Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
File:                     4mv29S1wn7Nug3uag0rDrML5tFk.mft (raw, json)
Hash identifier:          dC1DPaspmo5gyeCWbj412CrdhhRRXVX/ScE6YCMK2KI=
Subject key identifier:   64:9F:0A:F6:40:CE:7A:4D:37:1B:DC:C4:C0:95:46:0D:08:87:3E:96
Authority key identifier: E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
Certificate issuer:       /CN=A91133DE/serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
Manifest number:          0A
Signing time:             Thu 26 Mar 2026 02:50:40 +0000
Manifest this update:     Thu 26 Mar 2026 02:50:40 +0000
Manifest next update:     Thu 02 Apr 2026 02:50:40 +0000
Files and hashes:         1: 4mv29S1wn7Nug3uag0rDrML5tFk.crl (hash: AJRAIXXpuXtXmUI82TDyHR9yiYlk+dvSJxFrWT4HkSU=)
                          2: 3E65AB521D0311F1B8948CF0043D8C67.roa (hash: sHNfG7PUkGQvb8cZheQ91puxBDfj8TkMgmzZhYPjhpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
                          rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 02:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133DE, serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
        Validity
            Not Before: Mar 26 02:50:40 2026 GMT
            Not After : Apr  2 02:50:40 2026 GMT
        Subject: CN=69c49f00-91d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3c:2d:10:3f:76:1f:f2:fe:a6:64:88:19:00:
                    f6:e9:08:e4:1f:34:ed:25:a2:ff:06:5e:d5:41:19:
                    25:91:5d:35:6c:c3:15:a5:5a:2e:d4:df:c9:74:de:
                    60:d6:10:a9:a8:78:99:50:a0:6b:e4:2f:9e:91:ba:
                    33:ac:39:16:4c:f8:3f:1e:39:28:27:69:bf:90:bc:
                    a0:9a:66:b5:ee:3f:54:40:29:f5:9d:d8:1d:1b:e9:
                    68:c6:46:4f:8d:57:85:75:a5:f6:83:19:23:28:4a:
                    30:6c:9b:ca:b1:a0:6c:a0:60:74:7b:08:aa:af:7c:
                    ed:b6:3a:c2:cf:19:7c:5c:83:6e:ea:71:d1:e0:af:
                    cb:12:c3:19:ff:f9:22:bf:30:9e:c9:be:0d:59:93:
                    6f:0f:38:1a:62:24:4d:80:ef:69:5f:b3:79:f2:f9:
                    96:a8:09:83:90:46:cb:c4:87:c6:58:37:ae:88:e9:
                    a1:bd:ce:ea:28:62:13:8e:f1:a2:d1:0d:91:2d:40:
                    e5:a3:c2:b9:11:55:53:99:57:80:27:0a:77:c2:c1:
                    9d:52:9c:99:5c:7e:24:80:28:fb:b6:a5:cd:f9:87:
                    21:0f:44:a1:d0:0b:27:e5:ae:12:55:07:b2:7d:f6:
                    d8:6e:7f:81:d2:b7:e6:6e:4d:77:7c:4c:6f:f3:c8:
                    38:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9F:0A:F6:40:CE:7A:4D:37:1B:DC:C4:C0:95:46:0D:08:87:3E:96
            X509v3 Authority Key Identifier:
                keyid:E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:53:db:f6:96:6e:41:05:17:f3:23:7c:7d:ed:47:a1:3a:b2:
         1a:2f:e2:27:f6:76:53:db:87:b7:5d:0e:55:3b:1e:be:86:e6:
         59:09:41:bb:94:df:60:7a:f8:76:4c:10:a8:88:a3:47:4e:0b:
         b4:4b:ed:8e:7b:96:af:b1:e6:99:37:70:e9:24:21:49:c7:b0:
         e1:ac:2e:2a:ed:d3:9a:13:30:e2:a4:05:9c:de:96:7c:ef:cd:
         af:95:61:ff:fd:65:42:bf:fc:a7:5c:97:70:f8:73:18:1d:e6:
         5f:a4:5c:0f:d7:1a:53:0b:d6:f7:99:cd:d6:92:6d:14:19:a8:
         64:d3:3e:58:44:79:e8:d3:83:8d:86:18:c2:7a:15:fc:c6:43:
         78:6b:9b:a5:9e:8f:3a:8c:9b:d0:e8:8b:e1:5f:07:38:bd:59:
         ce:07:79:bf:93:5b:a6:f1:84:cd:67:d2:c6:6a:be:d7:96:51:
         e6:b0:4d:ec:2f:71:1c:a7:6b:45:80:4c:71:cd:18:c3:f8:43:
         8e:98:5c:6e:a5:b0:cb:22:99:bb:1a:d5:e0:2a:f3:a7:75:bb:
         70:2a:b6:c3:8b:64:da:62:e8:e4:1e:59:e8:3c:9a:2c:9e:4c:
         b2:69:1b:ed:7a:d7:d4:75:62:40:fd:43:79:c1:33:ad:7b:c2:
         89:1e:ac:14
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MzNERTExMC8GA1UEBRMoRTI2QkY2RjUyRDcwOUZCMzZFODM3QjlBODM0QUMzQUND
MkY5QjQ1OTAeFw0yNjAzMjYwMjUwNDBaFw0yNjA0MDIwMjUwNDBaMBgxFjAUBgNV
BAMTDTY5YzQ5ZjAwLTkxZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDsPC0QP3Yf8v6mZIgZAPbpCOQfNO0lov8GXtVBGSWRXTVswxWlWi7U38l03mDW
EKmoeJlQoGvkL56RujOsORZM+D8eOSgnab+QvKCaZrXuP1RAKfWd2B0b6WjGRk+N
V4V1pfaDGSMoSjBsm8qxoGygYHR7CKqvfO22OsLPGXxcg27qcdHgr8sSwxn/+SK/
MJ7Jvg1Zk28POBpiJE2A72lfs3ny+ZaoCYOQRsvEh8ZYN66I6aG9zuooYhOO8aLR
DZEtQOWjwrkRVVOZV4AnCnfCwZ1SnJlcfiSAKPu2pc35hyEPRKHQCyflrhJVB7J9
9thuf4HSt+ZuTXd8TG/zyDh7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZJ8K9kDO
ek03G9zEwJVGDQiHPpYwHwYDVR0jBBgwFoAU4mv29S1wn7Nug3uag0rDrML5tFkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzM0RFLzE2OUE4MzhDMUQw
MjExRjE5QkYwOTM2MTAzM0Q4QzY3LzRtdjI5UzF3bjdOdWczdWFnMHJEck1MNXRG
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNG12MjlTMXduN051ZzN1YWcwckRyTUw1dEZrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz
M0RFLzE2OUE4MzhDMUQwMjExRjE5QkYwOTM2MTAzM0Q4QzY3LzRtdjI5UzF3bjdO
dWczdWFnMHJEck1MNXRGay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDHU9v2lm5BBRfzI3x97UehOrIaL+In9nZT24e3XQ5VOx6+huZZCUG7lN9gevh2
TBCoiKNHTgu0S+2Oe5avseaZN3DpJCFJx7DhrC4q7dOaEzDipAWc3pZ8782vlWH/
/WVCv/ynXJdw+HMYHeZfpFwP1xpTC9b3mc3Wkm0UGahk0z5YRHno04ONhhjCehX8
xkN4a5ulno86jJvQ6IvhXwc4vVnOB3m/k1um8YTNZ9LGar7XllHmsE3sL3Ecp2tF
gExxzRjD+EOOmFxupbDLIpm7GtXgKvOndbtwKrbDi2TaYujkHlnoPJosnkyyaRvt
etfUdWJA/UN5wTOte8KJHqwU
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:41:18 2026 by rpki-client