Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File:                     mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier:          MEkAONQqDQsYULcyC3o51dQwD6Dj/ST9qLOHvzmzfgs=
Subject key identifier:   81:F9:71:93:9B:BB:08:72:9D:A6:29:FB:E6:74:4C:69:18:A6:0C:CA
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0B2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number:          0AF0
Signing time:             Sun 01 Mar 2026 22:29:40 +0000
Manifest this update:     Sun 01 Mar 2026 22:29:39 +0000
Manifest next update:     Sun 08 Mar 2026 22:29:39 +0000
Files and hashes:         1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: sU3mfX2XcPEQ6CyXdL8SkSNESfS15p+eCu0VGdS6S5Y=)
                          2: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: j6vtGdsn58n5PFNIgokVa7egz01S/Wt3cjqK2/oPYCU=)
                          3: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: 02OkEZdFmEpHGfisQA3gcJEbG2uFhlx+shvED8B5SFQ=)
                          4: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: iwYxtbph75PfLUWyrRQ1ZKsYXZDAuMWGHem1wlC1TsY=)
                          5: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: kLpSmWdSGg8Mg4g60+DwwIcGfuFqFbChFN5SNdpQQCc=)
                          6: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: 30Ay1Zbq76x+Zxtcn+jqASaeqsesqa1rZ5wxXWBIbpA=)
                          7: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: fvHEuQxM7QtSBpohLsHjlXFRVApMH4LnofLEq5KCpls=)
                          8: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: pZZtHGFQRbt0wHLJTk6iKV6lnlHB4kiYZ8oDEDgL+Hw=)
                          9: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: i+DeWSxP+SUrPsRvRk++UVMLgUpYl/0wKKoB8sZiS1A=)
                          10: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: Ks6wPXQrbbeCTTlosIDswm4J7H1L/F650F9YqKuuo/A=)
                          11: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: 9TteqD6INKZgRh3A2cwFyNm4pTulPoLeS0psHfIr0EU=)
                          12: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: yp48JDkpR5TQy5O1NVCB2GBTzUPaSfD8syejqe9qTmg=)
                          13: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: MJ4t9mNOzArFswvJlj8ONWt12fku2oXbHOQN2lvyrzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2862 (0xb2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Mar  1 22:29:39 2026 GMT
            Not After : Mar  8 22:29:39 2026 GMT
        Subject: CN=69a4bdd4-bfbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:45:a4:f4:ed:fb:36:75:60:bf:a4:8f:2c:
                    02:34:9a:25:49:59:83:d0:b2:78:99:f3:ea:de:9a:
                    14:62:96:b4:9e:12:61:26:0a:5a:4d:e3:ce:9a:21:
                    6f:1e:34:83:ed:69:1b:8a:7b:42:59:8a:89:f8:f0:
                    4b:3b:27:aa:00:24:a9:7e:71:4d:cf:34:d6:80:8e:
                    70:c1:ad:6b:89:ca:b9:e9:5d:fe:7f:a3:bd:7b:27:
                    27:d2:18:ce:48:e5:b3:9d:c3:52:99:7f:28:96:0f:
                    12:a8:70:b9:34:e8:90:00:44:c2:eb:09:f3:ac:7f:
                    33:93:83:94:8a:2d:ac:9e:2c:b9:e2:8c:5d:35:80:
                    cd:38:f7:e0:30:d2:70:cb:19:9c:df:b0:b3:ed:0e:
                    e7:3f:75:6d:c0:7e:64:84:d2:01:50:21:b3:20:18:
                    0f:5c:a5:4e:58:2a:ac:10:37:25:4b:3d:6f:17:47:
                    c1:4b:20:ce:7f:f5:33:54:1c:e7:1f:e9:34:2a:20:
                    59:63:2f:4b:59:d9:b5:a4:64:4c:18:91:59:14:b2:
                    e5:85:b2:f9:69:4d:83:97:4a:df:5f:4a:a4:eb:ba:
                    1a:ca:bd:13:ff:77:20:5a:65:b3:d5:22:ca:5f:ca:
                    97:a8:a0:90:33:76:45:07:22:df:03:7c:d7:d4:ca:
                    0a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F9:71:93:9B:BB:08:72:9D:A6:29:FB:E6:74:4C:69:18:A6:0C:CA
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:bf:a5:92:bb:8e:7c:df:32:32:0d:9e:7d:e1:c5:4e:d2:89:
         7d:1e:33:a7:45:6c:1e:73:a5:f8:7f:10:66:ad:34:14:5c:0b:
         5e:45:a5:40:19:cd:59:8a:62:bd:b7:3d:fd:f1:1e:b5:f6:96:
         18:38:1f:49:9d:08:7a:59:d6:c3:ab:38:b5:3a:b8:9c:9a:4e:
         a3:77:f4:45:58:fe:1d:c0:21:b6:90:34:0d:a0:ac:e4:99:9f:
         7c:8c:e0:1e:df:71:34:f6:57:1c:c8:3c:0b:f4:0c:88:83:53:
         e7:24:2e:a9:fe:d5:64:04:fd:a7:ad:f2:c2:11:03:63:1f:03:
         e0:e3:ef:75:4a:ef:ac:56:3d:c3:c7:03:ec:13:00:94:23:80:
         cc:c2:81:98:44:8d:f9:0e:30:dd:7e:9a:36:d2:7c:5f:25:91:
         ec:f7:5c:51:1e:28:8b:35:6e:c5:3c:0a:a1:12:a0:cc:19:96:
         a8:42:3d:68:d3:37:e0:f3:7f:79:36:9c:71:8a:22:35:62:80:
         04:86:01:7d:bd:ed:7a:0e:f2:6a:01:89:a9:91:ba:ff:c6:5b:
         b1:48:4e:77:d5:17:09:4f:08:77:25:8b:f7:db:bd:7b:77:de:
         f8:a9:57:9a:6f:e0:49:25:1c:1f:de:c3:76:c1:9a:e6:fe:a0:
         78:13:aa:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4
M0NCRTE4NjcwHhcNMjYwMzAxMjIyOTM5WhcNMjYwMzA4MjIyOTM5WjAYMRYwFAYD
VQQDEw02OWE0YmRkNC1iZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzJdFpPTt+zZ1YL+kjywCNJolSVmD0LJ4mfPq3poUYpa0nhJhJgpaTePOmiFv
HjSD7WkbintCWYqJ+PBLOyeqACSpfnFNzzTWgI5wwa1ricq56V3+f6O9eycn0hjO
SOWzncNSmX8olg8SqHC5NOiQAETC6wnzrH8zk4OUii2sniy54oxdNYDNOPfgMNJw
yxmc37Cz7Q7nP3VtwH5khNIBUCGzIBgPXKVOWCqsEDclSz1vF0fBSyDOf/UzVBzn
H+k0KiBZYy9LWdm1pGRMGJFZFLLlhbL5aU2Dl0rfX0qk67oayr0T/3cgWmWz1SLK
X8qXqKCQM3ZFByLfA3zX1MoKgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIH5cZOb
uwhynaYp++Z0TGkYpgzKMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4
RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjQ5My81RkNBQjY3MjY4RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENX
MC0zWWdHRHRUWkdEeS1HR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ7+lkruOfN8yMg2efeHFTtKJfR4zp0VsHnOl+H8QZq00FFwLXkWlQBnNWYpi
vbc9/fEetfaWGDgfSZ0IelnWw6s4tTq4nJpOo3f0RVj+HcAhtpA0DaCs5JmffIzg
Ht9xNPZXHMg8C/QMiINT5yQuqf7VZAT9p63ywhEDYx8D4OPvdUrvrFY9w8cD7BMA
lCOAzMKBmESN+Q4w3X6aNtJ8XyWR7PdcUR4oizVuxTwKoRKgzBmWqEI9aNM34PN/
eTaccYoiNWKABIYBfb3teg7yagGJqZG6/8ZbsUhOd9UXCU8IdyWL99u9e3fe+KlX
mm/gSSUcH97DdsGa5v6geBOqEQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:55 2026 by rpki-client