Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft
File:                     dBZmaL52tzdXYxblXZ5kOeZxz0c.mft (raw, json)
Hash identifier:          Sm9aA5oh40LVpWLU8OCeUtkQR5pSCO4yIsCdeLVFZ4U=
Subject key identifier:   ED:41:D1:D2:27:CD:46:A0:58:14:5D:86:D0:DE:C7:49:CC:2A:85:5B
Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47
Certificate issuer:       /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft
Manifest number:          C0
Signing time:             Sun 01 Mar 2026 08:10:06 +0000
Manifest this update:     Sun 01 Mar 2026 08:10:06 +0000
Manifest next update:     Sun 08 Mar 2026 08:10:06 +0000
Files and hashes:         1: dBZmaL52tzdXYxblXZ5kOeZxz0c.crl (hash: wDmBlcPilwoP2ClNrvt3C/up3T961uTn7jqxU4VlO/Y=)
                          2: 7CC6D634F27311EF9AAECC3CC4F9AE02.roa (hash: xU7kwYs59YnLCTdqLFIu2qc0IllPQRF7pPQXAgvdANE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl
                          rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47
        Validity
            Not Before: Mar  1 08:10:06 2026 GMT
            Not After : Mar  8 08:10:06 2026 GMT
        Subject: CN=69a3f45e-b32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:25:5c:01:f0:4e:4d:26:f4:c0:0e:ed:84:
                    5c:29:49:a1:7f:5c:43:93:38:09:ca:a5:10:bf:04:
                    1e:40:0d:db:e1:0c:e0:cb:f6:21:e8:fc:75:b8:5f:
                    86:c9:81:51:63:56:c3:46:4d:4e:4d:fc:82:9e:3b:
                    a6:80:b7:d7:95:90:42:b3:bf:c3:e0:8c:3b:05:36:
                    54:21:18:24:43:86:7d:71:37:9f:6f:b3:ff:f9:b2:
                    3a:c4:30:80:c0:b4:7d:2a:3d:cb:c6:bc:1c:63:e2:
                    e5:ff:a3:a3:f4:2f:e0:eb:66:44:51:f8:c4:6f:b5:
                    57:90:b2:54:80:2f:ab:b1:73:ab:4f:00:89:34:0e:
                    fd:b8:5c:e3:37:8f:88:56:27:ea:e6:d3:03:97:c0:
                    91:b7:79:7a:7a:c0:5c:89:9c:29:0e:05:4c:ce:5c:
                    40:bf:68:49:d5:be:de:6b:59:20:a3:08:37:10:d4:
                    60:c2:f2:c9:4b:21:b2:40:8c:a2:42:de:ed:3a:36:
                    73:77:b9:08:35:53:00:d4:ad:7e:d3:ce:a2:32:36:
                    2f:e0:51:31:59:61:7d:ab:8b:89:95:fa:ed:86:16:
                    78:14:5e:cb:68:8e:50:bd:64:96:b9:72:01:6e:af:
                    f4:9b:d6:08:04:98:14:fd:5d:66:30:3d:8b:c7:4a:
                    9d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:41:D1:D2:27:CD:46:A0:58:14:5D:86:D0:DE:C7:49:CC:2A:85:5B
            X509v3 Authority Key Identifier:
                keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:67:62:ac:06:d4:79:8e:63:c7:71:f6:11:cb:0c:ab:b7:
         5e:a8:b1:51:a2:74:ab:c6:9a:d7:79:1f:b0:b4:45:96:f0:ac:
         00:93:3a:f9:b0:5a:4d:8c:de:88:07:2a:53:d6:44:2a:4f:7b:
         bb:d1:d0:ff:3a:1e:30:e6:27:b3:3d:ad:07:cd:dd:53:ae:39:
         20:d4:a8:5e:c3:8c:f2:76:56:95:5d:0f:33:c9:e2:e6:3c:25:
         af:7c:f6:1b:46:6c:a4:69:e7:7b:16:e2:a4:b5:ed:10:ae:bc:
         a6:85:22:e6:8e:0c:d9:0c:79:24:97:cb:7f:7d:13:ff:18:92:
         f6:60:30:f5:bb:42:00:c1:f6:6a:0f:ed:3f:ae:19:9a:28:a4:
         63:e4:39:25:c8:3e:3b:ca:bd:3d:09:bd:ce:c0:0b:a8:4a:aa:
         ab:1e:06:ec:02:f8:b0:f7:79:a6:3e:dc:d1:73:cd:9e:66:02:
         9d:25:55:de:4f:ba:0b:80:7a:a7:31:1c:ee:53:c7:68:fa:3b:
         7f:ad:eb:a3:1f:8f:ec:10:1a:88:39:0e:69:74:38:49:03:78:
         7e:4e:37:b5:2f:41:0f:2a:70:8d:7b:36:96:dc:b5:9d:29:36:
         7a:07:99:ca:76:f0:38:86:21:15:7e:fe:f4:f4:0c:41:00:d4:
         3e:e5:e5:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QyODExMTAvBgNVBAUTKDc0MTY2NjY4QkU3NkI3Mzc1NzYzMTZFNTVEOUU2NDM5
RTY3MUNGNDcwHhcNMjYwMzAxMDgxMDA2WhcNMjYwMzA4MDgxMDA2WjAYMRYwFAYD
VQQDEw02OWEzZjQ1ZS1iMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3DslXAHwTk0m9MAO7YRcKUmhf1xDkzgJyqUQvwQeQA3b4Qzgy/Yh6Px1uF+G
yYFRY1bDRk1OTfyCnjumgLfXlZBCs7/D4Iw7BTZUIRgkQ4Z9cTefb7P/+bI6xDCA
wLR9Kj3LxrwcY+Ll/6Oj9C/g62ZEUfjEb7VXkLJUgC+rsXOrTwCJNA79uFzjN4+I
Vifq5tMDl8CRt3l6esBciZwpDgVMzlxAv2hJ1b7ea1kgowg3ENRgwvLJSyGyQIyi
Qt7tOjZzd7kINVMA1K1+086iMjYv4FExWWF9q4uJlfrthhZ4FF7LaI5QvWSWuXIB
bq/0m9YIBJgU/V1mMD2Lx0qdUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1B0dIn
zUagWBRdhtDex0nMKoVbMB8GA1UdIwQYMBaAFHQWZmi+drc3V2MW5V2eZDnmcc9H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDI4MS9GQjQyMTZFOEYy
NzAxMUVGOUJGOEI1MzVDNEY5QUUwMi9kQlptYUw1MnR6ZFhZeGJsWFo1a09lWnh6
MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RCWm1hTDUydHpkWFl4YmxYWjVrT2VaeHowYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RDI4MS9GQjQyMTZFOEYyNzAxMUVGOUJGOEI1MzVDNEY5QUUwMi9kQlptYUw1MnR6
ZFhZeGJsWFo1a09lWnh6MGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiv5nYqwG1HmOY8dx9hHLDKu3XqixUaJ0q8aa13kfsLRFlvCsAJM6+bBaTYze
iAcqU9ZEKk97u9HQ/zoeMOYnsz2tB83dU645INSoXsOM8nZWlV0PM8ni5jwlr3z2
G0ZspGnnexbipLXtEK68poUi5o4M2Qx5JJfLf30T/xiS9mAw9btCAMH2ag/tP64Z
miikY+Q5Jcg+O8q9PQm9zsALqEqqqx4G7AL4sPd5pj7c0XPNnmYCnSVV3k+6C4B6
pzEc7lPHaPo7f63rox+P7BAaiDkOaXQ4SQN4fk43tS9BDypwjXs2lty1nSk2egeZ
ynbwOIYhFX7+9PQMQQDUPuXlXw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:19 2026 by rpki-client