Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File:                     PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier:          2/pyadzqyliMWCUjCCvUDM0N+N2dprFolulQ5us1wq0=
Subject key identifier:   9A:5F:CA:47:5B:BD:02:94:32:2F:32:E0:93:38:15:78:D6:DD:E4:75
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer:       /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial:       04D1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number:          04C9
Signing time:             Sun 01 Mar 2026 22:56:18 +0000
Manifest this update:     Sun 01 Mar 2026 22:56:18 +0000
Manifest next update:     Sun 08 Mar 2026 22:56:18 +0000
Files and hashes:         1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: vN7AxbK+JoPdPro5GOb1tR+v+SHv1Rz+t/adaB0iDL4=)
                          2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: MZAkwEcI/RhPtb0HLVaP6vZemaPmWHrryFBvzadhdrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
                          rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233 (0x4d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
        Validity
            Not Before: Mar  1 22:56:18 2026 GMT
            Not After : Mar  8 22:56:18 2026 GMT
        Subject: CN=69a4c412-9477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:9c:df:ad:b7:96:fc:7f:bf:d8:42:d6:63:
                    3c:fc:d4:96:f9:c8:9d:92:a8:9f:62:a0:e3:7c:c0:
                    d1:96:77:83:eb:2e:59:58:e1:6b:32:bf:4f:20:f4:
                    96:e7:91:56:0d:da:3e:2e:61:30:ae:4e:a1:35:a3:
                    7e:d5:b0:70:af:d0:80:f9:05:a6:3b:23:77:b0:f5:
                    a1:b5:8e:d8:17:d4:42:41:28:59:31:ba:66:9c:4c:
                    6e:8d:49:a1:f5:04:d2:48:63:83:2e:f7:fa:47:03:
                    37:60:e6:cb:82:52:8f:70:9d:a1:cb:e9:c0:92:bb:
                    37:ac:40:41:f3:b1:ba:d4:80:5f:6d:d7:9e:34:99:
                    c0:64:67:a1:f0:85:ad:39:da:c7:30:08:1c:67:87:
                    bf:df:a9:ec:ac:84:33:eb:66:b0:2f:b9:8d:dc:ef:
                    12:43:f9:e9:e6:2e:5f:aa:14:d1:23:9b:bb:d4:ea:
                    63:a6:cc:82:e2:43:03:19:b0:9b:e9:df:98:94:4e:
                    6d:36:97:32:e4:b8:b0:d7:a0:45:32:aa:1c:6e:13:
                    ca:10:cf:b6:1d:da:4c:2d:36:6a:ac:51:7f:ee:24:
                    de:44:19:19:d0:dd:9a:d0:00:16:44:ae:53:95:cb:
                    94:dd:a3:eb:4c:ee:11:05:44:51:e6:b8:81:71:79:
                    38:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5F:CA:47:5B:BD:02:94:32:2F:32:E0:93:38:15:78:D6:DD:E4:75
            X509v3 Authority Key Identifier:
                keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4d:eb:58:5c:6b:94:94:ee:38:c4:e2:33:2b:5c:a2:4c:d0:
         a7:f5:8d:71:7a:08:ce:81:38:32:91:b8:1c:0f:65:cf:74:d9:
         88:9f:01:80:bc:4a:22:29:7e:db:5f:c3:2f:43:a5:29:c4:c0:
         0b:55:27:26:ff:fa:76:c8:91:42:42:91:20:5b:83:48:2b:3c:
         79:80:3b:05:b1:83:f8:fb:be:0b:34:52:75:49:29:d9:75:29:
         5d:a2:02:f6:03:3c:c6:38:c6:dc:a1:3b:8e:e1:e3:df:93:93:
         e7:55:72:1a:cb:92:fd:12:1d:96:ed:42:69:76:27:b0:43:94:
         1d:06:3a:73:45:c7:83:83:5d:97:7b:8b:17:02:a6:99:f4:cd:
         9b:c2:4d:16:ce:46:f9:77:5e:94:3b:a4:29:c3:43:4c:ab:f9:
         82:4e:57:1e:4b:a0:af:ed:19:3f:92:4a:cf:76:7c:23:21:ff:
         2d:9b:35:07:30:96:74:af:81:7e:24:0f:ef:76:0b:f8:79:bf:
         d1:03:83:d0:39:ae:70:2a:c5:53:6f:e9:4b:4a:74:15:f0:2f:
         4c:33:89:49:09:18:e4:5f:c9:fc:0c:47:c4:95:1e:a6:8d:0e:
         8f:4f:b7:83:af:1c:0e:00:9a:62:24:58:c1:4b:bd:c3:45:51:
         50:24:a8:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBFRjIxMTAvBgNVBAUTKDNENUQ4NjQ3QUJBOUJCNDA2MjVDM0M2NDNDRDgzNjdG
MTUwNzgwMUEwHhcNMjYwMzAxMjI1NjE4WhcNMjYwMzA4MjI1NjE4WjAYMRYwFAYD
VQQDEw02OWE0YzQxMi05NDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxcGc3623lvx/v9hC1mM8/NSW+cidkqifYqDjfMDRlneD6y5ZWOFrMr9PIPSW
55FWDdo+LmEwrk6hNaN+1bBwr9CA+QWmOyN3sPWhtY7YF9RCQShZMbpmnExujUmh
9QTSSGODLvf6RwM3YObLglKPcJ2hy+nAkrs3rEBB87G61IBfbdeeNJnAZGeh8IWt
OdrHMAgcZ4e/36nsrIQz62awL7mN3O8SQ/np5i5fqhTRI5u71OpjpsyC4kMDGbCb
6d+YlE5tNpcy5Liw16BFMqocbhPKEM+2HdpMLTZqrFF/7iTeRBkZ0N2a0AAWRK5T
lcuU3aPrTO4RBURR5riBcXk4kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJpfykdb
vQKUMi8y4JM4FXjW3eR1MB8GA1UdIwQYMBaAFD1dhkerqbtAYlw8ZDzYNn8VB4Aa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGMi9BQjZCMjdGNjVF
RTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUwQmlYRHhrUE5nMmZ4VUhn
Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BWMkdSNnVwdTBCaVhEeGtQTmcyZnhVSGdCby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEVGMi9BQjZCMjdGNjVFRTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUw
QmlYRHhrUE5nMmZ4VUhnQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmk3rWFxrlJTuOMTiMytcokzQp/WNcXoIzoE4MpG4HA9lz3TZiJ8BgLxKIil+
21/DL0OlKcTAC1UnJv/6dsiRQkKRIFuDSCs8eYA7BbGD+Pu+CzRSdUkp2XUpXaIC
9gM8xjjG3KE7juHj35OT51VyGsuS/RIdlu1CaXYnsEOUHQY6c0XHg4Ndl3uLFwKm
mfTNm8JNFs5G+XdelDukKcNDTKv5gk5XHkugr+0ZP5JKz3Z8IyH/LZs1BzCWdK+B
fiQP73YL+Hm/0QOD0DmucCrFU2/pS0p0FfAvTDOJSQkY5F/J/AxHxJUepo0Oj0+3
g68cDgCaYiRYwUu9w0VRUCSo1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:25 2026 by rpki-client