Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
File:                     dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json)
Hash identifier:          Gt0bJGMC/8ggbX7ijlMS3oU8YUX0Llert1O3rPIaO90=
Subject key identifier:   08:81:00:28:88:E3:6E:7F:A3:04:D4:A6:85:9A:2B:83:F6:E2:6B:D1
Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5
Certificate issuer:       /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
Certificate serial:       01FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
Manifest number:          01F5
Signing time:             Sun 01 Mar 2026 23:51:16 +0000
Manifest this update:     Sun 01 Mar 2026 23:51:14 +0000
Manifest next update:     Sun 08 Mar 2026 23:51:14 +0000
Files and hashes:         1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: nxOqOxe0CDEXnfRWjOYJ9yu/ogssPllG+pfQT7DM63Y=)
                          2: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: xb0+uYgRF2Qsu64pqIvTIsaUIoIoJYA9r/GFBorr/Cw=)
                          3: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: LOVQf/LdRjlXMFrzIgrgv8KlqIFzre3Qe7jhRSJb4JQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl
                          rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
        Validity
            Not Before: Mar  1 23:51:14 2026 GMT
            Not After : Mar  8 23:51:14 2026 GMT
        Subject: CN=69a4d0f4-090d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fd:20:a2:7a:8e:ca:7a:e4:71:60:59:7f:f0:
                    25:54:22:f3:fa:db:99:3c:f2:6f:05:ca:af:09:5e:
                    68:32:f2:35:e2:06:c4:bb:7e:16:72:1e:c2:e2:d9:
                    d0:db:71:01:33:e6:ec:fc:a0:bf:e1:e4:a5:38:60:
                    98:ec:a1:3d:43:73:6d:34:c7:59:d7:8e:26:35:33:
                    56:1b:ac:7d:49:0a:73:a3:04:7c:37:ca:26:ea:df:
                    71:57:a9:3a:f2:7f:43:01:89:96:82:97:b4:da:e2:
                    9d:cc:91:f8:ec:84:ec:ba:a1:79:fc:da:2d:05:08:
                    e6:cd:80:57:74:78:0d:a8:9f:44:72:06:9b:12:c4:
                    c0:fd:cb:67:ad:8a:cb:e6:0d:74:28:88:f3:56:87:
                    d6:08:7a:84:ed:3e:04:ed:06:bb:f4:f1:47:d2:68:
                    75:98:ae:5a:54:d2:54:6c:5d:e5:1d:92:36:73:17:
                    bc:f1:79:6f:28:93:74:cb:0f:b7:2b:88:9a:03:71:
                    f1:5a:23:ee:fa:1b:52:1f:4c:e4:13:05:22:08:0a:
                    86:04:df:50:c1:ce:2f:5a:53:7e:2c:65:7e:05:c4:
                    44:d9:ce:ed:4b:4b:70:13:15:e6:4d:b3:58:1d:75:
                    4e:75:e0:ac:cc:45:d3:e6:c5:2a:e1:83:52:7f:83:
                    06:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:81:00:28:88:E3:6E:7F:A3:04:D4:A6:85:9A:2B:83:F6:E2:6B:D1
            X509v3 Authority Key Identifier:
                keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3e:93:7c:af:96:27:61:75:a8:59:28:e0:ee:95:cd:c8:cd:
         a5:52:53:63:d4:c8:ab:05:ac:07:d8:49:05:85:be:bf:2c:a2:
         4a:75:1c:09:ba:2f:2a:de:a5:65:52:0e:3c:2e:f3:27:3d:83:
         50:da:1a:93:ec:ad:d8:b3:5d:43:29:75:ec:64:a1:f9:27:5e:
         b3:46:ba:4a:25:7b:a5:d4:7b:ae:8e:a3:7b:0a:bc:52:b2:4b:
         a4:08:5a:18:76:f0:de:a5:53:29:d7:5f:40:6e:f8:d8:10:97:
         7c:fc:0d:ad:02:c3:95:f4:7e:e0:37:92:46:c6:f1:a3:7b:93:
         b2:95:2c:71:a4:1f:5a:64:84:f0:c1:82:df:9b:69:12:19:bf:
         2b:69:cf:7b:61:53:3a:4b:0d:6b:42:8f:04:be:e8:ec:27:f6:
         77:e9:99:07:a2:b4:32:24:42:84:29:55:74:69:7a:9f:2d:87:
         8b:34:12:d8:34:8c:cb:86:f0:a4:34:41:f5:a7:f7:fd:25:69:
         8a:37:d3:f2:be:6e:96:8c:af:cc:26:ab:b9:b8:91:64:c1:23:
         12:8d:64:1a:e3:be:dd:b5:b2:8a:0d:c2:1d:59:c0:6b:54:99:
         84:a1:85:53:dc:98:cc:b2:fa:7c:dc:d7:6c:61:73:da:9c:4e:
         cb:6b:19:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk2NDExMTAvBgNVBAUTKDc3MUI3ODg3QzQ4OUJEOUIxN0IzQ0VEODMxNjRFRjQ0
REM1NjRFRjUwHhcNMjYwMzAxMjM1MTE0WhcNMjYwMzA4MjM1MTE0WjAYMRYwFAYD
VQQDEw02OWE0ZDBmNC0wOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt/0gonqOynrkcWBZf/AlVCLz+tuZPPJvBcqvCV5oMvI14gbEu34Wch7C4tnQ
23EBM+bs/KC/4eSlOGCY7KE9Q3NtNMdZ144mNTNWG6x9SQpzowR8N8om6t9xV6k6
8n9DAYmWgpe02uKdzJH47ITsuqF5/NotBQjmzYBXdHgNqJ9EcgabEsTA/ctnrYrL
5g10KIjzVofWCHqE7T4E7Qa79PFH0mh1mK5aVNJUbF3lHZI2cxe88XlvKJN0yw+3
K4iaA3HxWiPu+htSH0zkEwUiCAqGBN9Qwc4vWlN+LGV+BcRE2c7tS0twExXmTbNY
HXVOdeCszEXT5sUq4YNSf4MGYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAiBACiI
425/owTUpoWaK4P24mvRMB8GA1UdIwQYMBaAFHcbeIfEib2bF7PO2DFk70TcVk71
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTY0MS83RDAyODdFQTE3
NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZac1hzODdZTVdUdlJOeFdU
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R4dDRoOFNKdlpzWHM4N1lNV1R2Uk54V1R2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTY0MS83RDAyODdFQTE3NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZa
c1hzODdZTVdUdlJOeFdUdlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJD6TfK+WJ2F1qFko4O6VzcjNpVJTY9TIqwWsB9hJBYW+vyyiSnUcCbovKt6l
ZVIOPC7zJz2DUNoak+yt2LNdQyl17GSh+Sdes0a6SiV7pdR7ro6jewq8UrJLpAha
GHbw3qVTKddfQG742BCXfPwNrQLDlfR+4DeSRsbxo3uTspUscaQfWmSE8MGC35tp
Ehm/K2nPe2FTOksNa0KPBL7o7Cf2d+mZB6K0MiRChClVdGl6ny2HizQS2DSMy4bw
pDRB9af3/SVpijfT8r5uloyvzCarubiRZMEjEo1kGuO+3bWyig3CHVnAa1SZhKGF
U9yYzLL6fNzXbGFz2pxOy2sZYQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:28 2026 by rpki-client