:a7:cf:
                    46:37:eb:c2:d4:b2:a6:22:f5:b0:4f:63:6c:1f:77:
                    74:53:af:f9:c9:64:06:23:a7:85:32:94:bc:5d:12:
                    b6:e9:a4:1e:e3:03:be:26:79:4f:6a:0f:9b:b2:ee:
                    ee:a8:cb:0b:20:43:56:78:22:5c:b9:ea:c3:1a:06:
                    d3:4d:e9:6f:b4:98:ab:4a:72:62:85:94:66:07:24:
                    48:cd:b7:8f:a5:26:7b:86:44:df:ae:d9:15:ba:f5:
                    cc:8c:ed:b8:f2:14:e9:09:10:5a:3c:2b:76:ac:82:
                    32:94:9e:bd:60:b9:fe:c1:37:01:45:23:21:c2:f5:
                    57:8d:29:8a:43:b4:46:75:84:6a:7a:a0:54:61:f9:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F9:63:7E:3E:C6:59:51:4E:70:92:63:97:72:B9:2E:08:C0:C4:48
            X509v3 Authority Key Identifier:
                keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:20:de:6e:f0:96:af:4b:a4:43:57:5e:1b:f4:c8:53:2d:09:
         9c:2a:97:91:41:2f:5f:32:b9:06:e2:24:95:a3:54:ba:82:9b:
         dd:42:82:ca:f3:c8:c0:2b:f3:c9:c9:dd:59:98:26:ab:cb:a4:
         9a:2f:0f:44:b8:b4:55:9d:d0:d6:58:cc:11:16:32:f0:3a:dd:
         f3:75:11:a6:ad:2e:98:1b:46:a8:23:52:b6:41:7c:c9:ac:c9:
         24:8b:8f:38:44:f1:3b:9a:5c:67:97:63:b8:98:2a:bc:82:8d:
         3e:97:87:f3:df:26:f8:50:78:fa:5c:2d:1b:19:b7:52:4b:26:
         5c:04:85:f8:45:cf:6d:ce:0a:b7:48:79:1a:e5:ea:16:eb:57:
         8c:8d:d0:09:2d:73:36:e5:ce:c4:35:c0:04:6f:95:3e:e3:c0:
         c2:8c:89:42:62:2e:ae:a4:f7:83:4a:03:6e:1c:54:ae:e2:83:
         91:8f:98:40:3f:7d:af:00:a1:49:2f:70:00:2b:7c:42:89:d8:
         80:47:2c:79:5a:69:d4:a1:dd:7c:1a:bf:85:26:c5:79:95:5b:
         aa:fc:f1:e8:d2:7a:03:df:98:0e:1e:6e:d4:d8:f8:4b:b5:51:
         bd:27:f7:d7:f1:db:63:b7:e7:e2:42:d4:66:61:04:f7:02:ce:
         cc:4c:8c:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgwOUIxMTAvBgNVBAUTKDFGRjRFMzNFRDc3MzBEQ0UzMjMxRDJFREI1NEQ5NkQ5
RUFCNUY3RjYwHhcNMjYwMzAxMjM0NzAwWhcNMjYwMzA4MjM0NzAwWjAYMRYwFAYD
VQQDEw02OWE0Y2ZmNS1iNDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArhP4N4rO/8sXRoLcFdMqS1ssF9aebE80UbPubyIWKrUU24ZEKOjXmJHllhM2
mqxLJGXyXNtqY47Cfk3oO63adLAtbJm+c8NLS3WQIJNJO9MNXzFPKbV99tRWZrvV
OWlG5kNm3VhzahRHBfXpHnZvR2A6QjXLp89GN+vC1LKmIvWwT2NsH3d0U6/5yWQG
I6eFMpS8XRK26aQe4wO+JnlPag+bsu7uqMsLIENWeCJcuerDGgbTTelvtJirSnJi
hZRmByRIzbePpSZ7hkTfrtkVuvXMjO248hTpCRBaPCt2rIIylJ69YLn+wTcBRSMh
wvVXjSmKQ7RGdYRqeqBUYfnnVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBf5Y34+
xllRTnCSY5dyuS4IwMRIMB8GA1UdIwQYMBaAFB/04z7Xcw3OMjHS7bVNltnqtff2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA5Qi83Njc4RjJGRUJB
OTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRjNHlNZEx0dFUyVzJlcTE5
X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hfVGpQdGR6RGM0eU1kTHR0VTJXMmVxMTlfWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODA5Qi83Njc4RjJGRUJBOTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRj
NHlNZEx0dFUyVzJlcTE5X1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOiDebvCWr0ukQ1deG/TIUy0JnCqXkUEvXzK5BuIklaNUuoKb3UKCyvPIwCvz
ycndWZgmq8ukmi8PRLi0VZ3Q1ljMERYy8Drd83URpq0umBtGqCNStkF8yazJJIuP
OETxO5pcZ5djuJgqvIKNPpeH898m+FB4+lwtGxm3UksmXASF+EXPbc4Kt0h5GuXq
FutXjI3QCS1zNuXOxDXABG+VPuPAwoyJQmIurqT3g0oDbhxUruKDkY+YQD99rwCh
SS9wACt8QonYgEcseVpp1KHdfBq/hSbFeZVbqvzx6NJ6A9+YDh5u1Nj4S7VRvSf3
1/HbY7fn4kLUZmEE9wLOzEyMqA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:58 2026 by rpki-client