Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
File:                     N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json)
Hash identifier:          1QYnrgqtKVekeyUlAOQG6d9+bwJeXeB/SD/MVhGe9iw=
Subject key identifier:   5D:3C:F4:3F:CF:BF:EA:51:8D:6E:55:A8:56:04:7E:03:32:85:83:D2
Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A
Certificate issuer:       /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
Certificate serial:       041D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
Manifest number:          0419
Signing time:             Sun 01 Mar 2026 01:13:28 +0000
Manifest this update:     Sun 01 Mar 2026 01:13:28 +0000
Manifest next update:     Sun 08 Mar 2026 01:13:28 +0000
Files and hashes:         1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: SnPEbbEHBgJLCUBiooqZJ5iRdys4RGHyg9F2ZSWOsN8=)
                          2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: f88t3B3XEIrStaMOLBEX51aBDTSHx6vviz1RmYW+1Aw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl
                          rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
        Validity
            Not Before: Mar  1 01:13:28 2026 GMT
            Not After : Mar  8 01:13:28 2026 GMT
        Subject: CN=69a392b8-fbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:98:59:7d:1a:aa:8c:b9:c1:c0:4a:91:ce:
                    fa:4b:b0:95:e3:9a:b3:7f:ce:33:12:b5:5a:70:d7:
                    b0:41:10:10:5a:6f:2b:31:0d:f6:89:1a:04:b9:93:
                    5d:db:5c:76:99:f3:68:67:66:ab:63:41:d2:68:e3:
                    ac:71:ab:fb:71:b7:13:2a:dc:1d:af:6b:c8:0a:1f:
                    f7:e2:81:10:07:47:41:19:88:1e:74:58:4c:64:8c:
                    d1:98:96:2d:5e:e9:59:11:9d:db:a6:09:2d:7c:02:
                    9b:9c:54:63:ff:b8:28:5d:8e:4a:a5:44:05:20:85:
                    4e:96:cc:bb:07:fb:a7:61:83:df:f4:4d:f9:ed:15:
                    27:65:7d:49:4d:77:1b:e2:f5:77:37:46:31:06:7d:
                    d0:8d:0b:03:db:d1:a6:4e:e9:3a:11:25:fd:3d:fb:
                    4f:f5:05:4a:11:46:6a:9a:ad:fd:7e:84:bd:c0:9b:
                    f5:ed:e8:c3:5f:bf:8a:16:17:80:b3:78:3c:94:73:
                    3c:68:e6:c7:3a:12:51:20:0b:51:2f:84:33:28:eb:
                    de:f5:84:ca:27:ae:10:eb:c6:c3:04:48:9e:59:06:
                    35:4a:7b:ba:20:f6:7c:a1:37:03:a4:61:38:1c:4d:
                    f6:8e:92:50:c0:cf:e8:3a:e9:66:c5:ab:40:de:c7:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3C:F4:3F:CF:BF:EA:51:8D:6E:55:A8:56:04:7E:03:32:85:83:D2
            X509v3 Authority Key Identifier:
                keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:27:42:f2:32:eb:9d:7b:96:a0:ab:23:4b:04:b9:09:0c:32:
         49:27:db:6c:a8:fb:69:f7:a1:99:b8:fb:42:c8:35:c1:8d:d0:
         c2:23:28:b9:88:a5:32:27:26:74:d6:f8:a1:0b:f7:ff:04:2d:
         c9:5e:f9:cd:10:2c:84:1a:80:a6:38:87:aa:5a:af:15:2e:03:
         2f:38:4b:3e:45:fe:d5:ca:7a:36:15:80:f2:e9:6a:af:21:ac:
         bf:c8:3a:45:57:bc:24:3d:b8:2f:15:6c:52:6d:f3:84:4f:fc:
         50:f1:89:10:61:7e:81:ea:35:8c:3a:da:d7:78:f8:f1:fd:eb:
         f2:dc:a2:64:7f:7e:2c:6e:68:37:0b:42:b6:63:e8:f4:ec:f8:
         95:22:91:e2:5f:b7:7a:30:02:b6:f6:99:66:73:65:b8:69:9d:
         ac:a8:39:b5:e3:1a:4a:46:44:7d:4e:fd:25:5f:65:8b:cf:85:
         34:d4:f2:2d:66:36:d5:09:3d:73:c2:ec:0b:e5:e2:cb:60:2b:
         13:fa:ce:70:e8:73:f2:6c:bf:8e:8b:56:71:05:e8:f2:a8:f6:
         09:a1:73:cc:fc:9a:7b:b0:20:68:3e:de:1c:61:be:d1:94:3a:
         9b:29:14:5c:35:a8:26:0d:af:87:35:b3:81:60:af:b0:e4:24:
         95:e6:e8:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw
QjRBMDIzM0EwHhcNMjYwMzAxMDExMzI4WhcNMjYwMzA4MDExMzI4WjAYMRYwFAYD
VQQDDA02OWEzOTJiOC1mYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuu6YWX0aqoy5wcBKkc76S7CV45qzf84zErVacNewQRAQWm8rMQ32iRoEuZNd
21x2mfNoZ2arY0HSaOOscav7cbcTKtwdr2vICh/34oEQB0dBGYgedFhMZIzRmJYt
XulZEZ3bpgktfAKbnFRj/7goXY5KpUQFIIVOlsy7B/unYYPf9E357RUnZX1JTXcb
4vV3N0YxBn3QjQsD29GmTuk6ESX9PftP9QVKEUZqmq39foS9wJv17ejDX7+KFheA
s3g8lHM8aObHOhJRIAtRL4QzKOve9YTKJ64Q68bDBEieWQY1Snu6IPZ8oTcDpGE4
HE32jpJQwM/oOulmxatA3sfCXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF089D/P
v+pRjW5VqFYEfgMyhYPSMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw
ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDU2Ri9EMzNGQzgyQUEwODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVm
ZnY1OUt3UklQdGdMU2dJem8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgydC8jLrnXuWoKsjSwS5CQwySSfbbKj7afehmbj7Qsg1wY3QwiMouYilMicm
dNb4oQv3/wQtyV75zRAshBqApjiHqlqvFS4DLzhLPkX+1cp6NhWA8ulqryGsv8g6
RVe8JD24LxVsUm3zhE/8UPGJEGF+geo1jDra13j48f3r8tyiZH9+LG5oNwtCtmPo
9Oz4lSKR4l+3ejACtvaZZnNluGmdrKg5teMaSkZEfU79JV9li8+FNNTyLWY21Qk9
c8LsC+Xiy2ArE/rOcOhz8my/jotWcQXo8qj2CaFzzPyae7AgaD7eHGG+0ZQ6mykU
XDWoJg2vhzWzgWCvsOQklebokA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:18 2026 by rpki-client