Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
File:                     imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json)
Hash identifier:          t6VqahQcOG9U8FuVilMflQwqeWCfumy6Iw9do73mnPM=
Subject key identifier:   48:61:0C:96:74:7B:D7:9A:96:B1:05:B6:1A:33:DC:48:6B:CB:1A:DF
Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1
Certificate issuer:       /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
Manifest number:          01B0
Signing time:             Mon 02 Mar 2026 00:58:50 +0000
Manifest this update:     Mon 02 Mar 2026 00:58:49 +0000
Manifest next update:     Mon 09 Mar 2026 00:58:49 +0000
Files and hashes:         1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: 4bIJdH7bzfauUOzNiuWZngAWoptUIPyXrpbAv5E/8Zc=)
                          2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: c/jawI9sVhPShnKjCf1i13c+sicTCdQqYFc31eax07o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl
                          rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1
        Validity
            Not Before: Mar  2 00:58:49 2026 GMT
            Not After : Mar  9 00:58:49 2026 GMT
        Subject: CN=69a4e0c9-1f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:91:7b:3b:48:27:57:4c:38:85:8d:a0:a3:
                    1f:7b:fb:62:4f:64:a2:3b:db:81:90:93:f4:b7:6f:
                    bb:9f:b4:75:52:45:c3:b7:98:53:44:df:d9:e6:29:
                    89:b7:54:32:89:0f:4d:83:44:99:72:67:d1:12:ce:
                    13:57:23:2b:82:d7:a2:e8:1e:ca:63:9f:c8:b7:1b:
                    46:85:bd:1b:cd:6d:8a:be:94:54:2c:0a:c9:fa:62:
                    d5:40:a3:9b:43:3b:41:09:5f:75:8e:22:ad:81:74:
                    a7:e0:c5:e4:aa:6e:4c:a5:5f:7f:6f:35:33:0e:fe:
                    e5:e7:8c:41:85:5c:42:05:33:47:fe:cb:84:26:9a:
                    a2:b3:16:11:a2:56:12:0e:ad:53:f7:29:d6:70:60:
                    0c:76:a4:6b:4d:69:7d:82:e9:ce:b3:88:f5:c8:24:
                    57:79:ab:be:e1:31:b1:63:0d:c0:78:03:77:4c:37:
                    5b:7d:30:b2:77:88:f3:a2:31:ca:7b:15:08:fa:fa:
                    f8:c7:b2:df:27:55:b3:2d:12:24:4e:a9:e5:e6:d1:
                    ec:16:00:60:bd:b2:3c:51:c6:b9:02:4e:e7:13:8d:
                    3f:5f:8e:11:a6:9e:63:78:0e:93:50:ab:57:4e:f5:
                    65:18:78:da:7d:02:7c:c5:a7:56:bb:ab:76:86:d3:
                    3d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:61:0C:96:74:7B:D7:9A:96:B1:05:B6:1A:33:DC:48:6B:CB:1A:DF
            X509v3 Authority Key Identifier:
                keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c4:ea:dc:69:5d:25:f7:72:0b:ad:23:fe:b7:ba:a0:13:5b:
         da:8e:7f:05:1d:c3:a9:bd:4f:00:5e:67:c3:d9:c9:32:96:62:
         a6:77:f6:70:e3:2c:d3:2c:a2:f0:f1:26:ad:5c:9e:54:23:bf:
         18:97:24:f2:38:61:1d:be:1b:d4:f7:f7:e2:bc:7c:51:38:e4:
         9b:c0:d8:63:24:85:4a:7d:9f:9f:b8:23:3d:7c:6f:a0:17:8f:
         2c:e3:84:25:f7:7d:2d:c2:dc:05:94:86:69:eb:46:75:38:e7:
         17:83:b1:03:b6:5b:d4:5f:e8:0a:04:be:9e:dd:27:01:01:19:
         e3:41:4c:e3:6a:d7:88:f3:ec:10:7b:a8:92:6c:6d:7d:9e:1c:
         b4:2b:78:e6:1c:ae:95:fc:0a:0b:f9:12:c8:9b:77:15:a8:f7:
         5b:2a:b9:8e:e3:32:69:58:3f:b3:a1:14:b6:dc:e6:7b:1a:42:
         84:36:23:d6:dd:ab:55:ec:c0:89:fa:ed:07:23:16:de:c1:35:
         af:26:78:2c:d3:7c:b1:10:61:a3:6d:c7:51:02:3e:c7:a0:1b:
         9d:0e:8c:bc:bc:4b:f5:45:f8:46:d0:57:9e:2e:05:6c:c4:c0:
         66:8a:d3:60:2d:6d:f5:56:77:00:52:0a:7d:da:37:ad:ff:de:
         3a:9d:c4:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI0QzUxMTAvBgNVBAUTKDhBNjIxQkM3N0EzREQ0MTcwQ0I5MTAzRkY4Nzg4QkM5
MDkwMDgyRDEwHhcNMjYwMzAyMDA1ODQ5WhcNMjYwMzA5MDA1ODQ5WjAYMRYwFAYD
VQQDEw02OWE0ZTBjOS0xZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVmReztIJ1dMOIWNoKMfe/tiT2SiO9uBkJP0t2+7n7R1UkXDt5hTRN/Z5imJ
t1QyiQ9Ng0SZcmfREs4TVyMrgtei6B7KY5/ItxtGhb0bzW2KvpRULArJ+mLVQKOb
QztBCV91jiKtgXSn4MXkqm5MpV9/bzUzDv7l54xBhVxCBTNH/suEJpqisxYRolYS
Dq1T9ynWcGAMdqRrTWl9gunOs4j1yCRXeau+4TGxYw3AeAN3TDdbfTCyd4jzojHK
exUI+vr4x7LfJ1WzLRIkTqnl5tHsFgBgvbI8Uca5Ak7nE40/X44Rpp5jeA6TUKtX
TvVlGHjafQJ8xadWu6t2htM95wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhhDJZ0
e9ealrEFthoz3EhryxrfMB8GA1UdIwQYMBaAFIpiG8d6PdQXDLkQP/h4i8kJAILR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjRDNS9EMUUyRDk2ODgz
NTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFCY011UkFfLUhpTHlRa0Fn
dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ltSWJ4M285MUJjTXVSQV8tSGlMeVFrQWd0RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjRDNS9EMUUyRDk2ODgzNTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFC
Y011UkFfLUhpTHlRa0FndEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXcTq3GldJfdyC60j/re6oBNb2o5/BR3Dqb1PAF5nw9nJMpZipnf2cOMs0yyi
8PEmrVyeVCO/GJck8jhhHb4b1Pf34rx8UTjkm8DYYySFSn2fn7gjPXxvoBePLOOE
Jfd9LcLcBZSGaetGdTjnF4OxA7Zb1F/oCgS+nt0nAQEZ40FM42rXiPPsEHuokmxt
fZ4ctCt45hyulfwKC/kSyJt3Faj3Wyq5juMyaVg/s6EUttzmexpChDYj1t2rVezA
ifrtByMW3sE1ryZ4LNN8sRBho23HUQI+x6AbnQ6MvLxL9UX4RtBXni4FbMTAZorT
YC1t9VZ3AFIKfdo3rf/eOp3Efw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:16 2026 by rpki-client