Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
File:                     RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json)
Hash identifier:          p81/FZL03TFl071pGpWaOq2CjAqrZi3g1LxMsRHPyoc=
Subject key identifier:   DE:DE:06:2A:86:A7:9D:E7:60:AA:11:08:D5:89:79:4C:37:7D:FA:42
Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5
Certificate issuer:       /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
Manifest number:          58
Signing time:             Sun 01 Mar 2026 09:12:33 +0000
Manifest this update:     Sun 01 Mar 2026 09:12:32 +0000
Manifest next update:     Sun 08 Mar 2026 09:12:32 +0000
Files and hashes:         1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: sykHsk8FXar7lnMq93sl1U6ywSh9DKYMYUriDIPNSGs=)
                          2: 8EA99A70B53311F09D886D26C4F9AE02.roa (hash: 8wP/NlNE2Z/JRbzUdllp1czpJ2kBXEzpgll4z9yQeFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
        Validity
            Not Before: Mar  1 09:12:32 2026 GMT
            Not After : Mar  8 09:12:32 2026 GMT
        Subject: CN=69a40300-23f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:67:84:dc:a7:d7:34:04:09:a2:09:82:87:
                    1a:f7:75:e8:00:a8:a1:bd:ab:c1:6e:2b:79:55:da:
                    af:ea:ec:a6:a3:d2:38:34:fe:9f:5d:ab:85:c6:47:
                    ce:9d:6b:c6:49:ca:73:6c:67:aa:28:5d:eb:a6:68:
                    6d:21:47:42:d2:1d:e4:aa:ed:49:ef:3b:67:7c:7d:
                    02:e1:75:57:e8:a8:5c:a8:9b:b4:36:c9:8d:0f:83:
                    56:3a:c2:dc:cb:58:e3:c8:43:71:7f:70:e9:67:69:
                    fb:cd:12:8a:c3:86:c2:f6:21:1b:21:ea:44:54:46:
                    8c:f3:11:bd:4c:68:99:d4:34:c9:aa:83:ac:34:23:
                    89:69:0d:a4:6b:fa:09:3a:da:58:44:26:95:6c:cd:
                    09:b6:70:16:65:a1:ba:45:9c:88:6d:6a:7f:c2:cd:
                    49:42:b3:f7:66:45:7e:f4:db:b4:b1:b2:38:e3:a0:
                    f5:08:43:06:a0:1c:d2:dd:ce:d2:67:c3:9d:3c:67:
                    62:70:b5:45:f6:15:a2:50:b4:c0:c6:42:d0:fe:ca:
                    37:cb:08:ba:b2:1c:05:48:ad:a1:a7:71:2e:dc:92:
                    f8:ea:56:ea:7b:94:21:02:4e:61:6e:7d:70:9d:2d:
                    a8:2d:44:be:14:c1:d1:73:94:89:ba:7f:c9:8f:05:
                    1f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DE:06:2A:86:A7:9D:E7:60:AA:11:08:D5:89:79:4C:37:7D:FA:42
            X509v3 Authority Key Identifier:
                keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3a:5a:f3:e9:eb:62:95:5b:17:54:ed:c6:7c:7b:7e:48:71:
         45:56:54:f9:ef:5e:6d:06:00:8f:1f:ab:23:b5:de:f6:21:f5:
         a6:f0:59:1b:27:5c:66:b4:da:54:45:d9:2c:2b:18:f4:97:d3:
         9f:9b:5f:eb:86:76:f6:d1:8a:cf:dd:6f:6f:2e:6c:cf:28:70:
         ac:d0:8d:7d:5e:bf:05:ae:ff:39:64:25:b1:33:d5:83:84:96:
         43:d2:23:2f:e8:65:56:45:75:08:d5:d5:83:07:63:03:4c:a4:
         f8:ce:11:03:e7:bb:8d:bf:44:50:9e:9d:95:f0:cf:01:0c:d6:
         32:1e:97:b8:7c:b9:ee:18:13:0d:b3:63:1e:07:c8:19:56:55:
         99:b0:95:f8:30:9c:20:52:e9:1e:f5:db:07:c3:76:29:31:63:
         d7:b9:39:23:a0:4e:32:47:c2:f6:84:c2:45:d4:8b:30:8a:59:
         f9:8e:0a:fd:06:b6:20:69:27:1a:14:99:aa:1e:b4:34:3a:72:
         e1:be:46:21:e5:f6:0d:99:6a:4a:b2:85:25:77:c6:ec:70:aa:
         c8:2c:8a:cf:50:1b:76:53:45:b7:5a:00:4b:c9:54:2f:e9:bd:
         fd:e3:6a:31:49:fb:41:73:4d:a6:d9:e0:1f:e7:37:bf:c5:cc:
         51:6f:36:89
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RUIwMTExMC8GA1UEBRMoNDQ3RDU5ODNCRjBEQjkxMUFEOEZEQ0I2NzQxNDVGNkM1
OEY4M0NENTAeFw0yNjAzMDEwOTEyMzJaFw0yNjAzMDgwOTEyMzJaMBgxFjAUBgNV
BAMTDTY5YTQwMzAwLTIzZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClP2eE3KfXNAQJogmChxr3degAqKG9q8FuK3lV2q/q7Kaj0jg0/p9dq4XGR86d
a8ZJynNsZ6ooXeumaG0hR0LSHeSq7UnvO2d8fQLhdVfoqFyom7Q2yY0Pg1Y6wtzL
WOPIQ3F/cOlnafvNEorDhsL2IRsh6kRURozzEb1MaJnUNMmqg6w0I4lpDaRr+gk6
2lhEJpVszQm2cBZlobpFnIhtan/CzUlCs/dmRX7027SxsjjjoPUIQwagHNLdztJn
w508Z2JwtUX2FaJQtMDGQtD+yjfLCLqyHAVIraGncS7ckvjqVup7lCECTmFufXCd
LagtRL4UwdFzlIm6f8mPBR+5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3t4GKoan
nedgqhEI1Yl5TDd9+kIwHwYDVR0jBBgwFoAURH1Zg78NuRGtj9y2dBRfbFj4PNUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxLzMyRUUwQTZFOTlF
OTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJHdGo5eTJkQlJmYkZqNFBO
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUkgxWmc3OE51Ukd0ajl5MmRCUmZiRmo0UE5VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF
QjAxLzMyRUUwQTZFOTlFOTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJH
dGo5eTJkQlJmYkZqNFBOVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAqOlrz6etilVsXVO3GfHt+SHFFVlT5715tBgCPH6sjtd72IfWm8FkbJ1xmtNpU
RdksKxj0l9Ofm1/rhnb20YrP3W9vLmzPKHCs0I19Xr8Frv85ZCWxM9WDhJZD0iMv
6GVWRXUI1dWDB2MDTKT4zhED57uNv0RQnp2V8M8BDNYyHpe4fLnuGBMNs2MeB8gZ
VlWZsJX4MJwgUuke9dsHw3YpMWPXuTkjoE4yR8L2hMJF1Iswiln5jgr9BrYgaSca
FJmqHrQ0OnLhvkYh5fYNmWpKsoUld8bscKrILIrPUBt2U0W3WgBLyVQv6b3942ox
SftBc02m2eAf5ze/xcxRbzaJ
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:30 2026 by rpki-client