Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
File:                     jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft (raw, json)
Hash identifier:          M/WtifkHQhyQR6LLcoFgqIZTtmNymohR4j6QV6pEfjk=
Subject key identifier:   4A:8F:BB:FD:45:24:4C:88:67:B3:13:72:8C:54:05:4F:F6:84:DD:F9
Authority key identifier: 8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66
Certificate issuer:       /CN=A91190A9/serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566
Certificate serial:       0BAF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
Manifest number:          0BA6
Signing time:             Tue 24 Mar 2026 18:50:16 +0000
Manifest this update:     Tue 24 Mar 2026 18:50:16 +0000
Manifest next update:     Tue 31 Mar 2026 18:50:16 +0000
Files and hashes:         1: jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl (hash: PyQpaFPDjsi7jZfTG+NGkNhqMcvo5SNrJiAElErQoHQ=)
                          2: 344C54A441B811EAA856BE49C4F9AE02.roa (hash: ybu4TRi1kWC8ch99fNXPnIw41VP/i805qg2nqD/B1Eo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl
                          rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2991 (0xbaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91190A9, serialNumber=8D473BCC57C3F2AE4E8748EDEFD3D2817C206566
        Validity
            Not Before: Mar 24 18:50:16 2026 GMT
            Not After : Mar 31 18:50:16 2026 GMT
        Subject: CN=69c2dce8-e12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:32:7a:7a:b1:2b:fc:67:d6:f9:eb:e7:95:
                    bf:58:30:1a:18:0c:b0:e0:47:52:63:ed:eb:33:1c:
                    e0:be:6c:76:1e:e6:cc:aa:6c:d9:46:26:54:1f:54:
                    33:10:86:36:99:7b:54:5f:e4:84:f3:e6:e6:1f:29:
                    a4:25:06:cc:e8:f1:d3:32:a5:21:0d:6d:5b:f1:eb:
                    7d:ef:4c:42:f2:47:1e:bc:20:3f:e5:ab:3d:1b:90:
                    1a:35:ba:40:17:8d:da:c7:df:c7:62:4b:cb:eb:d1:
                    16:ef:f1:05:00:42:72:cb:08:6f:f9:0f:b2:aa:28:
                    5f:a2:7d:2d:54:91:4a:91:51:2f:95:eb:38:49:dc:
                    29:80:8d:f0:6e:77:c1:72:80:c9:b0:f4:4d:d6:00:
                    6c:a4:70:b3:a8:bc:c5:45:a4:e4:31:4e:c0:33:de:
                    94:ae:f8:da:8a:ae:13:ed:0c:6d:50:cb:9c:d9:cd:
                    dc:a2:72:5b:40:36:8b:05:9b:31:a0:6d:4a:87:0d:
                    83:7c:b1:bf:74:1b:19:78:00:1b:db:26:62:30:df:
                    a0:5e:c2:7f:f3:45:79:80:8d:16:0b:a9:0a:80:45:
                    33:5c:b0:76:fa:80:bc:06:0c:b1:30:e8:7a:95:d6:
                    aa:57:b3:5d:c6:dc:3f:13:e4:89:c8:2e:60:9f:b3:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8F:BB:FD:45:24:4C:88:67:B3:13:72:8C:54:05:4F:F6:84:DD:F9
            X509v3 Authority Key Identifier:
                keyid:8D:47:3B:CC:57:C3:F2:AE:4E:87:48:ED:EF:D3:D2:81:7C:20:65:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUc7zFfD8q5Oh0jt79PSgXwgZWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190A9/A974049A41B611EABF33B846C4F9AE02/jUc7zFfD8q5Oh0jt79PSgXwgZWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:a2:52:ad:b5:2f:4d:a0:37:1f:49:a1:c2:39:2f:5a:06:47:
         3f:62:00:1a:66:39:b7:bb:5c:59:a8:85:9d:06:9c:0f:bd:93:
         87:d6:ff:1e:1c:88:93:c8:05:7c:b0:36:24:9c:6e:00:85:cb:
         52:62:c1:c9:d3:cc:ba:28:47:db:d5:a2:19:18:c0:5c:b1:db:
         98:d3:f8:b2:44:6d:e6:13:3e:0d:6f:9a:29:1d:83:d3:18:ff:
         e1:80:dd:17:3e:4a:34:df:ba:34:fb:ec:0d:a8:c2:c1:b1:87:
         0a:f0:51:39:66:b8:8b:39:54:92:bd:e3:3e:72:f8:21:e1:54:
         62:61:02:ff:3a:60:83:af:6f:f2:ae:2d:6c:1d:5a:cd:0c:af:
         4a:1a:4b:69:90:50:18:3f:64:ac:88:c6:61:46:91:8f:b8:1f:
         88:e2:8c:18:6d:f2:fa:25:1c:24:2f:8e:2c:53:6e:ef:5a:84:
         4c:9a:e7:d3:b7:87:82:9b:b4:ed:fd:c5:86:b3:7c:cf:42:4d:
         b2:e6:62:f8:23:a3:e7:24:74:60:82:b9:08:44:c2:99:33:fa:
         cb:e2:7c:d1:da:06:6c:25:c6:a6:b4:d5:a1:e3:70:47:b4:5f:
         99:7f:e5:fc:31:58:be:af:7c:da:e9:e2:00:69:a9:18:3c:f7:
         61:1b:8f:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkwQTkxMTAvBgNVBAUTKDhENDczQkNDNTdDM0YyQUU0RTg3NDhFREVGRDNEMjgx
N0MyMDY1NjYwHhcNMjYwMzI0MTg1MDE2WhcNMjYwMzMxMTg1MDE2WjAYMRYwFAYD
VQQDEw02OWMyZGNlOC1lMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoWwyenqxK/xn1vnr55W/WDAaGAyw4EdSY+3rMxzgvmx2HubMqmzZRiZUH1Qz
EIY2mXtUX+SE8+bmHymkJQbM6PHTMqUhDW1b8et970xC8kcevCA/5as9G5AaNbpA
F43ax9/HYkvL69EW7/EFAEJyywhv+Q+yqihfon0tVJFKkVEvles4SdwpgI3wbnfB
coDJsPRN1gBspHCzqLzFRaTkMU7AM96Urvjaiq4T7QxtUMuc2c3conJbQDaLBZsx
oG1Khw2DfLG/dBsZeAAb2yZiMN+gXsJ/80V5gI0WC6kKgEUzXLB2+oC8BgyxMOh6
ldaqV7Ndxtw/E+SJyC5gn7PucQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqPu/1F
JEyIZ7MTcoxUBU/2hN35MB8GA1UdIwQYMBaAFI1HO8xXw/KuTodI7e/T0oF8IGVm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTBBOS9BOTc0MDQ5QTQx
QjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhxNU9oMGp0NzlQU2dYd2da
V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pVYzd6RmZEOHE1T2gwanQ3OVBTZ1h3Z1pXWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTBBOS9BOTc0MDQ5QTQxQjYxMUVBQkYzM0I4NDZDNEY5QUUwMi9qVWM3ekZmRDhx
NU9oMGp0NzlQU2dYd2daV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwqJSrbUvTaA3H0mhwjkvWgZHP2IAGmY5t7tcWaiFnQacD72Th9b/HhyIk8gF
fLA2JJxuAIXLUmLBydPMuihH29WiGRjAXLHbmNP4skRt5hM+DW+aKR2D0xj/4YDd
Fz5KNN+6NPvsDajCwbGHCvBROWa4izlUkr3jPnL4IeFUYmEC/zpgg69v8q4tbB1a
zQyvShpLaZBQGD9krIjGYUaRj7gfiOKMGG3y+iUcJC+OLFNu71qETJrn07eHgpu0
7f3FhrN8z0JNsuZi+COj5yR0YIK5CETCmTP6y+J80doGbCXGprTVoeNwR7RfmX/l
/DFYvq982uniAGmpGDz3YRuPXg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:09:49 2026 by rpki-client