Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
File:                     vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json)
Hash identifier:          4r0IEXMKcK4Pwtmxy/oJSG2dzMH5YItP/ollEzsPQSg=
Subject key identifier:   45:D7:12:C4:B9:CC:94:26:5C:EC:7A:64:0D:66:65:14:E0:E6:20:B2
Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
Certificate issuer:       /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Certificate serial:       05DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
Manifest number:          05CD
Signing time:             Mon 02 Mar 2026 02:07:12 +0000
Manifest this update:     Mon 02 Mar 2026 02:07:10 +0000
Manifest next update:     Mon 09 Mar 2026 02:07:10 +0000
Files and hashes:         1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: iuXr4vMKwms7u073jeuaGYxvfyCJc8s97/XoygDTspw=)
                          2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: H+/gL9GOC5rLy94c2j0ly4aLXYfukKwRD5D8FRI8cvw=)
                          3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: 5AtvjYv/5JBxLgDIDbG/ZJKbMg4yztkVNaeXKIlbHXg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501 (0x5dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
        Validity
            Not Before: Mar  2 02:07:10 2026 GMT
            Not After : Mar  9 02:07:10 2026 GMT
        Subject: CN=69a4f0d0-d096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f2:bd:79:cd:57:c4:71:93:7d:74:c7:aa:50:
                    16:b6:1d:67:8b:06:ab:f7:13:46:d6:4f:a0:29:4f:
                    be:93:53:ba:4d:e4:6a:6b:54:48:de:ba:d2:c5:7f:
                    ef:9f:d9:01:a4:10:f0:32:c2:61:c1:88:7d:d1:99:
                    dd:e9:88:bb:72:83:bd:78:0e:05:74:74:f8:91:d4:
                    d6:29:3a:85:7f:eb:7c:8f:44:ef:2c:a8:31:11:dc:
                    9d:3b:30:cc:9d:1f:7b:fa:c4:fe:4a:2b:04:92:01:
                    59:48:74:64:e0:4f:1a:cd:31:69:a8:ab:06:14:68:
                    0d:8c:e4:1d:49:5f:8b:ce:3b:6a:92:54:37:e7:37:
                    05:75:fc:36:c2:14:c0:d7:2e:36:23:90:96:12:ae:
                    f8:b4:e1:7d:d9:dc:b3:b4:3c:d6:e9:2d:2a:18:8c:
                    34:e0:69:70:98:cc:7c:9e:ed:9c:35:7b:b1:f3:e4:
                    6f:b0:27:49:6b:0e:a4:13:54:83:ce:aa:10:00:c9:
                    de:20:15:d2:c2:96:9e:90:1f:94:d7:6c:2c:de:d3:
                    75:c2:74:84:f9:a7:cd:ac:74:fc:2b:f5:84:1f:c0:
                    8f:04:9b:b8:f4:66:71:b0:25:88:91:fd:a8:76:1a:
                    7e:c3:8b:5e:a2:bb:43:3f:a1:b6:82:59:43:6f:55:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D7:12:C4:B9:CC:94:26:5C:EC:7A:64:0D:66:65:14:E0:E6:20:B2
            X509v3 Authority Key Identifier:
                keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c9:4e:71:79:81:f1:ab:d9:4d:e9:65:2d:3e:5d:d1:11:14:
         23:2d:c1:ce:09:93:d9:5c:4e:5f:9b:37:7e:70:06:a5:a6:f2:
         b8:a3:04:9b:f8:b4:28:89:46:77:c0:69:bc:ef:1a:8b:34:b2:
         4c:e2:a9:98:a6:94:f2:76:d8:72:c2:06:be:e7:f1:29:cf:58:
         e3:37:e3:b8:3b:b6:1f:af:bc:c3:cb:27:c3:65:17:64:63:1e:
         75:11:a5:89:43:a3:2d:59:99:af:f3:6c:94:8d:60:f9:45:14:
         80:2c:d4:7e:6b:48:39:ad:d1:02:ce:37:06:22:ef:d3:b3:8b:
         1d:94:f7:e8:cf:cd:46:38:f9:7c:6b:46:de:a7:31:20:17:df:
         c8:0d:64:f3:c4:26:6c:02:dd:3f:7a:27:1d:42:75:a7:1a:be:
         87:f4:04:79:d5:6b:88:d2:cd:3b:cb:a8:6d:99:c1:28:7e:20:
         15:b5:8a:0c:9e:27:35:ce:92:7b:43:6a:15:35:aa:bd:85:c8:
         f0:d1:de:37:92:cb:67:19:e5:e2:58:b5:f6:4f:8a:4c:f5:f0:
         1e:9f:2a:c6:f5:0f:95:d5:64:ad:5b:9a:a3:01:f6:23:d7:ce:
         6c:67:f4:47:79:76:bf:ac:25:3b:5e:17:4c:67:fd:da:de:b7:
         dc:c1:d9:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdDMjExMTAvBgNVBAUTKEJDMkRBMzVDQjU2NTEzQTk0QTY4QjU5MUREMkM3NkM1
MUQ4MTExMzQwHhcNMjYwMzAyMDIwNzEwWhcNMjYwMzA5MDIwNzEwWjAYMRYwFAYD
VQQDEw02OWE0ZjBkMC1kMDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3/K9ec1XxHGTfXTHqlAWth1niwar9xNG1k+gKU++k1O6TeRqa1RI3rrSxX/v
n9kBpBDwMsJhwYh90Znd6Yi7coO9eA4FdHT4kdTWKTqFf+t8j0TvLKgxEdydOzDM
nR97+sT+SisEkgFZSHRk4E8azTFpqKsGFGgNjOQdSV+LzjtqklQ35zcFdfw2whTA
1y42I5CWEq74tOF92dyztDzW6S0qGIw04GlwmMx8nu2cNXux8+RvsCdJaw6kE1SD
zqoQAMneIBXSwpaekB+U12ws3tN1wnSE+afNrHT8K/WEH8CPBJu49GZxsCWIkf2o
dhp+w4teortDP6G2gllDb1VvLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXXEsS5
zJQmXOx6ZA1mZRTg5iCyMB8GA1UdIwQYMBaAFLwto1y1ZROpSmi1kd0sdsUdgRE0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0MyMS8zQkNEMDA3NEY1
QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2bEthTFdSM1N4MnhSMkJF
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZDMmpYTFZsRTZsS2FMV1IzU3gyeFIyQkVUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
N0MyMS8zQkNEMDA3NEY1QUUxMUVCOEUzRUZCMzNDNEY5QUUwMi92QzJqWExWbEU2
bEthTFdSM1N4MnhSMkJFVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACslOcXmB8avZTellLT5d0REUIy3BzgmT2VxOX5s3fnAGpabyuKMEm/i0KIlG
d8BpvO8aizSyTOKpmKaU8nbYcsIGvufxKc9Y4zfjuDu2H6+8w8snw2UXZGMedRGl
iUOjLVmZr/NslI1g+UUUgCzUfmtIOa3RAs43BiLv07OLHZT36M/NRjj5fGtG3qcx
IBffyA1k88QmbALdP3onHUJ1pxq+h/QEedVriNLNO8uobZnBKH4gFbWKDJ4nNc6S
e0NqFTWqvYXI8NHeN5LLZxnl4li19k+KTPXwHp8qxvUPldVkrVuaowH2I9fObGf0
R3l2v6wlO14XTGf92t633MHZ8Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:57 2026 by rpki-client