Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
File:                     x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json)
Hash identifier:          D4Ps3PrpUzf2VF7WG1fXvP9zinmQsgfX+U5BE3YBSys=
Subject key identifier:   89:FE:5D:93:B8:DA:24:E8:D4:4A:2D:12:E7:0B:0B:23:B1:1B:66:27
Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9
Certificate issuer:       /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
Certificate serial:       03F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
Manifest number:          03E7
Signing time:             Mon 02 Mar 2026 00:28:28 +0000
Manifest this update:     Mon 02 Mar 2026 00:28:27 +0000
Manifest next update:     Mon 09 Mar 2026 00:28:27 +0000
Files and hashes:         1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: Rox1X6oOzrOtXH9oSeUyp1HCJqPLRxAdta3fdaKyFGM=)
                          2: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: M18r22Dfi6nMP8Zm1Hu9fqPiSXgEwNJEQtY8GIZmgdA=)
                          3: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: FKnTP9sIRlwzNOVjIzWeUAaLIjQhiB2MOeVMrVthOl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl
                          rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9
        Validity
            Not Before: Mar  2 00:28:27 2026 GMT
            Not After : Mar  9 00:28:27 2026 GMT
        Subject: CN=69a4d9ac-dad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:70:67:16:6a:9c:b6:f7:69:47:f2:5f:97:
                    30:42:7d:d4:7e:44:d4:8d:b3:a3:62:45:83:56:02:
                    a0:70:b2:bb:63:9b:b3:91:8c:3a:b6:33:6c:59:3a:
                    11:1c:9b:81:ba:a8:69:6c:a9:9a:00:cc:08:a1:99:
                    d8:09:77:91:ea:48:f4:58:00:5c:b8:11:c6:23:a9:
                    a0:43:d6:79:8c:23:68:74:36:70:eb:6a:26:08:b4:
                    13:f0:ea:94:bf:9a:a2:19:7c:43:47:f5:b5:24:c4:
                    81:41:22:f2:10:1c:b1:64:52:c8:ef:ae:5c:7e:78:
                    e3:fa:75:b2:ee:62:d3:79:7e:9e:fa:46:bf:54:72:
                    a4:9c:cb:d9:f4:e7:0d:4c:2b:78:9a:05:ce:dd:81:
                    57:62:85:4e:47:ef:35:d9:c8:20:71:f3:e3:40:a8:
                    9c:2b:70:dc:d6:85:73:dd:42:c5:8f:b5:7f:7f:d9:
                    5f:c2:94:96:59:eb:29:f5:2d:09:f0:76:78:de:88:
                    c2:01:57:0b:04:fe:0b:5b:df:53:fc:aa:0c:2f:09:
                    94:0d:91:9d:1d:37:cf:4b:15:fd:c7:70:ff:24:ee:
                    e4:1a:32:9a:7d:8e:fe:c0:d0:ae:2d:43:53:55:84:
                    be:ed:96:f8:41:e4:60:1b:ed:71:2f:16:6d:a9:6f:
                    fa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FE:5D:93:B8:DA:24:E8:D4:4A:2D:12:E7:0B:0B:23:B1:1B:66:27
            X509v3 Authority Key Identifier:
                keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b9:83:72:64:a7:8e:11:a1:ee:ba:e7:94:90:29:41:6c:cd:
         a6:a1:0c:ea:21:5b:7d:93:07:71:9e:5b:36:37:85:c5:69:b3:
         06:42:33:31:29:50:1e:5e:77:b6:3a:c3:4a:5a:96:d2:f8:2b:
         39:1e:45:0c:c7:a7:87:9c:e8:f6:af:2f:58:61:55:98:07:6b:
         96:91:6c:7c:58:95:53:d3:ba:20:9e:03:d9:eb:c9:9a:0a:d3:
         a9:e0:b2:12:5b:e5:93:96:6e:59:ba:72:e5:66:3a:97:79:d3:
         1b:b5:e0:cf:84:57:df:70:23:bf:d3:f5:ef:55:c7:d3:dc:38:
         7a:6a:a1:c2:97:68:5a:74:27:08:8c:93:4a:2c:da:2e:bd:24:
         3e:84:a2:44:61:4f:1a:8b:ba:77:ad:79:8d:91:80:d3:7c:da:
         1d:32:f3:61:b8:6f:3d:e8:22:23:33:14:cf:dd:25:a3:a7:2a:
         32:f8:5d:e7:d5:50:d0:55:1e:d1:07:d8:d8:bb:5e:84:e0:ef:
         41:32:6c:30:88:a8:cc:70:03:87:b4:4e:ce:7f:51:69:4e:a2:
         aa:ac:56:5b:1a:e9:7e:e7:b8:85:ff:82:f7:99:cb:7b:70:e8:
         23:26:3c:d3:b0:b8:8c:b4:e6:c9:0c:cb:b8:14:e8:f8:0e:7d:
         c5:56:18:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxQjIxMTAvBgNVBAUTKEM3RTU3OTBCMDVFMEQ0RDIwOURCNDNEQzY4MEZCNzg4
Mjc5ODE0QTkwHhcNMjYwMzAyMDAyODI3WhcNMjYwMzA5MDAyODI3WjAYMRYwFAYD
VQQDEw02OWE0ZDlhYy1kYWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1dNwZxZqnLb3aUfyX5cwQn3UfkTUjbOjYkWDVgKgcLK7Y5uzkYw6tjNsWToR
HJuBuqhpbKmaAMwIoZnYCXeR6kj0WABcuBHGI6mgQ9Z5jCNodDZw62omCLQT8OqU
v5qiGXxDR/W1JMSBQSLyEByxZFLI765cfnjj+nWy7mLTeX6e+ka/VHKknMvZ9OcN
TCt4mgXO3YFXYoVOR+812cggcfPjQKicK3Dc1oVz3ULFj7V/f9lfwpSWWesp9S0J
8HZ43ojCAVcLBP4LW99T/KoMLwmUDZGdHTfPSxX9x3D/JO7kGjKafY7+wNCuLUNT
VYS+7Zb4QeRgG+1xLxZtqW/6KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIn+XZO4
2iTo1EotEucLCyOxG2YnMB8GA1UdIwQYMBaAFMfleQsF4NTSCdtD3GgPt4gnmBSp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFCMi82REU5RjQxMEI2
NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFOSUoyMFBjYUEtM2lDZVlG
S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gtVjVDd1hnMU5JSjIwUGNhQS0zaUNlWUZLay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDFCMi82REU5RjQxMEI2NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFO
SUoyMFBjYUEtM2lDZVlGS2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAurmDcmSnjhGh7rrnlJApQWzNpqEM6iFbfZMHcZ5bNjeFxWmzBkIzMSlQHl53
tjrDSlqW0vgrOR5FDMenh5zo9q8vWGFVmAdrlpFsfFiVU9O6IJ4D2evJmgrTqeCy
Elvlk5ZuWbpy5WY6l3nTG7Xgz4RX33Ajv9P171XH09w4emqhwpdoWnQnCIyTSiza
Lr0kPoSiRGFPGou6d615jZGA03zaHTLzYbhvPegiIzMUz90lo6cqMvhd59VQ0FUe
0QfY2LtehODvQTJsMIiozHADh7ROzn9RaU6iqqxWWxrpfue4hf+C95nLe3DoIyY8
07C4jLTmyQzLuBTo+A59xVYYpA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:56 2026 by rpki-client