Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
File:                     Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json)
Hash identifier:          uSpdM6JSm2BNrFLlAHOa/wTvELcryX5sGBQc+ffveD0=
Subject key identifier:   9D:D1:14:8B:E4:E6:52:12:43:FD:4F:1D:E2:30:5E:1A:AE:23:26:34
Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
Certificate issuer:       /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
Manifest number:          0133
Signing time:             Sun 01 Mar 2026 23:39:26 +0000
Manifest this update:     Sun 01 Mar 2026 23:39:25 +0000
Manifest next update:     Sun 08 Mar 2026 23:39:25 +0000
Files and hashes:         1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: 5+Mqwk6aX8gZJY43HYPBALB7YgNFwJgneCU6iMdJ6eQ=)
                          2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: XlfXtiHFNX7/67H2UR1inFOAMG5dLCk4KBq/ZXW7m4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
                          rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
        Validity
            Not Before: Mar  1 23:39:25 2026 GMT
            Not After : Mar  8 23:39:25 2026 GMT
        Subject: CN=69a4ce2e-0971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:95:3e:7e:00:61:e1:d3:e8:67:e1:57:b3:
                    58:12:39:8a:81:79:01:a3:24:fd:0d:e7:0d:13:cc:
                    37:77:08:ba:57:de:fc:dd:a1:e1:ac:90:ef:b9:31:
                    32:42:b1:c2:98:45:4e:38:00:b0:a4:d0:84:5c:6f:
                    36:ed:3a:1b:8d:c2:36:0f:4e:71:e7:21:40:ba:b5:
                    d7:0d:76:c3:d8:f8:7b:03:13:ec:ba:06:54:dc:9a:
                    ca:0f:1b:96:ed:3c:5f:40:73:88:9a:63:b2:aa:7a:
                    d6:0e:70:4d:7e:3b:9f:e9:3f:b2:d7:4a:47:07:1f:
                    31:c1:21:80:db:9f:8e:85:37:5f:27:24:81:93:56:
                    20:0a:05:c3:45:2e:9a:b7:80:14:00:8a:f0:05:2a:
                    3e:09:a5:92:a4:f2:da:bd:42:2a:98:14:3a:81:df:
                    8f:ab:4c:d3:0a:6b:9d:0f:16:27:b6:7e:70:b4:f6:
                    4b:d4:ac:42:b8:bc:50:e2:88:7c:fe:f2:73:b3:0b:
                    35:47:9f:b5:03:4e:0a:15:16:1e:40:d8:b0:f6:32:
                    4e:01:32:73:8a:3e:36:44:71:27:bd:e8:19:78:d2:
                    ed:c9:20:4c:3c:6d:0a:64:d8:0f:ad:a4:a1:54:db:
                    75:ce:48:ed:c4:82:3c:7e:c4:5c:4b:23:0e:52:38:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D1:14:8B:E4:E6:52:12:43:FD:4F:1D:E2:30:5E:1A:AE:23:26:34
            X509v3 Authority Key Identifier:
                keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b8:cd:b8:07:04:a2:61:c6:b2:d3:20:31:da:4e:a7:69:2d:
         d5:63:86:b1:6b:9a:3a:6f:f1:92:cf:38:4d:5f:2b:37:1c:81:
         9a:84:67:d8:74:6b:48:00:15:09:22:ec:34:8f:92:2b:ca:32:
         d8:36:9e:57:15:5b:dc:44:a1:3d:38:ea:57:1c:0d:f1:bf:c2:
         9d:5b:c2:6b:4b:22:63:62:8b:5e:a8:53:25:70:41:7a:a0:f1:
         a3:53:94:fe:c3:3c:5d:11:2f:59:80:c3:ca:6b:31:6c:53:23:
         5f:ef:95:53:40:b0:35:cd:df:1e:8e:da:a4:3f:65:14:22:cf:
         37:6a:c5:17:2b:71:81:ae:73:cc:d3:a9:38:7c:0c:0c:8a:24:
         c4:72:6c:72:79:95:43:5f:7d:3d:62:06:05:a3:c8:56:c2:ea:
         26:53:cb:60:ea:55:4d:c2:bc:3c:aa:c5:da:8f:01:d5:9e:70:
         7c:6e:7c:8d:38:9f:65:76:8e:88:ea:cf:7f:7e:4a:ec:5e:6e:
         1b:f5:a9:8c:29:9b:bb:40:e2:b3:4e:02:bb:c0:7b:7d:46:32:
         46:78:e5:cb:cc:13:38:09:d3:d2:02:cc:94:42:80:ee:1b:d1:
         29:5d:5d:b4:a5:26:31:5a:46:f6:31:56:76:ca:fd:f5:b1:5e:
         86:88:31:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5
OEQ0RUJEMUQwHhcNMjYwMzAxMjMzOTI1WhcNMjYwMzA4MjMzOTI1WjAYMRYwFAYD
VQQDEw02OWE0Y2UyZS0wOTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0daVPn4AYeHT6GfhV7NYEjmKgXkBoyT9DecNE8w3dwi6V9783aHhrJDvuTEy
QrHCmEVOOACwpNCEXG827TobjcI2D05x5yFAurXXDXbD2Ph7AxPsugZU3JrKDxuW
7TxfQHOImmOyqnrWDnBNfjuf6T+y10pHBx8xwSGA25+OhTdfJySBk1YgCgXDRS6a
t4AUAIrwBSo+CaWSpPLavUIqmBQ6gd+Pq0zTCmudDxYntn5wtPZL1KxCuLxQ4oh8
/vJzsws1R5+1A04KFRYeQNiw9jJOATJzij42RHEnvegZeNLtySBMPG0KZNgPraSh
VNt1zkjtxII8fsRcSyMOUji/swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ3RFIvk
5lISQ/1PHeIwXhquIyY0MB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1
QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QUNBNy81MTdFNkU0QzQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0Vldv
Wml4ZTVvRFAzd3lZMU92UjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq7jNuAcEomHGstMgMdpOp2kt1WOGsWuaOm/xks84TV8rNxyBmoRn2HRrSAAV
CSLsNI+SK8oy2DaeVxVb3EShPTjqVxwN8b/CnVvCa0siY2KLXqhTJXBBeqDxo1OU
/sM8XREvWYDDymsxbFMjX++VU0CwNc3fHo7apD9lFCLPN2rFFytxga5zzNOpOHwM
DIokxHJscnmVQ199PWIGBaPIVsLqJlPLYOpVTcK8PKrF2o8B1Z5wfG58jTifZXaO
iOrPf35K7F5uG/WpjCmbu0Dis04Cu8B7fUYyRnjly8wTOAnT0gLMlEKA7hvRKV1d
tKUmMVpG9jFWdsr99bFehogxbQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:53 2026 by rpki-client