Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
File:                     ABN5IHjRGy-UAw18O-71ATKibUA.mft (raw, json)
Hash identifier:          tdj1toNdK1jFY58SHnFz8HASCPW4EQl9vwiU2OqXulc=
Subject key identifier:   43:21:60:C6:19:DE:C0:C6:B5:80:B6:62:5C:A8:DA:29:C1:5F:D5:DA
Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
Certificate issuer:       /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Certificate serial:       028C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
Manifest number:          027F
Signing time:             Sun 01 Mar 2026 02:30:06 +0000
Manifest this update:     Sun 01 Mar 2026 02:30:05 +0000
Manifest next update:     Sun 08 Mar 2026 02:30:05 +0000
Files and hashes:         1: ABN5IHjRGy-UAw18O-71ATKibUA.crl (hash: HUxHB6eXFlJDJRSLTzarer+F8nNdpeIXO9DjwowMRUo=)
                          2: F853742A5A9911EDA14F453FC4F9AE02.roa (hash: OLpGMJGM/bGhMSkrOQuT1Tz0zvH6CE/Oi3SzPJmSsH0=)
                          3: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (hash: Qq8up52YZscG3hdRn7nfMsmIkNPk2EUKMJmC4t4Qun4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
        Validity
            Not Before: Mar  1 02:30:05 2026 GMT
            Not After : Mar  8 02:30:05 2026 GMT
        Subject: CN=69a3a4ad-1c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:95:05:0f:84:84:67:ee:0e:d5:4b:97:9e:
                    aa:0f:a4:53:19:2a:64:95:c1:c0:dc:d3:00:fc:9d:
                    9c:24:5c:31:84:a8:e7:9f:be:8d:ab:f2:2a:87:d7:
                    fd:03:be:f9:82:8a:b3:56:1e:bd:f6:df:01:11:ae:
                    92:b2:0c:26:66:3a:29:cc:39:6e:b8:a9:46:15:e0:
                    61:b8:12:40:52:aa:93:37:80:ce:e9:6b:45:0e:97:
                    02:a5:8b:cb:c4:0f:05:c9:31:04:06:3a:6d:8d:b4:
                    be:c2:af:5e:07:8b:36:80:fa:66:6b:12:95:7a:76:
                    f4:7b:c5:48:d0:19:9a:1d:8c:df:38:77:9e:dc:05:
                    27:95:8f:d9:b2:a6:db:c3:71:36:0c:6a:e0:0d:e7:
                    bd:04:2d:e7:8e:94:46:08:e1:85:de:6b:85:47:06:
                    0f:78:53:36:87:02:16:e3:ed:7b:6f:72:4c:a9:b1:
                    ee:59:07:eb:4b:a6:cd:ab:04:b5:01:0d:b0:bd:7c:
                    ea:74:c5:55:31:ef:fa:1d:b7:c5:f4:c2:a2:8d:f5:
                    c2:5a:28:a5:4d:12:ca:cb:32:ea:9d:8e:27:21:99:
                    a6:57:e8:f0:f0:1d:16:27:78:d6:03:0d:e1:03:7e:
                    43:0e:35:f9:28:2a:74:0e:18:c8:01:0a:ae:93:aa:
                    8a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:21:60:C6:19:DE:C0:C6:B5:80:B6:62:5C:A8:DA:29:C1:5F:D5:DA
            X509v3 Authority Key Identifier:
                keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c1:5c:50:fb:ea:61:92:8b:e2:01:b3:54:c7:5d:e5:92:e6:
         3a:f5:c1:9d:62:be:52:d6:b9:54:6a:a0:2d:a7:d2:b9:70:14:
         3b:7f:37:4d:81:b3:ca:4b:1c:67:3c:c2:2e:41:a6:4a:51:e4:
         0a:af:ed:75:4d:6f:b4:87:9a:26:a4:b6:7b:34:40:80:56:18:
         bb:45:b4:c8:db:91:fd:bc:cc:b7:ee:d8:c2:a9:b2:d6:00:24:
         50:40:4c:ba:a2:23:92:44:3e:bf:eb:e9:aa:7c:71:49:35:9a:
         95:02:4c:af:76:25:6f:94:17:ab:66:d6:e6:c1:0f:10:cd:cc:
         4c:b0:85:85:4c:37:82:0d:05:a3:0f:61:3b:8d:5b:22:21:94:
         e0:04:c1:c8:a1:e4:c8:94:cd:0d:7e:48:2f:21:63:35:4c:d5:
         cd:13:31:ea:5a:38:db:0f:df:7c:08:52:e1:ae:87:64:ef:8e:
         d0:b4:b7:29:9f:5e:f2:ee:98:62:a5:42:25:91:79:da:4d:66:
         43:c4:3d:3e:ad:eb:88:63:45:fe:6d:f4:aa:e4:5e:ba:05:ec:
         1d:6c:82:22:26:96:6b:17:62:9f:f7:32:c1:77:11:c9:a8:35:
         1c:53:8d:b9:d2:72:e7:6d:45:50:bb:e6:00:82:89:5a:92:36:
         5f:1c:0d:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlDNzQxMTAvBgNVBAUTKDAwMTM3OTIwNzhEMTFCMkY5NDAzMEQ3QzNCRUVGNTAx
MzJBMjZENDAwHhcNMjYwMzAxMDIzMDA1WhcNMjYwMzA4MDIzMDA1WjAYMRYwFAYD
VQQDDA02OWEzYTRhZC0xYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNaVBQ+EhGfuDtVLl56qD6RTGSpklcHA3NMA/J2cJFwxhKjnn76Nq/Iqh9f9
A775goqzVh699t8BEa6SsgwmZjopzDluuKlGFeBhuBJAUqqTN4DO6WtFDpcCpYvL
xA8FyTEEBjptjbS+wq9eB4s2gPpmaxKVenb0e8VI0BmaHYzfOHee3AUnlY/Zsqbb
w3E2DGrgDee9BC3njpRGCOGF3muFRwYPeFM2hwIW4+17b3JMqbHuWQfrS6bNqwS1
AQ2wvXzqdMVVMe/6HbfF9MKijfXCWiilTRLKyzLqnY4nIZmmV+jw8B0WJ3jWAw3h
A35DDjX5KCp0DhjIAQquk6qKbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMhYMYZ
3sDGtYC2Ylyo2inBX9XaMB8GA1UdIwQYMBaAFAATeSB40RsvlAMNfDvu9QEyom1A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUM3NC80NENDOTcxRTRF
MUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5LVVBdzE4Ty03MUFUS2li
VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FCTjVJSGpSR3ktVUF3MThPLTcxQVRLaWJVQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUM3NC80NENDOTcxRTRFMUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BQk41SUhqUkd5
LVVBdzE4Ty03MUFUS2liVUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb8FcUPvqYZKL4gGzVMdd5ZLmOvXBnWK+Uta5VGqgLafSuXAUO383TYGzyksc
ZzzCLkGmSlHkCq/tdU1vtIeaJqS2ezRAgFYYu0W0yNuR/bzMt+7Ywqmy1gAkUEBM
uqIjkkQ+v+vpqnxxSTWalQJMr3Ylb5QXq2bW5sEPEM3MTLCFhUw3gg0Fow9hO41b
IiGU4ATByKHkyJTNDX5ILyFjNUzVzRMx6lo42w/ffAhS4a6HZO+O0LS3KZ9e8u6Y
YqVCJZF52k1mQ8Q9Pq3riGNF/m30quReugXsHWyCIiaWaxdin/cywXcRyag1HFON
udJy521FULvmAIKJWpI2XxwNBg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:48 2026 by rpki-client