Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
File:                     Qf4dQTWrLWdiPnYIM5hGitT6odw.mft (raw, json)
Hash identifier:          AtonyURlmqv1wB0GFoZia1gMfDlSWRNXFqbOwCKmm4s=
Subject key identifier:   72:F8:ED:B6:C0:26:82:04:D8:61:99:B2:CF:1D:41:F4:EC:AF:0C:E7
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Certificate issuer:       /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial:       1C9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
Manifest number:          1C65
Signing time:             Tue 24 Mar 2026 16:08:11 +0000
Manifest this update:     Tue 24 Mar 2026 16:08:10 +0000
Manifest next update:     Tue 31 Mar 2026 16:08:10 +0000
Files and hashes:         1: Qf4dQTWrLWdiPnYIM5hGitT6odw.crl (hash: fFlqeTWZ6VfXSF4k0p2LclGgIkOogg5mNQyUAW1/uzA=)
                          2: E007C458C1F111F0BF3C4B61C4F9AE02.roa (hash: oOMFQEz7Z0dlH9Kxe9lCaXlC2P93gTrGpTMlqfnNL/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
                          rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7324 (0x1c9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
        Validity
            Not Before: Mar 24 16:08:10 2026 GMT
            Not After : Mar 31 16:08:10 2026 GMT
        Subject: CN=69c2b6ea-8789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:d0:aa:cc:73:4d:98:73:d6:60:95:a2:7e:
                    ef:71:d3:95:f4:f4:9b:51:db:e2:a7:76:17:30:f8:
                    9d:b9:6c:fc:c4:d5:e8:ec:35:ae:19:73:65:34:9a:
                    5c:89:18:fe:92:f7:d4:cc:be:61:d9:ad:9d:33:23:
                    56:1e:c8:f8:b6:78:4f:00:8e:c6:d9:c6:d7:f7:f0:
                    ae:06:7a:2a:22:be:02:43:2a:41:b5:b9:0d:54:29:
                    45:5e:14:ca:f9:ab:17:53:7d:15:cf:4c:a6:e8:bc:
                    e2:aa:91:7d:9c:3a:c2:37:e6:0e:86:be:81:bc:d8:
                    71:f4:49:e2:0e:80:5a:a1:df:e8:d9:0c:79:4e:3e:
                    96:d6:d8:2b:f1:ba:60:33:f1:29:af:76:be:8f:ae:
                    6c:71:f8:c7:eb:65:79:aa:2f:f4:7b:e8:ae:ef:67:
                    df:06:ac:92:7b:75:b2:24:1e:55:4d:1d:27:e3:d3:
                    6f:69:23:a0:7f:a7:f4:3b:55:33:c9:ae:1a:01:d0:
                    28:b2:f6:84:af:76:fc:22:f1:7d:4d:4d:cf:31:a2:
                    54:b8:7a:44:e1:92:fd:b8:9d:97:df:10:78:71:c3:
                    56:31:46:a0:12:9b:b8:e4:2d:a4:7c:6d:0a:3c:d2:
                    12:64:9c:52:eb:76:ba:62:de:d8:d1:5e:ff:0a:5f:
                    9b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F8:ED:B6:C0:26:82:04:D8:61:99:B2:CF:1D:41:F4:EC:AF:0C:E7
            X509v3 Authority Key Identifier:
                keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2e:5d:4b:3b:23:d6:55:ab:8b:47:42:1b:77:60:ab:df:3f:
         a5:28:e5:7c:37:06:3e:c8:26:3a:7f:c2:d9:e3:12:ad:9a:ec:
         11:68:7c:63:26:ae:fb:53:98:3f:2a:3f:5d:0b:79:d3:54:7d:
         4d:25:b5:9a:3f:4a:ee:00:12:a3:9f:30:88:ba:90:c2:18:40:
         70:4e:b2:ff:f0:50:d7:30:16:6d:9f:b5:ce:40:9d:cc:21:27:
         35:f9:43:4f:27:c2:eb:f3:e6:ba:37:b4:6f:5b:b0:68:ae:9f:
         09:c4:2e:43:de:7a:19:f9:99:ee:d6:fb:88:a1:64:53:85:cb:
         61:b8:37:9d:b3:ce:55:8b:e6:37:d3:dc:8c:35:12:92:95:3d:
         b6:7d:ff:80:3d:8a:40:0e:81:1e:90:4a:49:c1:57:3f:c5:a3:
         0f:65:67:59:d8:37:32:68:df:db:e1:8e:48:7d:97:bb:10:3f:
         99:4f:2b:8a:59:75:94:34:83:ba:6b:91:6f:3f:a0:4a:09:4b:
         67:9f:cf:42:66:e6:13:64:79:e7:a6:f7:a0:bf:44:3d:d7:b0:
         b3:a3:1a:fe:ed:0d:5d:11:22:19:c0:50:1f:79:e0:14:81:cb:
         08:a9:59:d6:f5:fd:71:f3:25:26:82:6c:1d:fe:28:f8:c5:88:
         ff:aa:45:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI1RDcxMTAvBgNVBAUTKDQxRkUxRDQxMzVBQjJENjc2MjNFNzYwODMzOTg0NjhB
RDRGQUExREMwHhcNMjYwMzI0MTYwODEwWhcNMjYwMzMxMTYwODEwWjAYMRYwFAYD
VQQDEw02OWMyYjZlYS04Nzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyD3QqsxzTZhz1mCVon7vcdOV9PSbUdvip3YXMPiduWz8xNXo7DWuGXNlNJpc
iRj+kvfUzL5h2a2dMyNWHsj4tnhPAI7G2cbX9/CuBnoqIr4CQypBtbkNVClFXhTK
+asXU30Vz0ym6LziqpF9nDrCN+YOhr6BvNhx9EniDoBaod/o2Qx5Tj6W1tgr8bpg
M/Epr3a+j65scfjH62V5qi/0e+iu72ffBqySe3WyJB5VTR0n49NvaSOgf6f0O1Uz
ya4aAdAosvaEr3b8IvF9TU3PMaJUuHpE4ZL9uJ2X3xB4ccNWMUagEpu45C2kfG0K
PNISZJxS63a6Yt7Y0V7/Cl+bVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHL47bbA
JoIE2GGZss8dQfTsrwznMB8GA1UdIwQYMBaAFEH+HUE1qy1nYj52CDOYRorU+qHc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVENy8yNTg3MkJCRTAz
QjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxXZGlQbllJTTVoR2l0VDZv
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FmNGRRVFdyTFdkaVBuWUlNNWhHaXRUNm9kdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjVENy8yNTg3MkJCRTAzQjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxX
ZGlQbllJTTVoR2l0VDZvZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACy5dSzsj1lWri0dCG3dgq98/pSjlfDcGPsgmOn/C2eMSrZrsEWh8Yyau+1OY
Pyo/XQt501R9TSW1mj9K7gASo58wiLqQwhhAcE6y//BQ1zAWbZ+1zkCdzCEnNflD
TyfC6/Pmuje0b1uwaK6fCcQuQ956GfmZ7tb7iKFkU4XLYbg3nbPOVYvmN9PcjDUS
kpU9tn3/gD2KQA6BHpBKScFXP8WjD2VnWdg3Mmjf2+GOSH2XuxA/mU8rill1lDSD
umuRbz+gSglLZ5/PQmbmE2R556b3oL9EPdews6Ma/u0NXREiGcBQH3ngFIHLCKlZ
1vX9cfMlJoJsHf4o+MWI/6pFIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:26:24 2026 by rpki-client