Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
File:                     Od1jNTmfErgZIRzpGqfc9i9tgbw.mft (raw, json)
Hash identifier:          JOqsLSXVzPRoP4be8rV0UM5GkdQMnNGejcmWAexDsaA=
Subject key identifier:   22:DC:39:7C:F0:05:C6:C6:52:A0:5D:6D:58:FC:FE:AE:70:88:9C:92
Authority key identifier: 39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC
Certificate issuer:       /CN=A91EBB2D/serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
Certificate serial:       03F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
Manifest number:          03E9
Signing time:             Sun 01 Mar 2026 23:46:07 +0000
Manifest this update:     Sun 01 Mar 2026 23:46:06 +0000
Manifest next update:     Sun 08 Mar 2026 23:46:06 +0000
Files and hashes:         1: Od1jNTmfErgZIRzpGqfc9i9tgbw.crl (hash: UVmHeXpe6aTRcR1KDGLX4zLShJrAIVSkjGbvcnpjFD8=)
                          2: 9233AB983ED411F0B38CCD78C4F9AE02.roa (hash: TmJRJHlikih7mVaiGT9Ey8UviADYMdHN3E98cghtS8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl
                          rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBB2D, serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC
        Validity
            Not Before: Mar  1 23:46:06 2026 GMT
            Not After : Mar  8 23:46:06 2026 GMT
        Subject: CN=69a4cfbf-f6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:9c:78:81:31:ae:9c:2d:b2:cf:2d:49:6b:
                    98:aa:5e:d1:f0:7a:7c:a9:06:8f:44:43:09:fd:f7:
                    bc:10:a1:08:dc:8e:95:b9:8d:8c:1c:cb:2b:ba:d6:
                    dd:b1:5b:f5:2e:08:02:d1:2f:14:5e:dc:1a:fc:e3:
                    f7:b4:ca:51:36:a3:89:91:a6:f0:39:0e:cc:f3:77:
                    27:da:b6:42:88:77:ac:df:46:68:af:a5:3e:01:1e:
                    90:3a:25:b5:57:42:66:9f:86:d4:e4:7c:31:6b:4f:
                    85:c6:5b:66:8c:34:28:43:a1:0d:64:32:75:0e:65:
                    52:39:ad:67:1c:8b:0b:0e:69:5c:76:59:42:c2:1e:
                    c6:1d:fb:9e:ef:f8:89:63:7d:6c:53:cf:43:30:af:
                    47:33:72:4b:9a:ae:4a:f8:46:aa:ac:ae:0e:c1:97:
                    4a:3c:ac:b9:06:7c:49:be:0a:eb:2e:0a:8c:bf:01:
                    da:98:4c:f1:ec:18:ca:76:9f:2b:17:4e:87:8b:98:
                    c9:b3:2c:69:ab:a2:17:13:ab:08:80:e7:d9:a7:71:
                    91:91:59:56:76:d1:db:63:f9:2b:2a:9d:2e:3c:18:
                    28:8e:6c:b5:92:91:2e:61:6f:31:97:32:d2:2b:8c:
                    2a:47:12:da:4c:b9:a1:49:c8:3c:cb:0c:c9:8d:c7:
                    01:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DC:39:7C:F0:05:C6:C6:52:A0:5D:6D:58:FC:FE:AE:70:88:9C:92
            X509v3 Authority Key Identifier:
                keyid:39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:11:be:89:a6:80:6d:83:ac:3f:83:ab:f0:a9:1f:67:8e:2e:
         97:e2:e1:b4:05:35:01:5a:6a:80:67:c0:49:43:9e:84:5f:1a:
         86:fb:14:cd:92:06:12:ca:43:12:98:ed:91:4e:4c:c9:04:25:
         ca:45:a9:08:6f:d5:5a:f2:86:0a:ee:4b:67:06:c9:a8:ce:a7:
         8e:78:37:28:d2:1d:70:ea:9c:ba:0b:e8:70:a1:a5:57:23:8b:
         f4:84:25:86:67:23:13:8f:c2:1a:ff:c9:df:84:96:b4:35:e0:
         79:20:54:5a:84:98:a8:61:19:9f:6b:80:85:85:91:1a:34:fe:
         41:b1:16:71:a2:78:23:e2:33:74:ef:74:2a:32:00:01:ef:d2:
         ef:ae:f6:e5:79:1f:74:bb:38:3c:1d:c3:bd:52:fd:65:28:1c:
         60:87:e3:4d:1d:2a:f8:4c:d4:2f:a7:52:e3:52:cf:35:55:89:
         7c:6c:82:55:1d:2c:25:70:51:9c:2f:8b:a4:34:4c:70:2b:df:
         96:94:5f:a4:5b:20:47:2d:c8:ad:cb:95:60:2f:c3:3c:0a:2b:
         0a:de:df:eb:4b:d7:ca:4c:7f:3e:43:84:0b:c0:5f:07:ba:cb:
         12:97:1f:81:d3:b6:37:8b:73:b1:1b:75:c5:ab:73:40:44:13:
         ce:a2:b1:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJCMkQxMTAvBgNVBAUTKDM5REQ2MzM1Mzk5RjEyQjgxOTIxMUNFOTFBQTdEQ0Y2
MkY2RDgxQkMwHhcNMjYwMzAxMjM0NjA2WhcNMjYwMzA4MjM0NjA2WjAYMRYwFAYD
VQQDEw02OWE0Y2ZiZi1mNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxP6ceIExrpwtss8tSWuYql7R8Hp8qQaPREMJ/fe8EKEI3I6VuY2MHMsrutbd
sVv1LggC0S8UXtwa/OP3tMpRNqOJkabwOQ7M83cn2rZCiHes30Zor6U+AR6QOiW1
V0Jmn4bU5Hwxa0+FxltmjDQoQ6ENZDJ1DmVSOa1nHIsLDmlcdllCwh7GHfue7/iJ
Y31sU89DMK9HM3JLmq5K+EaqrK4OwZdKPKy5BnxJvgrrLgqMvwHamEzx7BjKdp8r
F06Hi5jJsyxpq6IXE6sIgOfZp3GRkVlWdtHbY/krKp0uPBgojmy1kpEuYW8xlzLS
K4wqRxLaTLmhScg8ywzJjccB5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLcOXzw
BcbGUqBdbVj8/q5wiJySMB8GA1UdIwQYMBaAFDndYzU5nxK4GSEc6Rqn3PYvbYG8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkIyRC85NjVCRDU3RUI4
OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVyZ1pJUnpwR3FmYzlpOXRn
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09kMWpOVG1mRXJnWklSenBHcWZjOWk5dGdidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkIyRC85NjVCRDU3RUI4OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVy
Z1pJUnpwR3FmYzlpOXRnYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVxG+iaaAbYOsP4Or8KkfZ44ul+LhtAU1AVpqgGfASUOehF8ahvsUzZIGEspD
EpjtkU5MyQQlykWpCG/VWvKGCu5LZwbJqM6njng3KNIdcOqcugvocKGlVyOL9IQl
hmcjE4/CGv/J34SWtDXgeSBUWoSYqGEZn2uAhYWRGjT+QbEWcaJ4I+IzdO90KjIA
Ae/S76725XkfdLs4PB3DvVL9ZSgcYIfjTR0q+EzUL6dS41LPNVWJfGyCVR0sJXBR
nC+LpDRMcCvflpRfpFsgRy3IrcuVYC/DPAorCt7f60vXykx/PkOEC8BfB7rLEpcf
gdO2N4tzsRt1xatzQEQTzqKxQQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:05 2026 by rpki-client