Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
File:                     iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json)
Hash identifier:          hC16tKp82UHu4XQlOWURZVM/btWRe1iWYh2Gp5wfcIA=
Subject key identifier:   06:B5:4B:DB:0F:07:4D:4A:2F:41:34:28:EA:58:CF:F3:7A:95:49:32
Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46
Certificate issuer:       /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
Manifest number:          0256
Signing time:             Mon 02 Mar 2026 01:20:47 +0000
Manifest this update:     Mon 02 Mar 2026 01:20:46 +0000
Manifest next update:     Mon 09 Mar 2026 01:20:46 +0000
Files and hashes:         1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: /Fj2MybKnQr2Pz22UDzDDyZGygMchlvbBMpjlEVEwlo=)
                          2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: GPaqYcUqr0zbxlmQ0X0FP4TsXC+N0CSQMz7aMm/NDOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
        Validity
            Not Before: Mar  2 01:20:46 2026 GMT
            Not After : Mar  9 01:20:46 2026 GMT
        Subject: CN=69a4e5ef-1587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:ed:65:ab:e0:52:7d:f0:13:15:fe:6a:f7:
                    30:79:14:41:a4:ac:6b:12:7d:b3:ba:6b:09:a2:0a:
                    35:8c:6b:ef:08:1a:38:d8:d0:45:06:a7:57:18:8f:
                    b4:6b:c8:b4:c8:c9:57:57:e6:66:f6:3f:48:05:f7:
                    88:b7:d4:72:c1:4d:9a:8b:cd:42:c8:c0:f7:6f:79:
                    4a:ed:8a:7f:bd:2b:69:eb:bf:a2:e4:5e:4c:ac:46:
                    b6:3c:18:a0:18:9e:13:21:9a:e1:87:2f:98:e6:81:
                    86:9f:4d:ae:d6:52:5a:e1:14:09:b3:dc:82:cc:2f:
                    82:6c:a1:f3:df:70:12:2f:2f:40:12:82:7e:90:e7:
                    6e:bb:1f:b8:12:79:e4:38:96:99:98:b9:25:6d:8f:
                    3d:94:13:20:31:fb:83:4a:bb:e3:58:28:94:a2:ad:
                    d5:73:f9:f8:14:39:c7:7d:6b:31:8b:8b:94:84:fc:
                    cd:7b:6a:f5:86:d0:c1:9d:72:41:77:8d:7f:4a:c2:
                    e9:2b:47:f9:86:6c:3b:bf:e7:ee:19:d9:3f:2d:5d:
                    8f:5d:26:34:99:b9:49:30:84:31:f4:d3:ce:27:ac:
                    52:87:59:d5:ab:48:a9:76:6c:98:d6:d5:c1:a5:23:
                    a3:44:d5:de:e6:0c:e6:14:d4:4e:43:8f:7c:dd:e4:
                    80:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B5:4B:DB:0F:07:4D:4A:2F:41:34:28:EA:58:CF:F3:7A:95:49:32
            X509v3 Authority Key Identifier:
                keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c6:e0:d9:1c:a3:4c:75:f9:30:64:ee:36:b1:2e:64:c4:31:
         d8:10:ab:20:7c:18:64:c0:07:ed:62:03:bd:58:d5:4b:d0:b8:
         14:ec:3f:89:ff:dd:bf:3f:91:1f:a1:f5:5a:42:f0:a5:7c:42:
         ab:5b:d1:96:49:99:07:13:39:37:a2:05:a8:c1:26:5f:23:c8:
         79:28:b3:9b:e3:46:ac:5b:ab:f9:cf:fa:95:92:34:2b:50:42:
         c0:52:79:10:8d:d2:6e:1f:0f:16:e6:4c:63:a3:c8:d7:8d:49:
         9c:36:65:aa:67:f7:1c:41:69:30:dc:7e:11:c5:c6:1c:e5:b1:
         a8:62:9c:63:5c:a0:33:1b:54:9d:4f:6a:19:83:5c:32:6b:86:
         95:f4:43:99:78:93:db:54:7c:fb:c2:28:b4:f3:eb:a4:0b:4a:
         ca:9f:30:f9:bc:8e:7e:71:b4:fd:bd:ba:d6:c2:35:47:83:cc:
         98:67:9f:1c:8b:32:f6:61:10:e2:42:d3:68:45:dc:4c:f3:dc:
         81:74:29:a6:98:74:75:23:5c:38:7f:3f:05:41:21:3d:c4:8b:
         6b:e3:5e:2b:59:3d:de:e2:6e:da:72:97:ef:97:2d:62:cf:c7:
         62:41:56:5a:2e:0e:92:7a:ba:c4:fe:ab:40:ae:4a:e9:b8:a7:
         bb:67:ab:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZDMkQxMTAvBgNVBAUTKDhCM0YyM0VCNUZFMjhGNTgwNUUzRDI3Qjk1MzdCQkFG
QTdDREY5NDYwHhcNMjYwMzAyMDEyMDQ2WhcNMjYwMzA5MDEyMDQ2WjAYMRYwFAYD
VQQDEw02OWE0ZTVlZi0xNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtlXtZavgUn3wExX+avcweRRBpKxrEn2zumsJogo1jGvvCBo42NBFBqdXGI+0
a8i0yMlXV+Zm9j9IBfeIt9RywU2ai81CyMD3b3lK7Yp/vStp67+i5F5MrEa2PBig
GJ4TIZrhhy+Y5oGGn02u1lJa4RQJs9yCzC+CbKHz33ASLy9AEoJ+kOduux+4Ennk
OJaZmLklbY89lBMgMfuDSrvjWCiUoq3Vc/n4FDnHfWsxi4uUhPzNe2r1htDBnXJB
d41/SsLpK0f5hmw7v+fuGdk/LV2PXSY0mblJMIQx9NPOJ6xSh1nVq0ipdmyY1tXB
pSOjRNXe5gzmFNROQ4983eSAOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAa1S9sP
B01KL0E0KOpYz/N6lUkyMB8GA1UdIwQYMBaAFIs/I+tf4o9YBePSe5U3u6+nzflG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkMyRC9DMzcyMTMyQzhB
MDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWoxZ0Y0OUo3bFRlN3I2Zk4t
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2l6OGo2MV9pajFnRjQ5SjdsVGU3cjZmTi1VWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkMyRC9DMzcyMTMyQzhBMDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWox
Z0Y0OUo3bFRlN3I2Zk4tVVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWsbg2RyjTHX5MGTuNrEuZMQx2BCrIHwYZMAH7WIDvVjVS9C4FOw/if/dvz+R
H6H1WkLwpXxCq1vRlkmZBxM5N6IFqMEmXyPIeSizm+NGrFur+c/6lZI0K1BCwFJ5
EI3Sbh8PFuZMY6PI141JnDZlqmf3HEFpMNx+EcXGHOWxqGKcY1ygMxtUnU9qGYNc
MmuGlfRDmXiT21R8+8IotPPrpAtKyp8w+byOfnG0/b261sI1R4PMmGefHIsy9mEQ
4kLTaEXcTPPcgXQppph0dSNcOH8/BUEhPcSLa+NeK1k93uJu2nKX75ctYs/HYkFW
Wi4Oknq6xP6rQK5K6binu2er/Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:33 2026 by rpki-client