Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
File:                     fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft (raw, json)
Hash identifier:          qk+C6Q5tqSibxBhO/WTlQtMHUYs+f+plJXUawYZ32fo=
Subject key identifier:   AD:C4:7B:39:11:7A:D1:71:D3:BD:2B:E9:F1:46:56:13:17:B6:1B:73
Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
Certificate issuer:       /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Certificate serial:       0481
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
Manifest number:          0468
Signing time:             Sun 01 Mar 2026 00:58:42 +0000
Manifest this update:     Sun 01 Mar 2026 00:58:41 +0000
Manifest next update:     Sun 08 Mar 2026 00:58:41 +0000
Files and hashes:         1: fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl (hash: RkSPab6EUDeHslyW4e8ee8yPENg4B4XToZVJmVSdYzw=)
                          2: 13A285FAB19A11EF8A0E4356C4F9AE02.roa (hash: SIGvy/hsgnUK+qKBEZGj2wPqVVKTldYotNpwBBw1HJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
                          rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153 (0x481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFCF8, serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
        Validity
            Not Before: Mar  1 00:58:41 2026 GMT
            Not After : Mar  8 00:58:41 2026 GMT
        Subject: CN=69a38f41-7918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:52:49:f6:72:9e:bb:4b:10:cf:22:bb:ea:
                    73:83:0f:3b:0b:6b:7f:de:60:e5:1c:84:fc:8c:3d:
                    41:1e:f6:1c:43:e4:29:75:19:98:c7:8d:a9:8e:f9:
                    ca:ec:8b:df:9b:9b:56:11:64:fd:c6:56:05:fd:59:
                    54:08:3c:9d:8b:9e:18:12:c2:2b:8a:fe:13:c4:7a:
                    9a:6d:5a:29:63:c7:d1:55:e6:df:cd:32:47:d0:2c:
                    4a:fa:f2:66:a5:ea:48:d4:ab:27:c1:66:67:7e:0a:
                    d2:4b:b0:33:18:e8:2f:64:d1:fc:68:bc:4f:58:71:
                    b7:da:d6:66:51:62:81:ab:4d:25:ed:a9:57:3a:11:
                    fd:a9:32:2e:19:3d:a1:13:ed:2c:aa:c8:4b:82:dd:
                    60:9a:85:fd:1d:eb:6b:e7:8d:c2:8d:8a:97:f3:95:
                    18:34:31:2d:48:2f:55:ba:e5:6e:07:24:94:99:ce:
                    2e:ce:72:52:be:31:00:c9:85:fe:c9:d8:26:1c:40:
                    c6:4a:94:fd:ff:20:8c:3e:b0:9f:d5:cd:fa:11:ae:
                    a9:ed:af:c8:ad:dd:30:66:34:31:45:3f:4a:ae:ec:
                    bc:ba:38:c5:00:59:41:a1:35:90:97:03:3c:bd:cd:
                    51:6a:e6:78:70:03:99:9e:9a:e0:ec:d6:da:9d:ab:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C4:7B:39:11:7A:D1:71:D3:BD:2B:E9:F1:46:56:13:17:B6:1B:73
            X509v3 Authority Key Identifier:
                keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:4d:97:9b:6e:39:93:c7:06:77:cf:47:72:e2:68:dc:fd:0d:
         71:ca:75:48:be:7b:ce:43:69:85:12:21:d4:7f:1d:f7:08:27:
         67:84:c3:ff:65:5f:34:c5:2d:ae:bf:6a:7e:bf:5e:fe:2d:95:
         4b:30:70:7f:5a:13:a7:41:10:6f:de:8d:28:81:7c:8d:d1:f8:
         d2:58:ec:89:f0:96:07:1a:ed:2d:0f:34:f6:b6:f1:45:fc:15:
         7d:a8:b2:23:cc:c9:b5:76:8d:4f:31:a9:11:3c:1c:b2:6f:f7:
         90:34:a3:9e:c7:53:a6:f9:c3:f8:72:51:41:fe:2c:d1:a3:6e:
         cb:de:b7:84:1f:e0:75:8d:ca:91:17:1c:20:12:13:a7:74:05:
         ee:3a:cb:b5:1b:42:2a:06:b4:9d:22:93:e4:b5:af:5f:f6:3c:
         62:87:68:da:a0:c8:bd:14:e6:85:74:90:7d:cd:fb:42:07:ad:
         a3:24:08:03:f0:93:18:4a:44:f5:f8:aa:66:f6:84:c1:b9:a8:
         67:ff:89:58:26:a2:ce:36:a2:f7:4b:1f:b9:5e:b8:e9:41:d7:
         42:69:d1:19:8a:9c:18:9d:f6:53:2d:9c:e9:af:3d:a0:44:71:
         10:0e:ee:46:50:44:6a:6d:41:02:fd:0d:8d:cf:ad:5f:d6:5e:
         05:f9:45:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZDRjgxMTAvBgNVBAUTKDdDNUUwRERDNEY1ODY5NzQ3QjJBMzU4QzlCN0MwRjMx
RThEOEREOEIwHhcNMjYwMzAxMDA1ODQxWhcNMjYwMzA4MDA1ODQxWjAYMRYwFAYD
VQQDDA02OWEzOGY0MS03OTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtTNSSfZynrtLEM8iu+pzgw87C2t/3mDlHIT8jD1BHvYcQ+QpdRmYx42pjvnK
7Ivfm5tWEWT9xlYF/VlUCDydi54YEsIriv4TxHqabVopY8fRVebfzTJH0CxK+vJm
pepI1KsnwWZnfgrSS7AzGOgvZNH8aLxPWHG32tZmUWKBq00l7alXOhH9qTIuGT2h
E+0sqshLgt1gmoX9Hetr543CjYqX85UYNDEtSC9VuuVuBySUmc4uznJSvjEAyYX+
ydgmHEDGSpT9/yCMPrCf1c36Ea6p7a/Ird0wZjQxRT9Kruy8ujjFAFlBoTWQlwM8
vc1RauZ4cAOZnprg7Nbanat2KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3EezkR
etFx070r6fFGVhMXthtzMB8GA1UdIwQYMBaAFHxeDdxPWGl0eyo1jJt8DzHo2N2L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNGOC8wNUU0QzJEMjhC
MDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFYUjdLaldNbTN3UE1lalkz
WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZGNE4zRTlZYVhSN0tqV01tM3dQTWVqWTNZcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkNGOC8wNUU0QzJEMjhCMDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFY
UjdLaldNbTN3UE1lalkzWXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHE2Xm245k8cGd89HcuJo3P0Nccp1SL57zkNphRIh1H8d9wgnZ4TD/2VfNMUt
rr9qfr9e/i2VSzBwf1oTp0EQb96NKIF8jdH40ljsifCWBxrtLQ809rbxRfwVfaiy
I8zJtXaNTzGpETwcsm/3kDSjnsdTpvnD+HJRQf4s0aNuy963hB/gdY3KkRccIBIT
p3QF7jrLtRtCKga0nSKT5LWvX/Y8Yodo2qDIvRTmhXSQfc37QgetoyQIA/CTGEpE
9fiqZvaEwbmoZ/+JWCaizjai90sfuV646UHXQmnRGYqcGJ32Uy2c6a89oERxEA7u
RlBEam1BAv0Njc+tX9ZeBflF9Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:20 2026 by rpki-client