Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
File:                     UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft (raw, json)
Hash identifier:          y/qQDE3t3xj28pIxVH7/pj66bD9nbgrG2IJLwk2Ha/o=
Subject key identifier:   DB:E6:AA:19:91:2B:D8:4C:46:59:41:E5:76:E3:39:B0:D7:99:83:91
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Certificate issuer:       /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial:       0527
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
Manifest number:          04E8
Signing time:             Mon 02 Mar 2026 00:42:06 +0000
Manifest this update:     Mon 02 Mar 2026 00:42:04 +0000
Manifest next update:     Mon 09 Mar 2026 00:42:04 +0000
Files and hashes:         1: UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl (hash: GbOqaDvM+OCTDr+vGIOPdo21Mq0AZipCgcgM2ufRUSI=)
                          2: 71A1BB74759711EFA89BA96BC4F9AE02.roa (hash: W6yRkHf1Qxa/yaTHX2SnjkZf4KzTj4oR8ge60uOkiTg=)
                          3: DEBDCECAC2CF11EFA805380FC4F9AE02.roa (hash: /ycYefsrCAkt4UHFlzokHoXIxkbvkF32l5iChlZZJd0=)
                          4: 0294E1EADB0D11EE88489759C4F9AE02.roa (hash: 9DZA6kPOIrAY8e4rFQK1pMOYRt3f89rfc69PwA3YKl4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319 (0x527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
        Validity
            Not Before: Mar  2 00:42:04 2026 GMT
            Not After : Mar  9 00:42:04 2026 GMT
        Subject: CN=69a4dcde-c6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:f3:86:d9:38:f7:af:f8:0c:e2:78:37:5a:
                    b4:09:1d:3d:d9:20:66:ce:0c:22:a7:17:4b:d4:44:
                    1a:41:e5:5e:54:56:ea:5b:b2:71:e6:fa:b3:c5:51:
                    36:a1:bd:f8:17:0b:6d:62:63:e3:7f:e9:97:a3:28:
                    da:a7:3a:65:c3:eb:7c:c9:bc:23:fa:56:03:06:5d:
                    2b:b2:38:8a:52:ff:42:75:e1:1a:b1:2b:72:c0:b0:
                    1c:37:ea:29:f4:8e:60:49:ad:f4:3e:b2:0b:fc:09:
                    b5:8b:67:13:11:df:3f:af:03:89:cd:0e:b4:e6:c5:
                    bd:be:86:c2:22:67:0b:3b:e5:e6:c4:44:db:7b:7f:
                    de:22:c6:a4:85:a3:f3:7c:32:d5:2d:25:d6:c5:be:
                    7e:68:f6:9d:41:7b:f3:59:03:3d:5b:8f:da:5d:71:
                    e7:9b:a2:11:b0:9c:7f:6c:5d:08:fd:07:49:57:34:
                    03:2e:75:36:aa:af:7d:48:db:22:be:0e:88:db:b4:
                    80:d6:a5:9e:38:bd:70:2c:d2:f5:ef:05:2d:84:54:
                    00:80:19:46:a2:03:fb:06:70:c7:43:6f:d5:db:c1:
                    92:2f:ad:d8:7f:c5:66:0b:00:5f:c9:c8:31:fe:37:
                    6e:b3:19:b4:1e:3e:92:60:fe:ce:ce:55:49:b3:c3:
                    39:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E6:AA:19:91:2B:D8:4C:46:59:41:E5:76:E3:39:B0:D7:99:83:91
            X509v3 Authority Key Identifier:
                keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:15:e9:4c:16:f4:8e:ab:44:b3:03:bf:49:ae:5e:59:5b:a1:
         b3:68:19:d5:c6:a0:36:ca:cb:54:0c:e9:c2:78:88:4e:5f:bb:
         2c:f4:fc:b4:3f:1a:b0:07:e2:e8:0c:61:f1:71:8d:5f:59:d2:
         84:3d:61:04:0a:c3:8f:b3:7b:32:a9:20:0e:3d:e1:16:d7:53:
         60:e4:54:ce:79:62:cf:85:02:ba:1b:20:5a:82:47:2e:d2:41:
         be:50:53:13:1c:d9:90:4e:f8:24:3a:67:52:17:a0:12:65:7d:
         32:f2:73:c7:97:bf:f4:d4:c6:ae:67:b4:c5:f4:13:8e:ec:d8:
         a4:c1:2d:30:ae:1f:ee:77:46:51:5b:41:f6:35:20:2f:37:30:
         6a:be:c1:8a:81:5f:84:4c:42:ae:20:85:e1:e7:4a:3d:cb:82:
         32:bb:40:1a:8d:de:92:44:4b:db:3d:4c:1a:d8:3a:80:f4:f9:
         24:80:54:f6:76:1f:b4:74:5b:a3:4f:8e:4a:d0:86:d6:8a:8f:
         08:f1:fb:3d:28:31:dd:b4:9f:e9:25:af:8c:a2:c6:a7:b5:b4:
         f0:28:bd:c2:f7:d9:f4:11:1d:ea:0b:1a:ca:3e:30:ac:0a:f5:
         a2:9d:e3:98:6a:db:f2:6c:d2:4d:c4:bb:0b:5b:6f:4e:d9:dd:
         d1:86:43:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVFMDYxMTAvBgNVBAUTKDUwNzM5NTFFNUMxNTgyNjkzQTg3MDcyRUU1NDhDNjU0
ODVCMDVBMkMwHhcNMjYwMzAyMDA0MjA0WhcNMjYwMzA5MDA0MjA0WjAYMRYwFAYD
VQQDEw02OWE0ZGNkZS1jNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyK7zhtk496/4DOJ4N1q0CR092SBmzgwipxdL1EQaQeVeVFbqW7Jx5vqzxVE2
ob34FwttYmPjf+mXoyjapzplw+t8ybwj+lYDBl0rsjiKUv9CdeEasStywLAcN+op
9I5gSa30PrIL/Am1i2cTEd8/rwOJzQ605sW9vobCImcLO+XmxETbe3/eIsakhaPz
fDLVLSXWxb5+aPadQXvzWQM9W4/aXXHnm6IRsJx/bF0I/QdJVzQDLnU2qq99SNsi
vg6I27SA1qWeOL1wLNL17wUthFQAgBlGogP7BnDHQ2/V28GSL63Yf8VmCwBfycgx
/jdusxm0Hj6SYP7OzlVJs8M5XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNvmqhmR
K9hMRllB5XbjObDXmYORMB8GA1UdIwQYMBaAFFBzlR5cFYJpOocHLuVIxlSFsFos
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUwNi8wNTU5RUVBRTVD
QkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3VmdtazZod2N1NVVqR1ZJV3dX
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VIT1ZIbHdWZ21rNmh3Y3U1VWpHVklXd1dpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUUwNi8wNTU5RUVBRTVDQkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3Vmdt
azZod2N1NVVqR1ZJV3dXaXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhRXpTBb0jqtEswO/Sa5eWVuhs2gZ1cagNsrLVAzpwniITl+7LPT8tD8asAfi
6Axh8XGNX1nShD1hBArDj7N7MqkgDj3hFtdTYORUznliz4UCuhsgWoJHLtJBvlBT
ExzZkE74JDpnUhegEmV9MvJzx5e/9NTGrme0xfQTjuzYpMEtMK4f7ndGUVtB9jUg
Lzcwar7BioFfhExCriCF4edKPcuCMrtAGo3ekkRL2z1MGtg6gPT5JIBU9nYftHRb
o0+OStCG1oqPCPH7PSgx3bSf6SWvjKLGp7W08Ci9wvfZ9BEd6gsayj4wrAr1op3j
mGrb8mzSTcS7C1tvTtnd0YZDgA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:47:57 2026 by rpki-client