Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
File:                     ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json)
Hash identifier:          8Z11jOHb99m4asyx4ErPDusrQ2LiR/Ae/JzpzKyuixY=
Subject key identifier:   6A:CF:3A:ED:3B:C2:CE:00:55:F5:63:BD:CF:34:05:48:A4:88:3C:07
Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
Certificate issuer:       /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
Manifest number:          0132
Signing time:             Sun 01 Mar 2026 06:32:15 +0000
Manifest this update:     Sun 01 Mar 2026 06:32:15 +0000
Manifest next update:     Sun 08 Mar 2026 06:32:15 +0000
Files and hashes:         1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: pZrskcUbn6XVPW0MBmbe7ZIB/OXUGc+fJJ/IXYjcT7Y=)
                          2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: /RtxCHmcoYhAEp/IYJhHHQwvy9mi2n2CrMQ44qEysso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
                          rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
        Validity
            Not Before: Mar  1 06:32:15 2026 GMT
            Not After : Mar  8 06:32:15 2026 GMT
        Subject: CN=69a3dd6f-10a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:19:e4:21:75:84:0e:1d:80:d9:e0:cc:90:b6:
                    4c:c5:68:ce:f4:76:4a:84:12:65:e6:42:3a:4a:ed:
                    33:e4:5c:07:6b:46:53:94:8f:c3:54:21:e8:14:f2:
                    40:b9:bd:f1:2d:05:35:27:1c:32:67:99:aa:d2:58:
                    82:cb:49:52:54:b8:9d:23:fd:2e:54:35:4f:02:02:
                    fa:06:e6:3b:69:93:4c:8b:94:63:07:ca:fb:15:46:
                    e6:46:88:24:e4:af:d6:12:27:fc:e0:e4:c5:b8:49:
                    29:e4:2d:38:75:ee:71:6d:ee:b1:56:58:b5:aa:f6:
                    f5:2e:bc:51:dd:9a:3f:52:82:03:e8:ca:fb:64:0e:
                    f2:66:87:90:50:64:92:ba:9c:d6:df:df:e1:12:1b:
                    a6:33:09:55:1f:0f:d2:0d:4b:e5:bb:ba:63:08:21:
                    49:4b:a2:86:73:dc:81:2f:5e:5c:1a:f4:65:67:47:
                    67:28:9c:bd:25:44:cf:07:f5:b9:7b:01:a4:80:65:
                    98:7d:18:f8:8b:cc:5b:29:76:21:cd:41:25:da:2f:
                    d8:4b:1c:b7:c7:a4:be:c0:47:50:f6:36:8d:d2:0a:
                    47:66:e6:88:a2:98:6f:0f:98:5c:cd:f7:fa:35:e0:
                    03:24:cf:c3:11:de:4e:57:51:8e:58:39:4d:4e:28:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CF:3A:ED:3B:C2:CE:00:55:F5:63:BD:CF:34:05:48:A4:88:3C:07
            X509v3 Authority Key Identifier:
                keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:08:90:09:85:2a:5e:54:b9:d9:e8:cf:b3:97:83:31:a1:85:
         23:87:be:84:0f:a3:a4:60:74:9a:b2:0f:ab:f3:54:b1:e7:07:
         5d:eb:db:3b:8e:b1:86:0d:bf:24:46:b5:5d:bf:b3:db:b4:4b:
         8c:6e:b5:35:bd:64:ba:53:47:34:5b:6c:c0:59:c7:ae:e7:60:
         91:fc:55:0c:dc:a5:1d:6e:b6:67:b1:91:c1:87:84:a9:d8:51:
         28:32:4a:15:84:a1:3d:63:89:9b:62:e2:cb:83:a7:27:2d:6b:
         a4:b3:b6:ff:2c:1e:4a:51:b9:20:e4:39:5e:cc:8c:3c:dd:fa:
         27:31:8f:fe:10:6c:99:e8:d1:3b:e2:56:6c:ef:f6:0e:4e:ba:
         e6:7c:37:44:9b:0f:72:d3:19:3f:63:2d:74:41:91:e2:31:cd:
         11:25:7c:17:6f:d0:54:a0:bb:4a:23:b9:ff:88:d9:48:13:16:
         ef:27:33:e8:27:ee:91:71:2f:d6:7f:0e:e2:b8:95:fb:f9:91:
         53:a2:b6:23:56:b9:1e:fd:71:65:a4:50:35:73:16:a6:b7:fb:
         27:3b:ec:61:73:54:fd:09:4d:4f:df:a2:d2:d8:0b:3f:20:8a:
         a4:37:1a:27:02:dd:5f:e5:9d:42:f7:3f:75:30:46:8a:49:02:
         75:f6:0b:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VFODUxMTAvBgNVBAUTKDA3MjQ0QTk5NENEQzRCOTM4MDc0NzExQzQyNDhENDlG
OUQ1MEQ4MjcwHhcNMjYwMzAxMDYzMjE1WhcNMjYwMzA4MDYzMjE1WjAYMRYwFAYD
VQQDEw02OWEzZGQ2Zi0xMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3hnkIXWEDh2A2eDMkLZMxWjO9HZKhBJl5kI6Su0z5FwHa0ZTlI/DVCHoFPJA
ub3xLQU1JxwyZ5mq0liCy0lSVLidI/0uVDVPAgL6BuY7aZNMi5RjB8r7FUbmRogk
5K/WEif84OTFuEkp5C04de5xbe6xVli1qvb1LrxR3Zo/UoID6Mr7ZA7yZoeQUGSS
upzW39/hEhumMwlVHw/SDUvlu7pjCCFJS6KGc9yBL15cGvRlZ0dnKJy9JUTPB/W5
ewGkgGWYfRj4i8xbKXYhzUEl2i/YSxy3x6S+wEdQ9jaN0gpHZuaIophvD5hczff6
NeADJM/DEd5OV1GOWDlNTiibQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrPOu07
ws4AVfVjvc80BUikiDwHMB8GA1UdIwQYMBaAFAckSplM3EuTgHRxHEJI1J+dUNgn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS9GQzY2RjVBRTQ1
QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1T0FkSEVjUWtqVW41MVEy
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0J5UkttVXpjUzVPQWRIRWNRa2pVbjUxUTJDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUU4NS9GQzY2RjVBRTQ1QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1
T0FkSEVjUWtqVW41MVEyQ2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFAiQCYUqXlS52ejPs5eDMaGFI4e+hA+jpGB0mrIPq/NUsecHXevbO46xhg2/
JEa1Xb+z27RLjG61Nb1kulNHNFtswFnHrudgkfxVDNylHW62Z7GRwYeEqdhRKDJK
FYShPWOJm2Liy4OnJy1rpLO2/yweSlG5IOQ5XsyMPN36JzGP/hBsmejRO+JWbO/2
Dk665nw3RJsPctMZP2MtdEGR4jHNESV8F2/QVKC7SiO5/4jZSBMW7ycz6CfukXEv
1n8O4riV+/mRU6K2I1a5Hv1xZaRQNXMWprf7JzvsYXNU/QlNT9+i0tgLPyCKpDca
JwLdX+WdQvc/dTBGikkCdfYLig==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:56 2026 by rpki-client