Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
File:                     IAg9TfqETFcnVYxMdW2yDfgHzYE.mft (raw, json)
Hash identifier:          UEFg+EV73+DhF1wm9/LgcKAmxEOPAfC0MPk9qT2uLuQ=
Subject key identifier:   06:72:77:DD:EE:DB:B7:9F:03:3E:E1:58:07:FB:A8:7A:BC:4D:C6:25
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Certificate issuer:       /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial:       281B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
Manifest number:          27C4
Signing time:             Sat 28 Feb 2026 15:40:12 +0000
Manifest this update:     Sat 28 Feb 2026 15:40:11 +0000
Manifest next update:     Sat 07 Mar 2026 15:40:11 +0000
Files and hashes:         1: IAg9TfqETFcnVYxMdW2yDfgHzYE.crl (hash: n6jsa4ysXzzNACtrIR/Kys7UwkdMGotl20PRx0JbGg0=)
                          2: BBF567AEB0F011E5A08A224DC4F9AE02.roa (hash: VIL/mTdZ0kuX0JEsyoqIqJPIuXYY/XUEUp28uW96k0o=)
                          3: BD84664CB0F011E5A08A224DC4F9AE02.roa (hash: oG5ygd/penwWyXmZZkzYKDAIiWuJVz9Qy2pJuzyaYxo=)
                          4: AE887848662211E7BC7E2636C4F9AE02.roa (hash: 4dAtwCU1fi5Bo6SCfNalDzxKHkBj/DREl9uromRy6Rs=)
                          5: B9AC3CD4B0F011E5A08A224DC4F9AE02.roa (hash: H54eXqaAth/AANz7/DMFwtH0FIhN3UXJcrmsK7fhMXQ=)
                          6: 42724A42D87811E98F4DC832C4F9AE02.roa (hash: SILTusquGoHpNsMBJynofIsPOUuJK+mXoArSIu6+szM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10267 (0x281b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
        Validity
            Not Before: Feb 28 15:40:11 2026 GMT
            Not After : Mar  7 15:40:11 2026 GMT
        Subject: CN=69a30c5b-0dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:bf:2c:04:fe:7a:f6:1c:14:dc:ea:2a:1a:
                    ba:4b:9f:be:c5:ba:f6:a6:b8:dc:b0:ad:5d:29:74:
                    7e:a7:94:60:c2:76:de:66:b3:f4:8d:85:5a:4f:00:
                    62:07:45:2e:3a:02:4b:2d:0d:6d:06:35:f5:f8:ee:
                    56:92:37:f3:75:19:79:ef:e4:e9:75:11:e3:11:09:
                    19:09:f3:f7:d9:9e:90:ae:7e:5c:1d:83:ff:fe:08:
                    a5:e4:0d:98:99:9a:82:59:b2:c4:32:96:f2:6a:ee:
                    94:db:88:a7:44:ce:f6:dd:40:0f:60:63:43:21:8a:
                    e4:63:d6:29:96:00:3a:68:33:97:94:e2:0d:0a:62:
                    2e:45:03:63:59:e5:93:c4:e0:84:fc:ba:58:a2:e0:
                    90:19:d1:34:46:9c:40:36:c5:ab:8f:aa:a4:70:8f:
                    71:d7:0e:32:f6:5d:0b:49:ae:5e:96:4a:9b:41:cc:
                    4f:df:cf:b2:db:55:05:6a:f0:ea:5b:7b:1d:e8:5b:
                    21:48:c5:c3:3a:6d:20:4e:08:cf:c6:7e:ef:b8:96:
                    e9:1c:e0:9b:aa:1b:2d:12:03:30:37:a7:cc:76:fc:
                    27:a9:31:4e:40:49:4e:56:4c:79:dd:a2:3c:f6:cc:
                    e6:2b:a6:e6:80:4f:73:43:ef:6b:5c:17:fb:20:e9:
                    5c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:72:77:DD:EE:DB:B7:9F:03:3E:E1:58:07:FB:A8:7A:BC:4D:C6:25
            X509v3 Authority Key Identifier:
                keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:b4:53:7d:05:d1:ed:05:7a:d8:e3:d2:0f:bf:70:56:84:
         be:72:2c:71:a6:75:92:d0:3a:c3:5f:c0:ef:d9:cb:96:fb:37:
         30:4c:90:31:c5:b2:4f:a1:e6:57:e8:5d:31:ef:78:97:30:3a:
         2e:d6:18:06:2d:90:b9:2b:9d:65:55:ab:0f:21:fa:c7:14:a4:
         91:df:6f:b6:2f:d0:a0:7c:11:98:d4:22:d3:b7:dd:b2:aa:46:
         5b:2f:db:e3:d9:bb:6e:b9:05:3f:32:d8:62:48:3c:21:b6:c8:
         eb:1d:df:be:09:cc:24:ed:36:35:aa:3b:d3:d2:c9:16:a6:4f:
         b0:e3:5a:83:3b:74:fc:fd:a4:87:4d:0e:bb:69:8d:6b:72:bb:
         dc:70:ee:ab:05:cb:16:b8:0c:f1:b1:a8:81:62:bb:06:69:f4:
         a8:2b:46:60:85:f5:88:ca:41:c3:13:66:92:4a:e3:74:d9:f4:
         54:8d:9c:59:06:b1:d6:b4:cd:40:e9:5f:50:ec:8b:b9:eb:48:
         34:d5:3b:7b:46:0d:34:b0:b3:82:d6:bf:1d:f7:09:e0:8f:f8:
         1e:b2:4d:4c:01:3d:12:55:f3:71:d0:43:0a:21:0e:93:c1:7d:
         85:b9:ae:6f:f7:b3:f7:50:ff:9e:3e:a8:e9:e6:24:ce:0a:e9:
         3e:85:ed:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE
RjgwN0NEODEwHhcNMjYwMjI4MTU0MDExWhcNMjYwMzA3MTU0MDExWjAYMRYwFAYD
VQQDDA02OWEzMGM1Yi0wZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtNu/LAT+evYcFNzqKhq6S5++xbr2prjcsK1dKXR+p5RgwnbeZrP0jYVaTwBi
B0UuOgJLLQ1tBjX1+O5WkjfzdRl57+TpdRHjEQkZCfP32Z6Qrn5cHYP//gil5A2Y
mZqCWbLEMpbyau6U24inRM723UAPYGNDIYrkY9YplgA6aDOXlOINCmIuRQNjWeWT
xOCE/LpYouCQGdE0RpxANsWrj6qkcI9x1w4y9l0LSa5elkqbQcxP38+y21UFavDq
W3sd6FshSMXDOm0gTgjPxn7vuJbpHOCbqhstEgMwN6fMdvwnqTFOQElOVkx53aI8
9szmK6bmgE9zQ+9rXBf7IOlceQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZyd93u
27efAz7hWAf7qHq8TcYlMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3
Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6
WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUU2MC9GMTk5NjcxMkM3Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRG
Y25WWXhNZFcyeURmZ0h6WUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKmm0U30F0e0Fetjj0g+/cFaEvnIscaZ1ktA6w1/A79nLlvs3MEyQMcWyT6Hm
V+hdMe94lzA6LtYYBi2QuSudZVWrDyH6xxSkkd9vti/QoHwRmNQi07fdsqpGWy/b
49m7brkFPzLYYkg8IbbI6x3fvgnMJO02Nao709LJFqZPsONagzt0/P2kh00Ou2mN
a3K73HDuqwXLFrgM8bGogWK7Bmn0qCtGYIX1iMpBwxNmkkrjdNn0VI2cWQax1rTN
QOlfUOyLuetINNU7e0YNNLCzgta/HfcJ4I/4HrJNTAE9ElXzcdBDCiEOk8F9hbmu
b/ez91D/nj6o6eYkzgrpPoXtkw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:25 2026 by rpki-client