Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft
File:                     yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft (raw, json)
Hash identifier:          01Zll247zufBg2GYxYLYJBFhRCScuw7o4aKCmh81v8g=
Subject key identifier:   27:58:2D:B8:C8:F1:5B:26:AE:C2:3D:CF:5A:DC:0A:87:2D:15:86:3A
Authority key identifier: C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77
Certificate issuer:       /CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77
Certificate serial:       036C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft
Manifest number:          0367
Signing time:             Sun 01 Mar 2026 01:43:41 +0000
Manifest this update:     Sun 01 Mar 2026 01:43:41 +0000
Manifest next update:     Sun 08 Mar 2026 01:43:41 +0000
Files and hashes:         1: yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl (hash: +WzKgbkk0rVcd+EXtNFQkh4FFSBYQC/0WCpAxyzr4+g=)
                          2: 5FC8538AE7D811ECB3E05318C4F9AE02.roa (hash: QUXJ6EoEVGUyvaKXpTag7fMul5UWaiUgtkt9cLzt5qM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl
                          rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB06F, serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77
        Validity
            Not Before: Mar  1 01:43:41 2026 GMT
            Not After : Mar  8 01:43:41 2026 GMT
        Subject: CN=69a399cd-72af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:b2:69:02:d8:27:46:8f:db:4d:49:f9:e1:
                    4c:b2:0a:93:d0:ae:18:15:18:21:7a:57:c6:9f:8a:
                    cd:c8:0e:c5:88:0c:72:73:7f:d1:ad:82:9c:6f:66:
                    d9:80:1e:61:f7:ff:ef:33:88:fd:b2:3e:e5:a5:28:
                    7d:ff:6a:96:2b:f6:84:27:fb:09:bb:f0:7b:15:14:
                    bb:cc:99:48:43:47:ea:0b:96:41:c4:14:08:68:39:
                    c8:60:1e:9f:be:9d:bc:67:aa:9d:69:a3:4a:3a:fb:
                    53:a6:9b:f2:84:bb:1b:c6:71:d7:97:a2:ce:9b:cc:
                    9a:1e:8b:f8:b1:76:72:57:ed:b8:ec:3b:44:63:f0:
                    c9:ac:84:45:ad:0b:a4:c0:b6:4c:b5:37:37:2f:2b:
                    4f:46:7f:da:0d:60:5f:d6:1f:82:2f:21:8c:31:a4:
                    77:ca:dd:c2:98:5a:01:fb:99:d0:af:6c:a1:d9:29:
                    22:e6:8c:a6:be:50:75:af:bc:f2:5b:78:ce:85:58:
                    7a:e6:ff:a9:eb:de:2b:72:85:84:3d:d6:00:cb:a3:
                    e8:9b:c4:df:bc:c8:6b:36:69:29:18:61:bc:2b:c0:
                    ab:9f:7d:ed:7d:b7:4c:ae:84:f0:ef:15:8c:73:73:
                    bb:71:a6:06:bc:50:90:64:e7:04:5e:14:7d:da:6a:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:58:2D:B8:C8:F1:5B:26:AE:C2:3D:CF:5A:DC:0A:87:2D:15:86:3A
            X509v3 Authority Key Identifier:
                keyid:C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4e:cc:63:28:d9:2a:80:de:c9:47:d4:7a:e4:75:02:3a:42:
         3e:fa:13:c9:c6:ee:eb:a1:e1:3b:f8:44:f0:2b:22:c3:6e:5a:
         14:12:d2:51:14:3c:31:fe:c2:7b:6d:00:00:3f:2c:25:41:d3:
         04:61:59:ce:d7:ef:1f:00:c6:e1:5d:91:fb:b3:88:8c:01:72:
         0d:06:d8:2d:84:89:19:e3:07:c0:48:f4:b5:b6:63:b1:36:a2:
         d9:bd:e4:c3:55:a2:b9:c5:7c:bc:e8:ef:d2:7c:2c:ef:c9:ea:
         fd:77:58:aa:81:b1:63:1c:09:26:41:94:ef:97:6f:5c:74:0c:
         eb:b2:02:9f:25:60:f6:10:b9:d1:eb:c7:45:61:8c:5d:71:c5:
         71:1b:d1:71:0c:63:b2:da:e1:f4:69:8d:38:dc:47:71:ef:15:
         9f:f2:98:14:e6:8b:d6:69:fa:85:7d:37:01:f1:c9:49:ab:af:
         92:63:07:f0:91:db:5b:2f:93:c6:ac:a4:f4:7b:cd:b0:8c:a4:
         be:4e:a0:1d:89:44:94:19:3e:81:a6:9c:81:7a:49:13:fd:52:
         14:2c:35:e0:85:22:2d:e7:ec:f0:a0:ed:41:cd:e4:71:71:ec:
         e7:99:b6:4b:b2:d4:2a:60:3a:0e:2a:27:0e:55:82:8d:9a:4c:
         bb:96:d5:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IwNkYxMTAvBgNVBAUTKEM5NDVCNzc3MkNDQzI3NDEzODY1QTkyQ0I4OTJERkQy
N0NBQTlGNzcwHhcNMjYwMzAxMDE0MzQxWhcNMjYwMzA4MDE0MzQxWjAYMRYwFAYD
VQQDDA02OWEzOTljZC03MmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqVqyaQLYJ0aP201J+eFMsgqT0K4YFRghelfGn4rNyA7FiAxyc3/RrYKcb2bZ
gB5h9//vM4j9sj7lpSh9/2qWK/aEJ/sJu/B7FRS7zJlIQ0fqC5ZBxBQIaDnIYB6f
vp28Z6qdaaNKOvtTppvyhLsbxnHXl6LOm8yaHov4sXZyV+247DtEY/DJrIRFrQuk
wLZMtTc3LytPRn/aDWBf1h+CLyGMMaR3yt3CmFoB+5nQr2yh2Ski5oymvlB1r7zy
W3jOhVh65v+p694rcoWEPdYAy6Pom8TfvMhrNmkpGGG8K8Crn33tfbdMroTw7xWM
c3O7caYGvFCQZOcEXhR92mr49wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdYLbjI
8VsmrsI9z1rcCoctFYY6MB8GA1UdIwQYMBaAFMlFt3cszCdBOGWpLLiS39J8qp93
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2Ri8xMkYzMDIxMkU3
MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUowRTRaYWtzdUpMZjBueXFu
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lVVzNkeXpNSjBFNFpha3N1SkxmMG55cW4zYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjA2Ri8xMkYzMDIxMkU3MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUow
RTRaYWtzdUpMZjBueXFuM2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGE7MYyjZKoDeyUfUeuR1AjpCPvoTycbu66HhO/hE8Csiw25aFBLSURQ8Mf7C
e20AAD8sJUHTBGFZztfvHwDG4V2R+7OIjAFyDQbYLYSJGeMHwEj0tbZjsTai2b3k
w1WiucV8vOjv0nws78nq/XdYqoGxYxwJJkGU75dvXHQM67ICnyVg9hC50evHRWGM
XXHFcRvRcQxjstrh9GmNONxHce8Vn/KYFOaL1mn6hX03AfHJSauvkmMH8JHbWy+T
xqyk9HvNsIykvk6gHYlElBk+gaacgXpJE/1SFCw14IUiLefs8KDtQc3kcXHs55m2
S7LUKmA6DionDlWCjZpMu5bVWQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:33 2026 by rpki-client