Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
File:                     P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json)
Hash identifier:          DzGA0V8MHyuCBUTx3OLj22D818u4cxzIHLj6vzR6gpE=
Subject key identifier:   14:F5:BC:8A:32:2C:D2:9D:88:4A:C7:2B:5F:79:47:61:B4:E2:45:31
Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45
Certificate issuer:       /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645
Certificate serial:       0858
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
Manifest number:          084B
Signing time:             Mon 02 Mar 2026 00:35:07 +0000
Manifest this update:     Mon 02 Mar 2026 00:35:05 +0000
Manifest next update:     Mon 09 Mar 2026 00:35:05 +0000
Files and hashes:         1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: WpDcWR3uVzFkI6XJB/JoCMjTQrTit/gfaDK5aKWN6Ok=)
                          2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: amf5yXNl2Dgr3AOxZkSrfGo/rK5Q2TPmeviiMZD4ZqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl
                          rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136 (0x858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645
        Validity
            Not Before: Mar  2 00:35:05 2026 GMT
            Not After : Mar  9 00:35:05 2026 GMT
        Subject: CN=69a4db3b-68cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:da:ac:e1:69:09:b4:91:ab:b3:c5:9a:ab:11:
                    cf:f9:32:8d:0a:f1:a6:de:10:1a:26:78:56:cf:86:
                    e3:19:4c:4f:e7:31:d1:ec:b3:18:fd:18:5c:64:16:
                    51:a3:7c:55:d6:68:5c:cd:57:36:a2:0f:a5:75:da:
                    02:10:ec:48:80:ea:9a:0b:ca:db:ae:da:42:52:82:
                    78:87:3e:f8:14:0b:ad:4e:02:b7:f2:6e:bc:23:a0:
                    0b:f6:61:c3:45:0b:eb:ae:3c:91:33:37:92:f2:18:
                    b5:8a:2c:f2:fc:f9:35:94:b2:2a:1d:c8:be:7d:38:
                    10:2d:99:0b:b3:9b:b6:b4:bc:eb:2f:a3:a5:bd:eb:
                    a5:eb:19:48:45:e5:88:18:16:ad:66:eb:84:09:cd:
                    1c:87:d7:85:d7:6a:c5:fb:9a:78:18:66:7c:2a:5d:
                    23:93:9c:c4:4d:f8:b7:44:2e:c9:1f:13:a8:e1:a3:
                    93:95:cc:e6:04:87:a7:e6:94:9c:a0:6b:83:aa:86:
                    ae:6a:75:3d:d3:6b:6e:11:21:95:ea:bc:ae:e2:42:
                    48:c0:2c:1a:49:93:e7:7a:dd:e4:9e:5d:37:7c:4f:
                    c9:15:71:ce:10:5d:ef:b4:1c:9d:33:6d:95:e7:bc:
                    5b:a1:10:b2:9e:27:60:67:de:45:a2:cd:b5:f4:39:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F5:BC:8A:32:2C:D2:9D:88:4A:C7:2B:5F:79:47:61:B4:E2:45:31
            X509v3 Authority Key Identifier:
                keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8e:a7:f3:59:fd:5b:e2:95:93:73:06:34:2f:43:53:8d:40:
         2c:25:59:a1:5f:98:59:9b:1e:2e:cb:3b:fc:86:a1:de:2d:2d:
         19:23:4d:42:4c:e8:53:b8:4a:01:53:b0:e2:f3:47:cb:b2:31:
         2c:11:03:25:59:7f:5c:bf:29:c2:bc:44:9d:38:4d:40:4d:46:
         a6:b8:4f:47:47:ef:c6:7e:96:51:5d:1f:ad:86:b5:32:f8:10:
         f5:bd:ff:d9:ae:81:75:ab:b6:0f:f9:8f:73:63:5b:5f:fe:8c:
         67:47:d5:d7:36:03:e8:10:20:60:66:4b:78:f4:25:4a:1b:81:
         c7:59:35:58:8c:22:9d:4f:4f:0a:1b:e8:7d:37:9c:6b:1c:25:
         6b:cc:6e:0c:9a:93:25:bc:56:cf:9b:07:18:7f:22:a6:cc:81:
         39:2b:4c:9d:d6:29:d5:84:be:74:79:14:ae:e8:c4:10:5c:8c:
         a8:13:ff:3a:34:3c:6f:4e:0f:74:73:52:6f:92:31:7a:6b:a4:
         51:29:a7:e5:10:51:f3:ca:74:10:37:51:b4:fb:2c:35:6a:63:
         b9:7b:79:aa:8a:7d:f2:32:e3:63:c9:8a:89:9a:08:7b:db:1b:
         e8:b6:b6:d8:d3:73:5c:8c:43:e6:f4:f2:11:81:e5:cd:f3:f2:
         b3:0b:63:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0
QzY4Njg2NDUwHhcNMjYwMzAyMDAzNTA1WhcNMjYwMzA5MDAzNTA1WjAYMRYwFAYD
VQQDEw02OWE0ZGIzYi02OGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiNqs4WkJtJGrs8WaqxHP+TKNCvGm3hAaJnhWz4bjGUxP5zHR7LMY/RhcZBZR
o3xV1mhczVc2og+lddoCEOxIgOqaC8rbrtpCUoJ4hz74FAutTgK38m68I6AL9mHD
RQvrrjyRMzeS8hi1iizy/Pk1lLIqHci+fTgQLZkLs5u2tLzrL6Olveul6xlIReWI
GBatZuuECc0ch9eF12rF+5p4GGZ8Kl0jk5zETfi3RC7JHxOo4aOTlczmBIen5pSc
oGuDqoauanU902tuESGV6ryu4kJIwCwaSZPnet3knl03fE/JFXHOEF3vtBydM22V
57xboRCynidgZ95Fos219DkKfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBT1vIoy
LNKdiErHK195R2G04kUxMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE
NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo
a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK
cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP46n81n9W+KVk3MGNC9DU41ALCVZoV+YWZseLss7/Iah3i0tGSNNQkzoU7hK
AVOw4vNHy7IxLBEDJVl/XL8pwrxEnThNQE1GprhPR0fvxn6WUV0frYa1MvgQ9b3/
2a6Bdau2D/mPc2NbX/6MZ0fV1zYD6BAgYGZLePQlShuBx1k1WIwinU9PChvofTec
axwla8xuDJqTJbxWz5sHGH8ipsyBOStMndYp1YS+dHkUrujEEFyMqBP/OjQ8b04P
dHNSb5IxemukUSmn5RBR88p0EDdRtPssNWpjuXt5qop98jLjY8mKiZoIe9sb6La2
2NNzXIxD5vTyEYHlzfPyswtjXg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:53 2026 by rpki-client