Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
File:                     6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json)
Hash identifier:          4F2oXlfY8JPxevsmZu3mfgHL6gE/dyF65bN9yVZLAp0=
Subject key identifier:   44:A6:39:C3:7E:2A:B7:51:51:79:EF:09:8E:6E:A1:61:2D:D9:1A:F9
Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88
Certificate issuer:       /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
Manifest number:          014C
Signing time:             Sun 01 Mar 2026 06:10:30 +0000
Manifest this update:     Sun 01 Mar 2026 06:10:30 +0000
Manifest next update:     Sun 08 Mar 2026 06:10:30 +0000
Files and hashes:         1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: Ni+CQfErEhg9p7w7K/OMb0X/YqI8nNZKiltRW15Fa1k=)
                          2: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=)
                          3: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: l5eDg1NtuwC6/S6spgtl7+l3t055Pm1B+3DrcaZ20+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl
                          rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188
        Validity
            Not Before: Mar  1 06:10:30 2026 GMT
            Not After : Mar  8 06:10:30 2026 GMT
        Subject: CN=69a3d856-e5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c8:45:72:f3:09:61:66:b7:62:71:4d:97:50:
                    47:0d:3b:d0:6e:ba:e2:de:23:06:78:15:3d:c5:4f:
                    57:6b:8a:58:6a:59:84:66:6e:74:46:f9:1a:cd:f8:
                    4f:ce:9f:3e:85:cf:62:27:68:81:dc:fa:2b:5e:f8:
                    59:02:21:08:a4:d2:91:d6:c4:66:b6:bf:84:94:25:
                    2a:0c:ec:56:8b:c4:b5:b2:09:12:6d:c2:3a:6e:09:
                    46:11:4e:a8:38:34:fb:e6:22:58:98:e3:31:c1:29:
                    d8:c9:34:c9:6e:ba:8c:99:50:53:53:b3:d2:86:da:
                    ae:2a:56:a0:7a:9e:58:cf:0f:8b:ca:6d:bb:34:95:
                    2e:42:ae:25:6a:fa:4f:b1:66:84:10:58:d4:24:0c:
                    eb:75:e5:15:03:a7:80:15:4d:1c:a2:71:ec:c5:2e:
                    71:64:6f:95:22:2b:0d:aa:a8:88:a6:0f:76:e3:db:
                    80:85:5d:d5:ae:b9:09:08:99:c9:96:c6:25:03:ad:
                    ab:ef:f8:ad:22:bc:99:2d:56:29:d1:e7:31:93:08:
                    b8:60:84:5a:0e:dd:f5:29:b2:c7:41:c6:c3:b5:ad:
                    3f:30:c1:b7:c6:d3:e5:77:f9:3f:1b:9f:17:fc:79:
                    c7:ed:10:0c:5f:06:40:8c:3a:9a:7a:e7:c8:08:c8:
                    b9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A6:39:C3:7E:2A:B7:51:51:79:EF:09:8E:6E:A1:61:2D:D9:1A:F9
            X509v3 Authority Key Identifier:
                keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:6c:45:ce:bb:3e:11:3f:66:13:67:11:63:23:4a:05:65:bc:
         a4:e0:d6:e6:33:8a:26:a8:e8:df:9f:df:81:51:a0:26:51:00:
         8f:24:6c:ff:6e:9a:53:ff:05:c7:02:0e:5f:d8:1f:a9:7b:b8:
         a3:41:34:bd:20:65:17:a1:66:49:b1:a9:7d:ee:4a:c6:9b:c5:
         d4:a7:09:5f:57:b9:17:44:ba:07:51:4d:7f:39:1e:4c:eb:89:
         75:eb:02:91:97:6a:49:71:7d:e4:c7:ff:67:df:64:e7:30:fc:
         f4:88:21:1a:9a:78:bf:f8:fe:75:f7:50:da:52:f8:87:4d:97:
         93:b5:fd:5b:f1:07:c9:9c:73:85:df:da:d5:be:c2:ea:1b:87:
         73:1b:ce:05:c8:c1:e4:d5:f3:a1:cd:5b:53:13:60:16:d9:51:
         98:9b:00:14:c0:87:69:71:17:b4:5d:c8:c1:f7:91:f8:3b:70:
         a5:66:cb:7f:da:a5:a6:2e:2b:00:b9:1f:ef:14:39:14:16:dc:
         2d:af:12:75:4b:b5:69:eb:8b:64:17:32:13:f7:32:b0:9c:bc:
         f5:4a:38:82:7a:09:67:b3:f2:78:31:e4:62:43:c0:e8:be:83:
         f6:d3:09:da:2f:16:44:f8:a1:fa:44:b2:16:48:63:1c:c2:5d:
         3b:d1:97:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM1QkQxMTAvBgNVBAUTKEU5NzdBOTIyNjIyMEU4Qzc4QTFEMUIzQkUwNEQ2MENE
Q0M4QTIxODgwHhcNMjYwMzAxMDYxMDMwWhcNMjYwMzA4MDYxMDMwWjAYMRYwFAYD
VQQDEw02OWEzZDg1Ni1lNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9chFcvMJYWa3YnFNl1BHDTvQbrri3iMGeBU9xU9Xa4pYalmEZm50RvkazfhP
zp8+hc9iJ2iB3PorXvhZAiEIpNKR1sRmtr+ElCUqDOxWi8S1sgkSbcI6bglGEU6o
ODT75iJYmOMxwSnYyTTJbrqMmVBTU7PShtquKlagep5Yzw+Lym27NJUuQq4lavpP
sWaEEFjUJAzrdeUVA6eAFU0conHsxS5xZG+VIisNqqiIpg9249uAhV3VrrkJCJnJ
lsYlA62r7/itIryZLVYp0ecxkwi4YIRaDt31KbLHQcbDta0/MMG3xtPld/k/G58X
/HnH7RAMXwZAjDqaeufICMi5NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESmOcN+
KrdRUXnvCY5uoWEt2Rr5MB8GA1UdIwQYMBaAFOl3qSJiIOjHih0bO+BNYM3MiiGI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzVCRC83NkMyQzcyRTFD
RUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZNZUtIUnM3NEUxZ3pjeUtJ
WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzVCRC83NkMyQzcyRTFDRUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZN
ZUtIUnM3NEUxZ3pjeUtJWWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuGxFzrs+ET9mE2cRYyNKBWW8pODW5jOKJqjo35/fgVGgJlEAjyRs/26aU/8F
xwIOX9gfqXu4o0E0vSBlF6FmSbGpfe5KxpvF1KcJX1e5F0S6B1FNfzkeTOuJdesC
kZdqSXF95Mf/Z99k5zD89IghGpp4v/j+dfdQ2lL4h02Xk7X9W/EHyZxzhd/a1b7C
6huHcxvOBcjB5NXzoc1bUxNgFtlRmJsAFMCHaXEXtF3IwfeR+DtwpWbLf9qlpi4r
ALkf7xQ5FBbcLa8SdUu1aeuLZBcyE/cysJy89Uo4gnoJZ7PyeDHkYkPA6L6D9tMJ
2i8WRPih+kSyFkhjHMJdO9GXxA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:49 2026 by rpki-client