Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.mft
File:                     SKYQvx6BAahCT58kGCuWfnoDoe4.mft (raw, json)
Hash identifier:          PKaFXK5jiIEn5jkA+/V3TV7Yftw4mCFPZhVJS062KMI=
Subject key identifier:   27:D2:F3:A8:64:CB:FF:0E:2F:E4:F3:B9:4D:65:FE:3B:73:21:55:7E
Authority key identifier: 48:A6:10:BF:1E:81:01:A8:42:4F:9F:24:18:2B:96:7E:7A:03:A1:EE
Certificate issuer:       /CN=A91F9BB3/serialNumber=48A610BF1E8101A8424F9F24182B967E7A03A1EE
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SKYQvx6BAahCT58kGCuWfnoDoe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.mft
Manifest number:          27
Signing time:             Mon 02 Mar 2026 03:00:40 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:39 +0000
Manifest next update:     Mon 09 Mar 2026 03:00:39 +0000
Files and hashes:         1: SKYQvx6BAahCT58kGCuWfnoDoe4.crl (hash: ZxiBfB4llYcSqtKHUZxRSBypqpBQvfu1LupYwsNX6PM=)
                          2: DB206508E24411F0BBC3E4F5716F56BC.roa (hash: c7HWsqY1Jd8Z2zoV7tpD4dJQnzs4v0Tl6WCXZ5a/aRQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.crl
                          rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SKYQvx6BAahCT58kGCuWfnoDoe4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9BB3, serialNumber=48A610BF1E8101A8424F9F24182B967E7A03A1EE
        Validity
            Not Before: Mar  2 03:00:39 2026 GMT
            Not After : Mar  9 03:00:39 2026 GMT
        Subject: CN=69a4fd58-dd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ac:24:04:7b:c8:f2:b8:65:09:40:ac:d0:c6:
                    40:b8:c4:b8:2c:ca:6e:0c:53:ff:a8:23:9a:d5:87:
                    09:a5:e0:be:6b:4f:1f:97:5a:e2:6c:63:44:a8:cb:
                    e2:19:d5:2f:37:b0:91:4f:58:22:aa:0c:3f:84:44:
                    ce:b0:4d:10:bc:4a:0d:69:49:32:98:83:7d:3f:9b:
                    74:20:d6:1d:98:18:81:c6:d7:20:a0:8b:cd:17:73:
                    8b:9b:a2:51:d1:f5:6d:84:62:d2:d9:d6:3c:89:44:
                    d3:bf:71:61:5d:42:84:f3:91:f1:21:e2:68:ac:1f:
                    cb:18:78:a1:b4:b9:ce:9a:d3:86:91:77:72:ee:57:
                    ca:91:76:44:06:70:72:47:56:80:42:94:3f:06:92:
                    38:e7:59:98:9f:b1:b5:d1:f4:08:05:6f:2a:67:5f:
                    4e:69:75:86:08:01:65:bd:eb:52:d4:39:c6:d6:e1:
                    56:c0:e6:88:f0:e0:84:e3:3c:d5:d0:2c:b8:b1:2d:
                    54:31:f5:74:6b:c9:58:69:15:27:04:fa:a1:c7:97:
                    6c:88:90:b7:df:66:bb:9a:84:55:1c:00:f6:5c:ca:
                    fb:28:47:f5:96:f4:04:dc:52:26:5f:b4:e2:02:89:
                    ac:72:cc:32:15:70:ba:bc:ea:5c:17:c3:7c:4b:0b:
                    2e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D2:F3:A8:64:CB:FF:0E:2F:E4:F3:B9:4D:65:FE:3B:73:21:55:7E
            X509v3 Authority Key Identifier:
                keyid:48:A6:10:BF:1E:81:01:A8:42:4F:9F:24:18:2B:96:7E:7A:03:A1:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SKYQvx6BAahCT58kGCuWfnoDoe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/79379276E24411F0B953D896716F56BC/SKYQvx6BAahCT58kGCuWfnoDoe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4c:c7:ec:b4:73:f2:56:94:30:90:3c:59:36:52:ca:5b:85:
         0d:cf:c7:fd:b0:ce:d3:b0:65:d2:0f:65:82:5e:d7:96:70:6e:
         3a:ab:fd:75:f1:51:46:40:81:ec:12:70:07:31:62:a4:2d:8f:
         22:57:8a:f8:04:7d:55:ab:4b:55:b9:f5:31:03:46:c0:9f:c9:
         20:c2:96:7f:41:67:59:d4:81:fe:5c:08:60:25:80:f1:79:d5:
         82:ff:2f:4d:5e:44:b8:e4:60:cc:9d:dd:62:04:a4:1a:0e:2e:
         cc:a0:01:25:4a:cc:bc:42:58:37:ac:4f:7a:36:42:28:6b:d1:
         f0:8b:0a:2f:3d:48:60:d6:68:6f:cc:96:c8:32:e0:2b:3e:22:
         58:32:a3:9c:4a:cc:d7:10:bf:17:b7:a6:38:e0:70:0f:56:33:
         4e:fe:68:b4:a6:03:3d:57:d8:d6:b5:b6:a3:30:d7:03:22:39:
         91:8e:1f:2d:3b:47:4b:8c:83:d6:45:b7:32:5d:f6:1d:2c:d6:
         36:e9:07:61:d4:ec:0a:9f:5c:5c:1d:88:27:61:1c:49:8e:50:
         81:44:d8:6a:64:9b:66:06:03:0e:f7:1d:b8:20:71:9f:14:a2:
         35:6c:f8:27:69:1b:b1:ae:ad:fd:e3:97:93:ce:3b:b5:8b:c8:
         28:3e:22:14
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
OUJCMzExMC8GA1UEBRMoNDhBNjEwQkYxRTgxMDFBODQyNEY5RjI0MTgyQjk2N0U3
QTAzQTFFRTAeFw0yNjAzMDIwMzAwMzlaFw0yNjAzMDkwMzAwMzlaMBgxFjAUBgNV
BAMTDTY5YTRmZDU4LWRkNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZrCQEe8jyuGUJQKzQxkC4xLgsym4MU/+oI5rVhwml4L5rTx+XWuJsY0Soy+IZ
1S83sJFPWCKqDD+ERM6wTRC8Sg1pSTKYg30/m3Qg1h2YGIHG1yCgi80Xc4ubolHR
9W2EYtLZ1jyJRNO/cWFdQoTzkfEh4misH8sYeKG0uc6a04aRd3LuV8qRdkQGcHJH
VoBClD8GkjjnWZifsbXR9AgFbypnX05pdYYIAWW961LUOcbW4VbA5ojw4ITjPNXQ
LLixLVQx9XRryVhpFScE+qHHl2yIkLffZruahFUcAPZcyvsoR/WW9ATcUiZftOIC
iaxyzDIVcLq86lwXw3xLCy5zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJ9LzqGTL
/w4v5PO5TWX+O3MhVX4wHwYDVR0jBBgwFoAUSKYQvx6BAahCT58kGCuWfnoDoe4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5QkIzLzc5Mzc5Mjc2RTI0
NDExRjBCOTUzRDg5NjcxNkY1NkJDL1NLWVF2eDZCQWFoQ1Q1OGtHQ3VXZm5vRG9l
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvU0tZUXZ4NkJBYWhDVDU4a0dDdVdmbm9Eb2U0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5
QkIzLzc5Mzc5Mjc2RTI0NDExRjBCOTUzRDg5NjcxNkY1NkJDL1NLWVF2eDZCQWFo
Q1Q1OGtHQ3VXZm5vRG9lNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAJTMfstHPyVpQwkDxZNlLKW4UNz8f9sM7TsGXSD2WCXteWcG46q/118VFGQIHs
EnAHMWKkLY8iV4r4BH1Vq0tVufUxA0bAn8kgwpZ/QWdZ1IH+XAhgJYDxedWC/y9N
XkS45GDMnd1iBKQaDi7MoAElSsy8Qlg3rE96NkIoa9HwiwovPUhg1mhvzJbIMuAr
PiJYMqOcSszXEL8Xt6Y44HAPVjNO/mi0pgM9V9jWtbajMNcDIjmRjh8tO0dLjIPW
RbcyXfYdLNY26Qdh1OwKn1xcHYgnYRxJjlCBRNhqZJtmBgMO9x24IHGfFKI1bPgn
aRuxrq3945eTzju1i8goPiIU
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:28:04 2026 by rpki-client