Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
File:                     kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json)
Hash identifier:          427KUtsOV8N5wty3RcUuSBXzSTthSPJstuw/PsjORRA=
Subject key identifier:   F3:65:9E:EC:8D:FA:C2:8F:94:50:D1:B0:53:CB:CE:2A:11:4C:99:5A
Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
Certificate issuer:       /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
Manifest number:          016F
Signing time:             Sun 01 Mar 2026 05:44:46 +0000
Manifest this update:     Sun 01 Mar 2026 05:44:46 +0000
Manifest next update:     Sun 08 Mar 2026 05:44:46 +0000
Files and hashes:         1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: azE84Qjq9UnYOENR6QCCtr4xzJ/2y2AEQ98Wxf3p49g=)
                          2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: e7eb0/P7VvWmrN+93ev4BsJcsDOxqZB9t5a0IIoKuc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
                          rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
        Validity
            Not Before: Mar  1 05:44:46 2026 GMT
            Not After : Mar  8 05:44:46 2026 GMT
        Subject: CN=69a3d24e-9040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:e1:58:4a:74:4a:a6:b5:fe:59:77:a6:f1:
                    2c:a2:92:2c:b4:f3:d8:88:ab:39:9d:ba:09:35:e5:
                    65:d6:0c:5b:e1:92:fa:9a:1b:a4:6e:92:50:84:e5:
                    48:5b:0e:e5:8e:72:95:e8:8d:bc:31:a5:6e:39:5a:
                    99:12:58:72:8c:3e:4d:de:6a:b0:c7:af:02:a4:44:
                    e5:26:93:74:19:ff:fc:55:ab:c7:1c:1f:1c:f3:12:
                    6c:90:1c:41:06:f0:1a:61:d3:ca:8d:1f:1f:85:5f:
                    91:43:78:fd:d1:af:ac:93:e3:26:fc:d9:f7:94:2d:
                    e7:6b:ce:50:d7:aa:58:14:30:ed:e9:8b:6f:dd:88:
                    84:a4:81:ba:9f:ee:16:87:e9:eb:d2:7f:77:a2:b5:
                    fc:ae:f3:46:22:c2:87:15:36:39:5b:7b:03:68:23:
                    fe:44:73:9a:42:f4:d2:6b:58:50:67:0e:6a:45:c9:
                    99:1c:e5:c8:a5:53:5b:a9:2f:6d:b3:58:19:40:af:
                    ae:b4:b6:e0:38:c8:ad:9f:46:3e:d4:ca:35:85:93:
                    11:f4:6b:64:a2:8d:f0:de:89:f6:6b:5c:8a:06:80:
                    27:f8:65:24:ff:a8:88:ba:4e:e2:be:59:58:01:35:
                    a6:4b:21:74:4b:cb:56:1d:bd:7f:9a:57:7c:bb:f0:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:65:9E:EC:8D:FA:C2:8F:94:50:D1:B0:53:CB:CE:2A:11:4C:99:5A
            X509v3 Authority Key Identifier:
                keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9e:20:d2:07:3b:bf:35:58:5c:63:4a:ec:c6:41:a3:23:ea:
         19:10:41:ca:b3:2d:83:28:e5:a6:50:58:b9:43:93:bd:cf:f9:
         41:fa:c3:31:66:bd:d3:87:13:e9:62:2e:f7:9d:05:32:78:f2:
         e3:53:9e:54:fc:30:b3:00:b7:eb:f0:5b:b4:20:54:7c:f9:80:
         40:f6:73:90:a2:51:00:6d:d6:02:99:3d:1c:6d:f2:4c:de:d9:
         d6:56:50:3c:c4:76:d8:9f:bb:8a:51:2f:ba:34:4d:09:61:eb:
         22:36:42:4b:41:14:14:c4:93:c1:cf:e6:dd:0e:02:7f:31:1f:
         b7:7b:63:e3:58:af:b4:c8:20:67:6a:78:66:79:42:41:d6:f1:
         b3:55:89:b8:d2:1e:02:92:11:d9:2c:88:9a:52:ca:83:59:70:
         96:67:2c:13:30:56:c6:dd:95:a8:f9:c4:58:4b:08:23:a3:7d:
         0e:83:12:d1:1a:6f:26:5b:e5:13:54:7b:3c:6a:b4:2d:bc:8c:
         fe:36:4f:f0:15:62:31:c1:ab:09:f7:d9:2b:b9:6b:bd:f7:f7:
         71:72:ae:ed:be:1c:92:ed:77:66:4b:a5:0b:2f:a6:53:78:f5:
         98:34:da:7a:50:8b:13:3c:17:d7:cd:0c:79:16:aa:eb:56:f4:
         84:c8:b0:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc3OUQxMTAvBgNVBAUTKDkxMkZCNUY3MzUxQ0Y5OEZCOTY3NDUxRkVFREFGNDlG
MTQ4RTFBM0EwHhcNMjYwMzAxMDU0NDQ2WhcNMjYwMzA4MDU0NDQ2WjAYMRYwFAYD
VQQDEw02OWEzZDI0ZS05MDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0g3hWEp0Sqa1/ll3pvEsopIstPPYiKs5nboJNeVl1gxb4ZL6mhukbpJQhOVI
Ww7ljnKV6I28MaVuOVqZElhyjD5N3mqwx68CpETlJpN0Gf/8VavHHB8c8xJskBxB
BvAaYdPKjR8fhV+RQ3j90a+sk+Mm/Nn3lC3na85Q16pYFDDt6Ytv3YiEpIG6n+4W
h+nr0n93orX8rvNGIsKHFTY5W3sDaCP+RHOaQvTSa1hQZw5qRcmZHOXIpVNbqS9t
s1gZQK+utLbgOMitn0Y+1Mo1hZMR9Gtkoo3w3on2a1yKBoAn+GUk/6iIuk7ivllY
ATWmSyF0S8tWHb1/mld8u/CUJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNlnuyN
+sKPlFDRsFPLzioRTJlaMB8GA1UdIwQYMBaAFJEvtfc1HPmPuWdFH+7a9J8Ujho6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc5RC80RkQ1OTQyNEUy
QUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1ZLTVaMFVmN3RyMG54U09H
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tTLTE5elVjLVktNVowVWY3dHIwbnhTT0dqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Nzc5RC80RkQ1OTQyNEUyQUUxMUVFODZGMzNDMUVDNEY5QUUwMi9rUy0xOXpVYy1Z
LTVaMFVmN3RyMG54U09Ham8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo54g0gc7vzVYXGNK7MZBoyPqGRBByrMtgyjlplBYuUOTvc/5QfrDMWa904cT
6WIu950FMnjy41OeVPwwswC36/BbtCBUfPmAQPZzkKJRAG3WApk9HG3yTN7Z1lZQ
PMR22J+7ilEvujRNCWHrIjZCS0EUFMSTwc/m3Q4CfzEft3tj41ivtMggZ2p4ZnlC
Qdbxs1WJuNIeApIR2SyImlLKg1lwlmcsEzBWxt2VqPnEWEsII6N9DoMS0RpvJlvl
E1R7PGq0LbyM/jZP8BViMcGrCffZK7lrvff3cXKu7b4cku13ZkulCy+mU3j1mDTa
elCLEzwX180MeRaq61b0hMiwrg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:28 2026 by rpki-client