Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
File:                     xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json)
Hash identifier:          nT+1WR+9sbaUUIZLS7Ccrw19Uin+yYhD5Epb14EToM8=
Subject key identifier:   CD:61:D4:67:17:29:01:E9:72:A7:33:63:79:55:62:0B:9E:60:F7:DA
Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Certificate issuer:       /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
Manifest number:          01A9
Signing time:             Sun 01 Mar 2026 05:29:07 +0000
Manifest this update:     Sun 01 Mar 2026 05:29:06 +0000
Manifest next update:     Sun 08 Mar 2026 05:29:06 +0000
Files and hashes:         1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: kHkMFGH24iZY4SjmR3T9r0bDFw6/dsbay1A9UYmPsXg=)
                          2: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: fs98zfFOUHQXdzvGdR3iXXMhTBbcwe5RC/AMscf6ECk=)
                          3: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: RzSv2j2oh1Hlys0YAQhXioiDQyIBRgHkQXZEytLmhoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl
                          rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
        Validity
            Not Before: Mar  1 05:29:06 2026 GMT
            Not After : Mar  8 05:29:06 2026 GMT
        Subject: CN=69a3cea3-88b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:b2:d2:6b:59:2b:dd:a5:cd:19:a3:40:b8:
                    ad:de:f3:b3:8b:01:f1:1c:71:30:7d:11:65:c1:6e:
                    1a:3a:45:95:8b:aa:94:93:cb:ff:92:49:c8:a0:d6:
                    b5:86:45:a1:f4:88:0a:13:9f:49:6e:4d:51:49:6a:
                    9e:24:89:35:d8:37:ee:e7:5f:37:67:e4:ae:ae:c5:
                    1d:75:a9:7a:06:8d:c4:8f:8e:47:f8:19:c7:c1:2d:
                    48:e9:eb:e1:8a:eb:43:c9:a2:b7:70:5c:70:51:04:
                    22:cf:ce:8c:20:c9:55:9b:c0:d8:05:af:66:af:ca:
                    77:79:cd:01:09:27:2f:01:ed:d7:c9:a7:93:0a:51:
                    12:db:a8:12:71:08:a7:e5:92:ad:d6:cc:d7:e8:e9:
                    14:16:29:5f:cc:1a:51:b4:2c:c0:22:e3:28:c5:3a:
                    20:60:2f:d8:ae:8e:2d:b2:bf:49:e9:bc:ab:51:d2:
                    a8:09:91:c5:c1:a0:58:a4:83:49:0b:05:12:65:43:
                    bd:d2:3a:fb:05:f8:97:a6:e7:65:a0:ea:70:99:48:
                    61:f0:f5:89:db:3e:01:0d:45:7f:7e:28:28:be:22:
                    6c:9e:1e:22:a0:80:5b:93:f9:7f:85:01:e3:cf:f5:
                    9e:5c:f1:b6:60:08:87:41:6d:e0:af:75:bd:a0:1d:
                    64:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:61:D4:67:17:29:01:E9:72:A7:33:63:79:55:62:0B:9E:60:F7:DA
            X509v3 Authority Key Identifier:
                keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:70:97:66:56:61:86:fb:0a:b7:bc:3e:da:fe:e5:d4:36:6d:
         94:60:e5:fb:7d:b5:85:56:41:18:d5:93:b5:52:0a:e9:51:be:
         5c:9c:be:80:cc:dc:8d:46:83:27:ff:aa:fc:a2:e8:c7:ed:62:
         20:2d:75:f0:71:50:85:d0:27:76:ea:c0:8a:36:3c:cc:95:14:
         36:ce:91:2b:6e:bf:3e:17:48:42:f9:97:41:6b:6e:03:8e:a0:
         c9:21:39:79:6c:8c:d9:d8:b2:4a:24:3e:82:8f:26:a1:ff:93:
         2e:bd:6c:94:1e:f5:a0:fc:b1:d0:ba:3e:9e:e6:f9:a4:ec:bb:
         cb:ad:86:9f:96:f1:85:67:59:aa:2e:2b:03:8c:07:18:02:5b:
         5f:fb:99:e5:3e:49:bf:6e:31:e2:38:19:9d:19:59:0e:03:3a:
         5a:85:44:7a:29:3e:e4:9f:ef:9b:2c:82:97:1f:40:7e:9e:9c:
         04:9f:a0:08:fd:5a:56:b7:5d:15:6a:74:ca:f6:3a:78:e7:2c:
         e2:0e:df:3c:16:13:38:46:79:48:ca:eb:c8:00:ce:cc:b4:ae:
         00:15:5f:1e:a4:26:bb:dc:2f:91:c7:6a:12:5b:cf:f5:85:1e:
         44:74:06:f4:20:9a:1e:a7:94:58:7e:dc:e4:2c:6c:4e:ea:f7:
         62:c0:ad:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx
NEFERkI4QjUwHhcNMjYwMzAxMDUyOTA2WhcNMjYwMzA4MDUyOTA2WjAYMRYwFAYD
VQQDEw02OWEzY2VhMy04OGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Guy0mtZK92lzRmjQLit3vOziwHxHHEwfRFlwW4aOkWVi6qUk8v/kknIoNa1
hkWh9IgKE59Jbk1RSWqeJIk12Dfu5183Z+SursUddal6Bo3Ej45H+BnHwS1I6evh
iutDyaK3cFxwUQQiz86MIMlVm8DYBa9mr8p3ec0BCScvAe3XyaeTClES26gScQin
5ZKt1szX6OkUFilfzBpRtCzAIuMoxTogYC/Yro4tsr9J6byrUdKoCZHFwaBYpINJ
CwUSZUO90jr7BfiXpudloOpwmUhh8PWJ2z4BDUV/figoviJsnh4ioIBbk/l/hQHj
z/WeXPG2YAiHQW3gr3W9oB1k+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM1h1GcX
KQHpcqczY3lVYgueYPfaMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0
N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG
QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZXCXZlZhhvsKt7w+2v7l1DZtlGDl+321hVZBGNWTtVIK6VG+XJy+gMzcjUaD
J/+q/KLox+1iIC118HFQhdAndurAijY8zJUUNs6RK26/PhdIQvmXQWtuA46gySE5
eWyM2diySiQ+go8mof+TLr1slB71oPyx0Lo+nub5pOy7y62Gn5bxhWdZqi4rA4wH
GAJbX/uZ5T5Jv24x4jgZnRlZDgM6WoVEeik+5J/vmyyClx9Afp6cBJ+gCP1aVrdd
FWp0yvY6eOcs4g7fPBYTOEZ5SMrryADOzLSuABVfHqQmu9wvkcdqElvP9YUeRHQG
9CCaHqeUWH7c5CxsTur3YsCtXQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:08 2026 by rpki-client