Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
File:                     dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json)
Hash identifier:          //cI3JM2M5xAg8j04app46ub6FVwMaYqWjv6jMg8buk=
Subject key identifier:   4D:2B:D0:F1:F7:AE:A5:47:A8:A6:E1:D0:4B:D4:18:63:9D:49:1D:A3
Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28
Certificate issuer:       /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28
Certificate serial:       06E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
Manifest number:          06E1
Signing time:             Thu 26 Mar 2026 21:59:31 +0000
Manifest this update:     Thu 26 Mar 2026 21:59:30 +0000
Manifest next update:     Thu 02 Apr 2026 21:59:30 +0000
Files and hashes:         1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: mabjgKQhMgwgfbt7WcGnHXnIFweG4qWowx6KhaQWA2U=)
                          2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: i4FVSmJpnZhw4sFX7OQvDlYbncKwDpFbIR+KRcYNlfs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl
                          rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769 (0x6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28
        Validity
            Not Before: Mar 26 21:59:30 2026 GMT
            Not After : Apr  2 21:59:30 2026 GMT
        Subject: CN=69c5ac43-7f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:92:33:d9:7a:dd:74:81:f4:54:1b:cf:59:
                    d1:cf:84:69:07:a9:fe:61:a6:47:f0:8e:df:f9:93:
                    5f:8b:a7:0f:a9:df:e8:23:50:9f:9d:32:4a:9e:29:
                    a9:49:12:f5:df:7f:18:7f:72:6f:01:44:80:aa:fc:
                    30:db:c7:cc:7c:93:ca:ef:19:5f:df:75:e7:01:71:
                    3a:99:d0:ce:1b:1b:5a:03:cb:48:76:c0:64:67:3a:
                    b5:86:d3:70:9c:75:14:27:cd:42:d0:ef:11:a3:8b:
                    09:f5:b5:d5:c0:ff:82:bb:5c:05:0a:3e:93:55:cd:
                    65:9b:61:b1:53:da:8c:0f:d7:61:a2:9b:55:2c:b6:
                    15:d2:da:56:66:d9:2c:b0:7c:15:f4:1f:6a:d0:8b:
                    0e:5a:d3:44:b8:12:63:37:6b:67:08:84:82:1e:8c:
                    bc:3c:79:3c:05:9f:be:5f:49:93:f6:5c:27:b5:eb:
                    b4:cf:68:0c:8a:5b:53:be:7d:f2:fd:ef:e9:9b:7a:
                    3c:40:ee:a1:05:9e:e5:7b:fe:59:21:db:3e:3e:74:
                    82:ec:2d:35:97:85:d9:29:a4:35:1f:d3:0e:32:0a:
                    c0:d7:71:c4:77:96:0e:05:3a:bf:03:82:42:c3:20:
                    61:c1:26:1b:b5:cd:ab:47:92:14:2f:8c:68:e2:56:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2B:D0:F1:F7:AE:A5:47:A8:A6:E1:D0:4B:D4:18:63:9D:49:1D:A3
            X509v3 Authority Key Identifier:
                keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:70:03:7e:84:ec:f9:46:10:82:aa:06:8e:86:1b:a2:f3:f6:
         33:28:a1:6d:65:28:e1:4d:90:c4:3d:d3:67:87:59:e7:c6:f7:
         39:44:d4:b2:59:19:4d:d6:89:b4:4a:f1:d1:44:b0:81:5f:8a:
         16:49:6f:f6:3a:43:87:4d:b3:dc:bb:ef:c0:be:b1:d4:05:11:
         41:5e:42:4e:13:02:ad:e9:10:4e:61:f2:bd:bc:86:50:3f:73:
         f7:5c:c1:ee:53:7b:42:0f:91:01:50:f3:ec:c9:2f:16:a3:c2:
         85:38:af:a2:8d:18:01:74:af:83:d1:4a:80:84:41:6a:0c:ab:
         fe:22:b7:9e:1c:dd:7d:22:37:20:92:74:01:4a:16:28:a8:9d:
         5a:aa:43:d1:ff:d6:e7:2d:95:7b:e1:ce:0a:c7:e6:ac:ed:d8:
         b6:fd:4a:b4:12:64:2f:67:87:9f:13:35:2d:3a:58:66:43:43:
         ef:2b:b4:22:ea:71:4d:2b:05:37:92:11:45:fb:52:a5:56:48:
         4f:79:4f:3c:8b:43:bb:4d:cc:d7:12:11:5a:15:cc:fe:47:5d:
         d8:5a:52:4e:76:81:b4:87:65:1e:b0:5f:d2:83:e7:dd:78:fa:
         6f:4c:8e:17:db:23:d2:ea:30:1c:45:0b:84:bc:cd:3e:45:02:
         f9:a3:53:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4QUYxMTAvBgNVBAUTKDc0QjFGQzZDQ0MyNzc3NURFRDFGNTk1MjVCMjg3NjYx
QzhCRkVBMjgwHhcNMjYwMzI2MjE1OTMwWhcNMjYwNDAyMjE1OTMwWjAYMRYwFAYD
VQQDEw02OWM1YWM0My03ZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlcWSM9l63XSB9FQbz1nRz4RpB6n+YaZH8I7f+ZNfi6cPqd/oI1CfnTJKnimp
SRL1338Yf3JvAUSAqvww28fMfJPK7xlf33XnAXE6mdDOGxtaA8tIdsBkZzq1htNw
nHUUJ81C0O8Ro4sJ9bXVwP+Cu1wFCj6TVc1lm2GxU9qMD9dhoptVLLYV0tpWZtks
sHwV9B9q0IsOWtNEuBJjN2tnCISCHoy8PHk8BZ++X0mT9lwnteu0z2gMiltTvn3y
/e/pm3o8QO6hBZ7le/5ZIds+PnSC7C01l4XZKaQ1H9MOMgrA13HEd5YOBTq/A4JC
wyBhwSYbtc2rR5IUL4xo4lYq+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0r0PH3
rqVHqKbh0EvUGGOdSR2jMB8GA1UdIwQYMBaAFHSx/GzMJ3dd7R9ZUlsodmHIv+oo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhBRi8xNkJCRDdCNDhE
MTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQxM3RIMWxTV3loMlljaV82
aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RMSDhiTXduZDEzdEgxbFNXeWgyWWNpXzZpZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzhBRi8xNkJCRDdCNDhEMTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQx
M3RIMWxTV3loMlljaV82aWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA5HADfoTs+UYQgqoGjoYbovP2MyihbWUo4U2QxD3TZ4dZ58b3OUTUslkZTdaJ
tErx0USwgV+KFklv9jpDh02z3LvvwL6x1AURQV5CThMCrekQTmHyvbyGUD9z91zB
7lN7Qg+RAVDz7MkvFqPChTivoo0YAXSvg9FKgIRBagyr/iK3nhzdfSI3IJJ0AUoW
KKidWqpD0f/W5y2Ve+HOCsfmrO3Ytv1KtBJkL2eHnxM1LTpYZkND7yu0IupxTSsF
N5IRRftSpVZIT3lPPItDu03M1xIRWhXM/kdd2FpSTnaBtIdlHrBf0oPn3Xj6b0yO
F9sj0uowHEULhLzNPkUC+aNTUA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:16 2026 by rpki-client