Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
File:                     ieNpO3EjaLD6zmuk5GeXCK85OLU.mft (raw, json)
Hash identifier:          z7TXHEv8MUGgS+svv5nSI9S7Ul/0JAsiPF6Ot8Urw2M=
Subject key identifier:   CE:15:F2:DE:61:91:7F:D0:18:9A:3F:D8:29:80:96:65:D2:6E:86:B9
Authority key identifier: 89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5
Certificate issuer:       /CN=A911EA03/serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
Manifest number:          05
Signing time:             Wed 25 Mar 2026 08:25:36 +0000
Manifest this update:     Wed 25 Mar 2026 08:25:36 +0000
Manifest next update:     Wed 01 Apr 2026 08:25:36 +0000
Files and hashes:         1: ieNpO3EjaLD6zmuk5GeXCK85OLU.crl (hash: 1mFDc6R9LfyTCQpjSh1JGfzselDNYUd7Egft4INOJug=)
                          2: FD1CE81824DC11F1AC9E21B6AD833773.roa (hash: 9EYbW/kP0EvaQviwyUMhvfFwghhwvUIQKiWZZgxHXKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl
                          rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA03, serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
        Validity
            Not Before: Mar 25 08:25:36 2026 GMT
            Not After : Apr  1 08:25:36 2026 GMT
        Subject: CN=69c39c00-ccf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:8e:80:74:a0:12:dd:c6:85:f9:ac:7c:18:
                    cb:e3:39:51:97:ec:ed:8a:e8:2e:5b:7f:e1:f1:d2:
                    bf:b5:c8:cc:ec:3e:5e:33:45:87:1f:3f:3e:0a:5a:
                    4f:55:83:32:67:5d:44:c3:f3:a1:2b:1b:63:bc:f1:
                    92:7b:f1:40:e9:af:9d:44:0c:c7:d2:0a:2d:10:e3:
                    db:89:aa:f3:27:82:0d:e9:ab:27:e2:a5:55:4f:78:
                    15:d2:e3:0f:34:c4:07:07:21:0a:88:32:7e:a7:98:
                    2a:f3:01:08:06:fd:3e:c9:63:85:50:5a:c5:a7:7a:
                    f1:10:38:a9:2f:63:4c:bf:17:3f:1b:14:59:78:e0:
                    fc:a1:3b:79:51:82:18:b3:d1:0e:90:c6:64:d1:28:
                    f9:a5:33:77:a8:47:98:9e:84:ed:42:a9:a9:ca:79:
                    a1:a3:8d:b7:a1:0f:42:d4:de:1b:2e:18:56:39:11:
                    eb:6d:ec:aa:70:64:d8:20:74:16:53:a1:e8:4a:a4:
                    3c:7c:18:45:b9:d2:d9:84:e9:55:54:17:f3:d5:56:
                    83:4b:89:0c:cf:49:7f:97:b1:34:01:60:13:93:71:
                    eb:a5:cf:2d:c1:b2:0b:00:2b:b4:9f:cc:bb:34:aa:
                    20:59:e5:b9:ce:cd:d3:34:3a:de:4d:80:ab:cc:24:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:15:F2:DE:61:91:7F:D0:18:9A:3F:D8:29:80:96:65:D2:6E:86:B9
            X509v3 Authority Key Identifier:
                keyid:89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:23:c5:af:75:15:0d:6b:73:c2:e8:1c:d0:4a:cc:af:51:f1:
         a3:6f:9d:c9:fa:bb:e8:82:d2:b6:7e:50:58:63:10:d8:31:1b:
         06:9c:86:38:e0:05:17:6a:38:35:c5:7a:32:ab:59:7f:60:6a:
         63:24:ba:f8:eb:98:68:2d:61:06:9b:0a:3f:f7:d5:20:b2:b2:
         99:41:9b:09:3a:fb:c3:c8:59:88:7e:53:a7:8d:5d:d6:e6:23:
         08:ed:75:fc:3c:bd:8f:7e:4c:c3:92:3e:fe:c6:0a:97:f9:f4:
         19:d3:54:1d:77:d5:05:ea:2e:b1:4d:62:b9:fd:a8:e1:64:8b:
         a8:c9:c3:9b:36:79:08:ec:a8:7c:cf:46:44:6e:89:e5:cc:d1:
         04:82:36:48:93:1c:4c:4e:ef:c8:4d:dd:04:7c:2b:78:36:77:
         8d:ed:fe:e2:59:a5:31:0a:69:37:6d:66:41:83:83:85:48:04:
         0e:dd:44:44:0e:75:6a:17:af:ba:ef:ff:a8:76:19:c8:97:2a:
         65:8f:96:33:be:3b:69:2f:9d:70:2b:1d:08:a9:d4:57:02:64:
         5b:3a:48:b7:a8:77:97:ff:36:ac:6d:db:d4:c1:63:f6:0d:1d:
         11:08:b0:d3:5e:06:13:56:91:79:e0:2c:d5:4e:68:31:97:24:
         e1:6a:c2:26
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RUEwMzExMC8GA1UEBRMoODlFMzY5M0I3MTIzNjhCMEZBQ0U2QkE0RTQ2Nzk3MDhB
RjM5MzhCNTAeFw0yNjAzMjUwODI1MzZaFw0yNjA0MDEwODI1MzZaMBgxFjAUBgNV
BAMTDTY5YzM5YzAwLWNjZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCOY6AdKAS3caF+ax8GMvjOVGX7O2K6C5bf+Hx0r+1yMzsPl4zRYcfPz4KWk9V
gzJnXUTD86ErG2O88ZJ78UDpr51EDMfSCi0Q49uJqvMngg3pqyfipVVPeBXS4w80
xAcHIQqIMn6nmCrzAQgG/T7JY4VQWsWnevEQOKkvY0y/Fz8bFFl44PyhO3lRghiz
0Q6QxmTRKPmlM3eoR5iehO1CqanKeaGjjbehD0LU3hsuGFY5Eett7KpwZNggdBZT
oehKpDx8GEW50tmE6VVUF/PVVoNLiQzPSX+XsTQBYBOTceulzy3BsgsAK7SfzLs0
qiBZ5bnOzdM0Ot5NgKvMJJrfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzhXy3mGR
f9AYmj/YKYCWZdJuhrkwHwYDVR0jBBgwFoAUieNpO3EjaLD6zmuk5GeXCK85OLUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFQTAzL0FFNzA5QTBDMjRE
QzExRjFBQUY1QjM0QUFEODMzNzczL2llTnBPM0VqYUxENnptdWs1R2VYQ0s4NU9M
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaWVOcE8zRWphTEQ2em11azVHZVhDSzg1T0xVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF
QTAzL0FFNzA5QTBDMjREQzExRjFBQUY1QjM0QUFEODMzNzczL2llTnBPM0VqYUxE
NnptdWs1R2VYQ0s4NU9MVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBaI8WvdRUNa3PC6BzQSsyvUfGjb53J+rvogtK2flBYYxDYMRsGnIY44AUXajg1
xXoyq1l/YGpjJLr465hoLWEGmwo/99UgsrKZQZsJOvvDyFmIflOnjV3W5iMI7XX8
PL2PfkzDkj7+xgqX+fQZ01Qdd9UF6i6xTWK5/ajhZIuoycObNnkI7Kh8z0ZEbonl
zNEEgjZIkxxMTu/ITd0EfCt4NneN7f7iWaUxCmk3bWZBg4OFSAQO3UREDnVqF6+6
7/+odhnIlyplj5YzvjtpL51wKx0IqdRXAmRbOki3qHeX/zasbdvUwWP2DR0RCLDT
XgYTVpF54CzVTmgxlyThasIm
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:06:14 2026 by rpki-client