Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft
File:                     tMuMrEr2jfxZVs5gy7DYDTECkYw.mft (raw, json)
Hash identifier:          UJPFyPN1pRQPbhhHZYdJopoQHUOM8X50tQfTGtM0kz4=
Subject key identifier:   6B:77:DF:BA:2E:56:EF:21:40:12:33:51:7B:78:AB:0C:EA:AC:C0:9C
Authority key identifier: B4:CB:8C:AC:4A:F6:8D:FC:59:56:CE:60:CB:B0:D8:0D:31:02:91:8C
Certificate issuer:       /CN=A9110477/serialNumber=B4CB8CAC4AF68DFC5956CE60CBB0D80D3102918C
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft
Manifest number:          D4
Signing time:             Wed 25 Mar 2026 05:56:20 +0000
Manifest this update:     Wed 25 Mar 2026 05:56:20 +0000
Manifest next update:     Wed 01 Apr 2026 05:56:20 +0000
Files and hashes:         1: tMuMrEr2jfxZVs5gy7DYDTECkYw.crl (hash: He5jL1simRZ157zNj0WMM/RpvBBnF5RDXR3uDIPS6AQ=)
                          2: 04F8FE74236011F19FB9875AB4833773.roa (hash: 0DWCXTNXwo+nNelX8aA2I4PXzkl5Yyh27nw5aWvZ4Tg=)
                          3: 189FDE6A596311F0BCB5E17AC4F9AE02.roa (hash: vudnotq5zPioc2b6/woyFfprKiTSvw7dLP/PDPHELj8=)
                          4: 1918AF02596311F0BCB5E17AC4F9AE02.roa (hash: wvF0NPf+pWVpkUI8Xz/BX359fCDobglWwTSMQ7Pc0b8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.crl
                          rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110477, serialNumber=B4CB8CAC4AF68DFC5956CE60CBB0D80D3102918C
        Validity
            Not Before: Mar 25 05:56:20 2026 GMT
            Not After : Apr  1 05:56:20 2026 GMT
        Subject: CN=69c37904-b6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:ac:a7:c1:2f:1e:35:07:a6:c5:45:a4:35:
                    38:52:f9:eb:3e:28:e6:03:70:98:8c:48:a7:db:50:
                    6f:77:95:86:c5:31:6b:af:86:3f:f2:7c:b0:bc:c0:
                    ac:61:2f:a3:75:5d:71:ae:5b:eb:a3:1e:c7:8e:04:
                    5d:b5:ac:ac:5a:8c:63:65:e1:01:fe:8d:02:04:bc:
                    3c:ec:33:48:38:30:19:c0:ea:9d:c5:d7:6f:fa:ed:
                    99:5b:39:93:f2:f5:fa:27:4f:49:f0:51:ea:47:94:
                    f6:be:8b:34:9c:08:75:fb:c2:0a:54:6d:14:b4:7b:
                    7d:c2:a6:be:03:2b:2c:29:ab:82:e9:75:d8:f0:d9:
                    b8:e0:49:69:79:4b:f7:9c:33:03:46:1c:98:67:8e:
                    93:05:5e:09:96:2d:e6:e3:41:92:cd:e3:d6:a7:b9:
                    0e:f9:4b:74:7b:86:6f:e7:ac:ca:51:3f:32:8d:1d:
                    dc:f4:26:41:a9:d9:5c:b0:3a:f2:41:c3:fb:43:f0:
                    2f:ac:31:17:46:bc:ef:ad:1f:ce:b8:ac:84:f2:57:
                    f0:24:ac:0d:b9:11:3c:f3:72:7c:a7:bc:c8:47:b7:
                    25:6d:f8:6c:9d:b5:a0:11:1a:51:73:af:6e:5f:0f:
                    1c:23:41:dc:6b:42:98:81:94:8f:d1:ce:b8:de:13:
                    db:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:77:DF:BA:2E:56:EF:21:40:12:33:51:7B:78:AB:0C:EA:AC:C0:9C
            X509v3 Authority Key Identifier:
                keyid:B4:CB:8C:AC:4A:F6:8D:FC:59:56:CE:60:CB:B0:D8:0D:31:02:91:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tMuMrEr2jfxZVs5gy7DYDTECkYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/5750E0B2E9E911EFB502A55FC4F9AE02/tMuMrEr2jfxZVs5gy7DYDTECkYw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f5:e2:be:bb:56:43:4e:d6:7f:4e:60:1f:53:2d:5a:51:79:
         6d:29:ba:11:67:42:f3:1d:68:73:fe:45:7e:cb:a2:83:4e:53:
         d0:ed:e0:95:9e:ae:d1:63:a0:87:30:70:2a:fe:42:2f:52:c7:
         51:a8:8f:ef:a0:f2:43:20:f9:25:f8:47:10:4a:0b:f7:f1:07:
         2b:8d:d1:5c:d7:a5:c3:dd:26:19:4f:e8:c8:cb:d4:9e:da:00:
         53:f3:bc:3d:1e:1e:bb:3c:f1:65:e7:86:14:f2:79:d3:71:48:
         9c:1a:22:4f:1d:cf:59:a1:d2:6c:31:5a:27:e2:fe:d5:53:63:
         f1:cb:6c:c9:65:dc:a7:af:a1:4e:08:6c:03:aa:30:51:72:f5:
         c4:5c:c4:43:cf:31:14:7a:40:df:a5:f6:a1:44:8a:4f:70:c8:
         0b:be:99:83:8a:3b:2b:23:34:07:37:44:4c:bc:f8:e7:6a:d3:
         ff:b5:f8:57:30:7b:2f:da:f4:e9:84:58:11:07:c9:5c:f4:c8:
         51:32:f7:8f:fc:36:ae:5b:23:46:47:56:de:80:cc:07:2f:f8:
         92:f1:c0:19:fd:6e:4b:b6:26:19:a9:fb:16:44:f0:d2:66:b3:
         e0:20:c2:e0:c6:34:dd:7f:69:1f:06:00:a8:38:00:c8:f4:9a:
         35:d3:c1:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA0NzcxMTAvBgNVBAUTKEI0Q0I4Q0FDNEFGNjhERkM1OTU2Q0U2MENCQjBEODBE
MzEwMjkxOEMwHhcNMjYwMzI1MDU1NjIwWhcNMjYwNDAxMDU1NjIwWjAYMRYwFAYD
VQQDEw02OWMzNzkwNC1iNmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk8Csp8EvHjUHpsVFpDU4UvnrPijmA3CYjEin21Bvd5WGxTFrr4Y/8nywvMCs
YS+jdV1xrlvrox7HjgRdtaysWoxjZeEB/o0CBLw87DNIODAZwOqdxddv+u2ZWzmT
8vX6J09J8FHqR5T2vos0nAh1+8IKVG0UtHt9wqa+AyssKauC6XXY8Nm44ElpeUv3
nDMDRhyYZ46TBV4Jli3m40GSzePWp7kO+Ut0e4Zv56zKUT8yjR3c9CZBqdlcsDry
QcP7Q/AvrDEXRrzvrR/OuKyE8lfwJKwNuRE883J8p7zIR7clbfhsnbWgERpRc69u
Xw8cI0Hca0KYgZSP0c643hPbVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGt337ou
Vu8hQBIzUXt4qwzqrMCcMB8GA1UdIwQYMBaAFLTLjKxK9o38WVbOYMuw2A0xApGM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDQ3Ny81NzUwRTBCMkU5
RTkxMUVGQjUwMkE1NUZDNEY5QUUwMi90TXVNckVyMmpmeFpWczVneTdEWURURUNr
WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RNdU1yRXIyamZ4WlZzNWd5N0RZRFRFQ2tZdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDQ3Ny81NzUwRTBCMkU5RTkxMUVGQjUwMkE1NUZDNEY5QUUwMi90TXVNckVyMmpm
eFpWczVneTdEWURURUNrWXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAifXivrtWQ07Wf05gH1MtWlF5bSm6EWdC8x1oc/5Ffsuig05T0O3glZ6u0WOg
hzBwKv5CL1LHUaiP76DyQyD5JfhHEEoL9/EHK43RXNelw90mGU/oyMvUntoAU/O8
PR4euzzxZeeGFPJ503FInBoiTx3PWaHSbDFaJ+L+1VNj8ctsyWXcp6+hTghsA6ow
UXL1xFzEQ88xFHpA36X2oUSKT3DIC76Zg4o7KyM0BzdETLz452rT/7X4VzB7L9r0
6YRYEQfJXPTIUTL3j/w2rlsjRkdW3oDMBy/4kvHAGf1uS7YmGan7FkTw0maz4CDC
4MY03X9pHwYAqDgAyPSaNdPBDA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:00:18 2026 by rpki-client