Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
File:                     J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json)
Hash identifier:          uXd8OsS2QW4kPWMu+C7DrSl0GQ18rwOCpe7Kf2qPymc=
Subject key identifier:   4B:FD:58:4B:93:12:CB:C0:95:67:20:B3:54:92:27:44:FB:F3:47:0B
Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5
Certificate issuer:       /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
Manifest number:          0253
Signing time:             Sun 01 Mar 2026 23:59:19 +0000
Manifest this update:     Sun 01 Mar 2026 23:59:17 +0000
Manifest next update:     Sun 08 Mar 2026 23:59:17 +0000
Files and hashes:         1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: zHlt283eQDz/T85vSKg0aHzGOOuYiZFePGrHd5OhSI0=)
                          2: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: ll1SbuQqvTvXz+W/3qaivS8wQz00+kN4RdwzaNK6/rU=)
                          3: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: hJnEJ9xJtcK65uU+a2lYLQG493yZ6VM20lGCXAUnZKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl
                          rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5
        Validity
            Not Before: Mar  1 23:59:17 2026 GMT
            Not After : Mar  8 23:59:17 2026 GMT
        Subject: CN=69a4d2d6-bcf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:64:c3:aa:0f:42:2a:af:e3:27:ad:5f:64:
                    0e:f7:ac:25:6b:61:b6:e2:d2:eb:af:52:71:1d:e1:
                    2d:bf:a6:68:99:8f:e0:64:b4:b6:3b:e8:26:a6:9f:
                    e1:7e:0c:2f:d6:78:a4:5b:f5:cc:63:c7:3e:5d:70:
                    b0:27:5f:c4:4c:dc:8e:64:71:cb:57:65:08:0f:a1:
                    5d:ea:53:22:0d:f6:f0:7f:42:36:a6:4b:d3:cb:e2:
                    0f:e7:68:18:8b:9a:0d:22:c7:87:f2:14:66:df:1c:
                    2a:e0:34:3c:a7:2a:0e:db:b9:8f:a9:0e:12:fd:df:
                    63:26:5b:99:02:08:df:86:6e:80:57:ed:ab:b7:8e:
                    ef:fa:c6:04:0b:cf:55:d3:cc:5d:de:3b:d8:c6:7a:
                    91:0e:22:1d:21:1d:2b:6a:7d:33:63:40:56:2f:e8:
                    10:b6:43:46:ee:84:0a:83:4e:4f:11:9d:d3:de:a5:
                    1e:ab:ed:52:06:a7:e0:dc:5f:f9:76:d6:c1:68:32:
                    0c:33:22:d3:02:97:4d:c0:dc:3c:30:17:16:8c:0e:
                    6c:77:a7:3c:a4:be:8e:8d:36:24:d8:c7:c7:15:fb:
                    4e:f8:7a:2c:27:4a:16:1c:29:67:80:d6:32:f4:f0:
                    75:5d:e5:95:c5:2b:cb:87:3d:c4:21:a3:d8:67:60:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FD:58:4B:93:12:CB:C0:95:67:20:B3:54:92:27:44:FB:F3:47:0B
            X509v3 Authority Key Identifier:
                keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:24:bf:ae:7b:1f:c8:d8:ed:83:e6:ad:aa:f3:2a:2b:1a:8d:
         3c:13:a1:af:a7:d3:f5:d8:c9:18:22:20:fb:26:a4:60:17:34:
         5d:bf:ac:0f:3a:2a:04:5d:84:0a:5f:e5:15:50:e3:49:c9:5d:
         20:ec:b8:fb:f7:aa:93:c4:6f:7d:6d:54:1d:da:3a:32:1f:26:
         fc:bc:7c:57:d1:54:59:4b:da:2d:0c:0f:fa:97:9c:fd:82:8a:
         09:2b:f5:19:79:2d:7e:92:9d:f3:42:9d:f0:18:33:55:de:7c:
         53:4c:59:31:8e:85:62:ec:38:e7:8c:27:e4:dc:eb:84:37:17:
         34:24:40:11:7a:36:8c:07:9a:f1:a3:51:c8:dc:ba:c2:ad:02:
         e2:2c:80:e0:89:3e:33:88:62:17:23:69:c3:a4:ab:39:74:40:
         d7:04:58:df:26:10:6d:57:8b:30:8c:07:29:61:7f:1f:1d:e5:
         51:e6:e6:d0:0c:6a:d0:31:7b:5d:9b:54:c9:05:7b:e3:e0:c6:
         6b:68:fb:3f:c5:1a:c7:90:bb:8e:75:1d:8a:ab:53:02:87:10:
         17:04:ad:dd:d7:d2:ff:92:14:06:23:77:08:8d:d2:06:c4:a2:
         d9:b2:bf:bc:73:95:d3:44:1a:32:37:5f:9c:d1:70:92:dd:9c:
         d0:8c:b0:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz
QjlCNDk3RTUwHhcNMjYwMzAxMjM1OTE3WhcNMjYwMzA4MjM1OTE3WjAYMRYwFAYD
VQQDEw02OWE0ZDJkNi1iY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ARkw6oPQiqv4yetX2QO96wla2G24tLrr1JxHeEtv6ZomY/gZLS2O+gmpp/h
fgwv1nikW/XMY8c+XXCwJ1/ETNyOZHHLV2UID6Fd6lMiDfbwf0I2pkvTy+IP52gY
i5oNIseH8hRm3xwq4DQ8pyoO27mPqQ4S/d9jJluZAgjfhm6AV+2rt47v+sYEC89V
08xd3jvYxnqRDiIdIR0ran0zY0BWL+gQtkNG7oQKg05PEZ3T3qUeq+1SBqfg3F/5
dtbBaDIMMyLTApdNwNw8MBcWjA5sd6c8pL6OjTYk2MfHFftO+HosJ0oWHClngNYy
9PB1XeWVxSvLhz3EIaPYZ2BZJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEv9WEuT
EsvAlWcgs1SSJ0T780cLMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw
QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDY5Ni9ENkExMUM0QTkwQkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQ
YndQc0hnWWYzVXc3bTBsLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADiS/rnsfyNjtg+atqvMqKxqNPBOhr6fT9djJGCIg+yakYBc0Xb+sDzoqBF2E
Cl/lFVDjScldIOy4+/eqk8RvfW1UHdo6Mh8m/Lx8V9FUWUvaLQwP+pec/YKKCSv1
GXktfpKd80Kd8BgzVd58U0xZMY6FYuw454wn5NzrhDcXNCRAEXo2jAea8aNRyNy6
wq0C4iyA4Ik+M4hiFyNpw6SrOXRA1wRY3yYQbVeLMIwHKWF/Hx3lUebm0Axq0DF7
XZtUyQV74+DGa2j7P8Uax5C7jnUdiqtTAocQFwSt3dfS/5IUBiN3CI3SBsSi2bK/
vHOV00QaMjdfnNFwkt2c0IywJw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:51 2026 by rpki-client