Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
File:                     G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json)
Hash identifier:          w5LMXQKBvWFwYgcLkajej6/TPXKj977Gw3PAq8N5j+g=
Subject key identifier:   21:F4:96:45:53:D0:16:10:11:D9:76:E0:86:C1:46:8F:0C:E4:D3:15
Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56
Certificate issuer:       /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
Certificate serial:       09D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
Manifest number:          09C8
Signing time:             Mon 02 Mar 2026 01:50:41 +0000
Manifest this update:     Mon 02 Mar 2026 01:50:39 +0000
Manifest next update:     Mon 09 Mar 2026 01:50:39 +0000
Files and hashes:         1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: qmRxGcQhq+TJqmaQ0mvme3rODscDGjO8naDRobftuHA=)
                          2: A37D1F4AF51A11F08A3A39E6586F56BC.roa (hash: jR0WlKY8LzR2LUBl37yUqlZt1qZx888jsAWYo1rjx1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl
                          rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2514 (0x9d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
        Validity
            Not Before: Mar  2 01:50:39 2026 GMT
            Not After : Mar  9 01:50:39 2026 GMT
        Subject: CN=69a4ecf0-aad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:6e:a6:b1:9c:a6:27:a8:bf:6b:e1:11:a9:
                    ec:01:8e:c6:bf:92:a9:d5:2a:1c:5d:01:04:55:0e:
                    eb:af:e0:98:d0:d9:3f:0e:21:1b:67:1b:43:ac:99:
                    7a:08:e6:bd:da:a0:c8:31:05:86:e3:bd:e5:6d:fb:
                    de:b1:eb:7f:cb:f6:b2:47:b6:ed:8b:5d:b1:67:72:
                    96:73:55:a0:ad:71:1d:9a:62:d3:e2:e2:f5:ab:16:
                    29:6d:a4:b1:a0:f2:51:8e:e3:aa:a0:67:c6:46:40:
                    d3:2e:43:6d:13:4b:5e:ef:7a:0d:50:db:b6:1f:28:
                    ab:fd:00:3b:17:f3:cc:00:35:01:7b:a8:e0:31:ca:
                    0d:4c:b3:89:59:c7:cb:ac:6a:65:27:80:24:b6:31:
                    b2:ea:cc:77:d5:26:0d:dc:78:32:a8:9c:45:c8:cb:
                    2d:cf:c7:2c:45:ae:df:9b:c4:01:8f:aa:a0:93:aa:
                    9c:dd:dc:6c:93:2e:d2:12:10:4a:8c:86:50:65:77:
                    de:f5:27:8d:60:9c:ba:78:8b:05:fa:d9:13:04:be:
                    94:ad:f2:4b:f2:86:b6:40:7f:82:66:31:5c:45:e7:
                    7f:60:e2:ad:43:cf:84:1b:7e:4e:67:32:29:d0:0d:
                    6b:fa:41:37:0a:50:03:a7:87:b7:18:65:61:58:c4:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F4:96:45:53:D0:16:10:11:D9:76:E0:86:C1:46:8F:0C:E4:D3:15
            X509v3 Authority Key Identifier:
                keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e8:b5:48:b3:53:51:6a:93:ef:9d:24:1e:0c:83:13:97:d3:
         bb:79:e8:0c:58:60:72:e5:58:95:39:22:a8:67:6c:1d:43:dd:
         df:de:bd:11:c5:ff:d6:2b:91:8b:ce:f0:83:a4:bb:92:9f:9c:
         99:54:1e:64:0d:0d:cc:97:2e:67:b6:fe:fd:37:41:2e:07:e2:
         70:70:2e:24:a5:07:bb:a3:90:91:cc:2e:1d:58:d5:5d:06:83:
         1f:35:fd:25:ff:97:70:25:67:3a:e9:45:b3:b9:40:ee:5d:f7:
         04:04:2e:46:44:c8:4b:70:7d:dd:f5:97:ee:97:e1:8a:0a:b6:
         55:58:df:d3:c1:08:85:6c:2c:f2:1a:78:7d:0a:01:7f:d9:7d:
         77:44:eb:d0:7b:69:01:c5:8a:a1:84:05:e7:4d:d8:38:86:1c:
         cf:77:13:b8:0a:f9:58:9e:64:d8:fb:89:99:28:fe:e4:8a:5e:
         4c:25:4f:c4:ee:e3:35:80:6a:bf:1b:22:f2:ae:da:67:ce:d3:
         61:92:dd:49:bf:b1:67:4f:78:f1:08:85:01:df:e0:cc:d3:05:
         40:39:b2:49:4e:5d:6f:61:2c:04:2c:90:5f:03:7b:a5:f5:c8:
         6f:d0:42:86:46:3b:39:47:fc:62:09:dc:a0:d2:a3:0f:1b:b7:
         04:04:69:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG
NDk2N0VGNTYwHhcNMjYwMzAyMDE1MDM5WhcNMjYwMzA5MDE1MDM5WjAYMRYwFAYD
VQQDEw02OWE0ZWNmMC1hYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs2luprGcpieov2vhEansAY7Gv5Kp1SocXQEEVQ7rr+CY0Nk/DiEbZxtDrJl6
COa92qDIMQWG473lbfveset/y/ayR7bti12xZ3KWc1WgrXEdmmLT4uL1qxYpbaSx
oPJRjuOqoGfGRkDTLkNtE0te73oNUNu2Hyir/QA7F/PMADUBe6jgMcoNTLOJWcfL
rGplJ4AktjGy6sx31SYN3HgyqJxFyMstz8csRa7fm8QBj6qgk6qc3dxsky7SEhBK
jIZQZXfe9SeNYJy6eIsF+tkTBL6UrfJL8oa2QH+CZjFcRed/YOKtQ8+EG35OZzIp
0A1r+kE3ClADp4e3GGVhWMQKCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCH0lkVT
0BYQEdl24IbBRo8M5NMVMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF
NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy
Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACei1SLNTUWqT750kHgyDE5fTu3noDFhgcuVYlTkiqGdsHUPd3969EcX/1iuR
i87wg6S7kp+cmVQeZA0NzJcuZ7b+/TdBLgficHAuJKUHu6OQkcwuHVjVXQaDHzX9
Jf+XcCVnOulFs7lA7l33BAQuRkTIS3B93fWX7pfhigq2VVjf08EIhWws8hp4fQoB
f9l9d0Tr0HtpAcWKoYQF503YOIYcz3cTuAr5WJ5k2PuJmSj+5IpeTCVPxO7jNYBq
vxsi8q7aZ87TYZLdSb+xZ0948QiFAd/gzNMFQDmySU5db2EsBCyQXwN7pfXIb9BC
hkY7OUf8YgncoNKjDxu3BARpsg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:13 2026 by rpki-client