Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
File:                     15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json)
Hash identifier:          xih/Nq1JyYeFxuaqrbZ6GqsUhoM5Gc5hmTWiLbH1KoY=
Subject key identifier:   CB:DB:59:F3:50:26:B3:2D:CE:24:B4:41:33:24:3F:2C:FD:1B:BA:B5
Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26
Certificate issuer:       /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
Certificate serial:       0535
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
Manifest number:          0527
Signing time:             Mon 02 Mar 2026 00:22:01 +0000
Manifest this update:     Mon 02 Mar 2026 00:22:00 +0000
Manifest next update:     Mon 09 Mar 2026 00:22:00 +0000
Files and hashes:         1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: cVW6C7nnKvOPoGeL3iEAJaCNOl88hhPaeWbo4zDmmUU=)
                          2: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: OWs47VxIEQ1QhlgbrlxvKW4VXn5SiZ0ruC9D8eNOYWY=)
                          3: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: 3/W6rA2EZQ9LTmSbpHpq8E02n0iBtefklJIZbF4CvQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl
                          rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1333 (0x535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626
        Validity
            Not Before: Mar  2 00:22:00 2026 GMT
            Not After : Mar  9 00:22:00 2026 GMT
        Subject: CN=69a4d829-9136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d9:21:60:53:10:d4:2b:64:ea:08:9e:0d:ad:
                    b0:8e:7d:4d:b6:7d:06:3f:52:33:02:4c:b7:9c:97:
                    37:a1:b9:94:cc:92:9e:06:a0:ba:fa:5b:a5:7d:60:
                    a6:69:5e:03:ff:f0:07:53:9c:30:fa:04:f8:e6:ac:
                    66:99:66:16:5d:8c:53:c0:0c:30:b7:19:e5:01:d5:
                    eb:2e:03:b7:3d:ee:c3:b4:3a:28:39:04:ea:57:dc:
                    91:d5:a9:c1:fb:13:ca:8e:70:3b:86:32:b2:59:fb:
                    a2:c1:7c:a9:26:7b:52:cc:f2:08:e8:51:cc:c5:08:
                    45:3d:c1:01:ff:7f:d0:b4:8c:ed:b9:2e:5e:3b:81:
                    c3:b8:47:d0:eb:b0:91:6c:9a:b2:ac:29:da:7c:bb:
                    12:70:d6:65:db:ec:6d:81:0f:f7:64:c5:40:a5:8a:
                    a4:ba:97:d6:96:c8:95:f3:05:47:3f:97:f8:4e:2b:
                    50:eb:f6:0b:d2:0b:ce:d3:bf:71:6b:3b:03:1c:5f:
                    16:da:0d:63:31:19:e8:e7:0c:49:5d:a7:1a:45:32:
                    37:06:b6:52:b3:ac:26:bd:e3:80:41:76:ea:df:a1:
                    39:a1:5b:00:21:bb:87:b1:50:85:a3:2c:df:a2:4d:
                    ad:1c:92:d6:6b:11:2b:69:92:5b:9c:84:16:4b:80:
                    e4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DB:59:F3:50:26:B3:2D:CE:24:B4:41:33:24:3F:2C:FD:1B:BA:B5
            X509v3 Authority Key Identifier:
                keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:2f:63:0d:68:39:6b:cd:f2:1e:27:8b:0c:c5:be:bb:cd:7e:
         bd:03:ab:04:ef:e8:d3:85:55:9b:5e:f2:49:eb:b4:23:f1:b6:
         b1:8c:8e:78:7d:20:7d:26:ab:40:c1:c2:98:83:41:d2:2d:b5:
         cd:9d:56:fd:46:18:41:fb:79:6c:99:1d:2b:1c:95:db:f1:1b:
         c0:03:f3:b2:cc:04:eb:9d:6c:3a:e0:be:14:03:d2:26:5a:b4:
         17:58:d3:a8:d4:fe:87:ef:cd:48:cb:e2:31:26:a3:dc:f2:b7:
         cf:41:82:8e:9f:13:49:f8:0d:42:04:a1:81:e4:a3:13:85:e4:
         f4:7f:5d:fd:be:e9:8a:83:1b:3b:0e:8f:cf:9e:f6:06:bc:2c:
         f1:e9:ba:07:0f:e4:16:61:9f:03:2d:bf:38:d4:2f:51:79:40:
         d3:bb:3b:0b:55:fb:b1:18:6c:60:2e:3d:e3:91:77:3f:58:e7:
         30:64:83:fe:30:29:3d:54:ba:61:f5:87:85:72:74:61:c6:f4:
         fe:04:3d:4d:a9:13:b5:6a:f9:94:f9:d3:3a:6d:2d:f3:a2:41:
         6b:8d:a9:c5:f5:d3:c6:b4:d0:a1:20:47:27:25:64:b4:4b:34:
         a5:01:56:3b:31:d0:06:11:91:c2:65:8a:a7:1d:65:d7:43:40:
         96:cc:ed:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy
MDZCQUM2MjYwHhcNMjYwMzAyMDAyMjAwWhcNMjYwMzA5MDAyMjAwWjAYMRYwFAYD
VQQDEw02OWE0ZDgyOS05MTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAktkhYFMQ1Ctk6gieDa2wjn1Ntn0GP1IzAky3nJc3obmUzJKeBqC6+lulfWCm
aV4D//AHU5ww+gT45qxmmWYWXYxTwAwwtxnlAdXrLgO3Pe7DtDooOQTqV9yR1anB
+xPKjnA7hjKyWfuiwXypJntSzPII6FHMxQhFPcEB/3/QtIztuS5eO4HDuEfQ67CR
bJqyrCnafLsScNZl2+xtgQ/3ZMVApYqkupfWlsiV8wVHP5f4TitQ6/YL0gvO079x
azsDHF8W2g1jMRno5wxJXacaRTI3BrZSs6wmveOAQXbq36E5oVsAIbuHsVCFoyzf
ok2tHJLWaxEraZJbnIQWS4DkuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMvbWfNQ
JrMtziS0QTMkPyz9G7q1MB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB
RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4
aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QURDRS8wRjcyODFCQzNBRjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFa
NnJRcFU3YThpbGNnYTZ4aVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfy9jDWg5a83yHieLDMW+u81+vQOrBO/o04VVm17ySeu0I/G2sYyOeH0gfSar
QMHCmINB0i21zZ1W/UYYQft5bJkdKxyV2/EbwAPzsswE651sOuC+FAPSJlq0F1jT
qNT+h+/NSMviMSaj3PK3z0GCjp8TSfgNQgShgeSjE4Xk9H9d/b7pioMbOw6Pz572
Brws8em6Bw/kFmGfAy2/ONQvUXlA07s7C1X7sRhsYC4945F3P1jnMGSD/jApPVS6
YfWHhXJ0Ycb0/gQ9TakTtWr5lPnTOm0t86JBa42pxfXTxrTQoSBHJyVktEs0pQFW
OzHQBhGRwmWKpx1l10NAlsztuw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:48 2026 by rpki-client