Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
File:                     rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json)
Hash identifier:          8q3tcWYEGcWnDTxRHtIyZPBD6jwbR5/NmNTvlD6J01w=
Subject key identifier:   A5:E2:46:41:B1:C6:73:51:9E:B0:D8:70:F3:BC:92:A5:4E:26:11:A7
Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
Certificate issuer:       /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Certificate serial:       04E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
Manifest number:          04D7
Signing time:             Mon 02 Mar 2026 00:56:58 +0000
Manifest this update:     Mon 02 Mar 2026 00:56:56 +0000
Manifest next update:     Mon 09 Mar 2026 00:56:56 +0000
Files and hashes:         1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: Yi+0FoYkIk0wOKSKnRIvh6FTbW36/JwL1sMAjVQydJ4=)
                          2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: n648Yvz53rsJ1dG0NtAeKrqioIBy25td2h9ZGC5vq8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
                          rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250 (0x4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
        Validity
            Not Before: Mar  2 00:56:56 2026 GMT
            Not After : Mar  9 00:56:56 2026 GMT
        Subject: CN=69a4e05a-09b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5f:99:4a:35:9f:1f:e4:bf:ab:1a:d6:22:23:
                    a5:ab:57:f1:0b:74:71:af:40:80:5c:4c:cf:15:0e:
                    0b:d2:00:aa:ca:88:35:a8:18:c1:db:0d:28:39:6a:
                    d7:e7:0a:71:61:d4:37:80:1f:1e:97:e0:32:d4:ea:
                    c6:5f:83:99:1f:22:a9:97:70:85:8c:e1:9e:32:e3:
                    8c:92:f6:e4:09:99:d2:e0:e2:79:0b:29:5a:bc:0f:
                    94:cf:cf:b2:37:73:39:53:28:a3:2e:b5:97:87:dc:
                    df:3e:3d:08:0e:2b:12:45:2e:67:c0:11:6a:69:76:
                    ee:eb:f5:af:59:0d:59:5a:18:e6:11:18:58:c5:f8:
                    80:a8:f3:0e:5b:fb:7c:3a:f3:f6:f1:32:09:f9:5c:
                    84:1f:63:cf:11:3c:f4:33:60:d0:d5:07:54:5b:a0:
                    b3:21:19:a6:73:ab:0a:06:45:7b:18:fd:16:4e:6e:
                    1f:b4:1e:a9:22:4d:95:6c:31:de:aa:4a:ed:4e:ff:
                    ee:e4:07:fa:5b:08:f9:aa:2a:9d:07:30:02:97:50:
                    b6:c0:09:76:0c:e8:db:f2:8f:2d:bd:28:ff:72:b3:
                    21:f5:c5:60:eb:a1:44:e9:4d:d1:67:ff:e1:f3:0e:
                    cb:43:fe:af:10:c0:0a:ac:a3:6c:63:7b:e5:6a:c7:
                    25:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E2:46:41:B1:C6:73:51:9E:B0:D8:70:F3:BC:92:A5:4E:26:11:A7
            X509v3 Authority Key Identifier:
                keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:57:92:42:66:57:bd:e9:61:ac:eb:18:83:30:7f:31:7a:
         da:2e:f7:55:9c:04:3e:b9:3b:a5:7d:da:72:d2:ad:0a:c4:61:
         0b:91:fd:30:42:9a:0a:19:28:35:7e:3e:50:79:04:cd:d7:7b:
         34:5f:7c:5e:f5:a5:92:04:66:f7:63:ac:15:b0:14:c6:5f:b2:
         1a:80:52:f8:aa:6b:48:ac:95:04:b5:ca:03:31:e0:45:5a:41:
         b7:73:2d:23:61:2e:18:41:30:97:af:d9:b8:dc:2d:14:4d:bc:
         58:5f:8a:84:44:37:7e:ab:24:c4:bc:22:a4:43:89:b1:3e:37:
         98:9c:21:7a:af:ce:a7:ee:9f:a7:cd:61:31:60:5d:40:23:94:
         44:81:f6:48:db:2a:0a:bd:e0:9a:1f:bb:bc:a2:ab:2a:0b:c3:
         77:2b:65:37:4f:de:1a:91:de:7b:e0:ec:10:b8:84:96:04:30:
         3c:f8:59:93:16:73:3f:81:0f:0c:e2:89:c7:1a:af:d5:8c:27:
         71:71:c1:7f:d5:64:9b:a0:1c:52:43:06:68:92:96:bf:ba:41:
         eb:85:23:50:c7:2e:c6:5a:90:80:48:31:8e:b3:68:b8:1f:1f:
         07:84:dd:15:07:ee:f2:c4:83:32:65:2a:ae:63:1c:ba:a6:68:
         19:26:f9:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRCQjMxMTAvBgNVBAUTKEFDN0M5RTcxODIyQzA1NjE4NTE4NjQ1M0Y5NjBCMkMx
RThDQTk0RTMwHhcNMjYwMzAyMDA1NjU2WhcNMjYwMzA5MDA1NjU2WjAYMRYwFAYD
VQQDEw02OWE0ZTA1YS0wOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4F+ZSjWfH+S/qxrWIiOlq1fxC3Rxr0CAXEzPFQ4L0gCqyog1qBjB2w0oOWrX
5wpxYdQ3gB8el+Ay1OrGX4OZHyKpl3CFjOGeMuOMkvbkCZnS4OJ5CylavA+Uz8+y
N3M5UyijLrWXh9zfPj0IDisSRS5nwBFqaXbu6/WvWQ1ZWhjmERhYxfiAqPMOW/t8
OvP28TIJ+VyEH2PPETz0M2DQ1QdUW6CzIRmmc6sKBkV7GP0WTm4ftB6pIk2VbDHe
qkrtTv/u5Af6Wwj5qiqdBzACl1C2wAl2DOjb8o8tvSj/crMh9cVg66FE6U3RZ//h
8w7LQ/6vEMAKrKNsY3vlasclQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXiRkGx
xnNRnrDYcPO8kqVOJhGnMB8GA1UdIwQYMBaAFKx8nnGCLAVhhRhkU/lgssHoypTj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEJCMy9BRUE4NzNFQzVC
QzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JXR0ZHR1JULVdDeXdlakts
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JIeWVjWUlzQldHRkdHUlQtV0N5d2VqS2xPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NEJCMy9BRUE4NzNFQzVCQzcxMUVDQUQ1OEIwNUZDNEY5QUUwMi9ySHllY1lJc0JX
R0ZHR1JULVdDeXdlaktsT00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT2pXkkJmV73pYazrGIMwfzF62i73VZwEPrk7pX3actKtCsRhC5H9MEKaChko
NX4+UHkEzdd7NF98XvWlkgRm92OsFbAUxl+yGoBS+KprSKyVBLXKAzHgRVpBt3Mt
I2EuGEEwl6/ZuNwtFE28WF+KhEQ3fqskxLwipEOJsT43mJwheq/Op+6fp81hMWBd
QCOURIH2SNsqCr3gmh+7vKKrKgvDdytlN0/eGpHee+DsELiElgQwPPhZkxZzP4EP
DOKJxxqv1YwncXHBf9Vkm6AcUkMGaJKWv7pB64UjUMcuxlqQgEgxjrNouB8fB4Td
FQfu8sSDMmUqrmMcuqZoGSb5Uw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:12 2026 by rpki-client