Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
File:                     C7AFcf321rzGNEbrOmSR-uqpCG8.mft (raw, json)
Hash identifier:          +Nf+AwiR/CqZOVSWjVd1g8kUnBvovc0k3T6zZKg8nio=
Subject key identifier:   DE:8E:DD:B1:03:A5:D6:F7:AD:88:7C:C7:E3:AD:DD:1F:83:BF:B7:EA
Authority key identifier: 0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F
Certificate issuer:       /CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
Certificate serial:       05ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
Manifest number:          05D9
Signing time:             Tue 24 Mar 2026 22:42:48 +0000
Manifest this update:     Tue 24 Mar 2026 22:42:47 +0000
Manifest next update:     Tue 31 Mar 2026 22:42:47 +0000
Files and hashes:         1: C7AFcf321rzGNEbrOmSR-uqpCG8.crl (hash: HcoDmBvUh91ResgcwkoypPTAyp+A5u+pnpOnxJHToHk=)
                          2: 6B191E20F75811EB9C2B5D4DC4F9AE02.roa (hash: brrWyiXDAT96zPwT9YFF9H7HSt3GNNOYu7ZR6/bGT4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl
                          rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1517 (0x5ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC83, serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F
        Validity
            Not Before: Mar 24 22:42:47 2026 GMT
            Not After : Mar 31 22:42:47 2026 GMT
        Subject: CN=69c31367-e02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:51:39:08:a5:b9:df:ab:4c:1e:07:12:1d:34:
                    6e:4e:41:71:97:62:00:95:cc:ec:cc:40:7b:dd:29:
                    44:cd:6f:6f:5f:60:17:5e:fb:e4:66:3f:9e:2e:cc:
                    e9:b6:e2:03:d7:41:fa:06:0c:98:a7:3f:8f:0f:4c:
                    b1:f7:84:a2:d5:ab:43:29:59:7f:aa:41:cb:9b:a3:
                    00:08:1a:a0:ab:05:a5:6b:2c:97:13:33:26:e6:5a:
                    6b:d1:b1:90:0e:e3:b5:54:39:ce:6d:11:96:0c:37:
                    88:1c:f4:54:1f:3d:a6:03:9e:23:15:5a:4b:0e:28:
                    63:60:9c:8d:95:0f:25:d7:29:1b:6d:4f:a6:4c:f4:
                    e3:a7:c8:a6:65:28:8d:a4:eb:07:e3:dc:bf:b2:99:
                    a3:b1:36:56:93:d5:50:d6:20:84:af:ae:22:d3:dd:
                    af:7e:29:27:40:a5:56:fb:09:53:49:0f:4f:f3:e3:
                    b6:4c:4c:34:38:dc:4c:34:00:da:55:2c:e9:b9:70:
                    49:dd:7a:32:f2:23:6c:92:2c:a4:ef:d4:0d:a5:bc:
                    86:d5:15:c5:a5:88:92:12:7f:eb:21:fa:5f:e7:a1:
                    d2:dd:1f:49:7c:88:08:fc:c4:7a:e3:84:fd:82:34:
                    b5:d2:95:8b:ad:37:b7:1a:b5:b0:0b:fc:fa:d3:25:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8E:DD:B1:03:A5:D6:F7:AD:88:7C:C7:E3:AD:DD:1F:83:BF:B7:EA
            X509v3 Authority Key Identifier:
                keyid:0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ae:4e:6e:1e:c8:71:d6:f6:65:1e:b9:9a:6b:74:fe:de:c8:
         15:7c:d0:be:56:d8:6c:1f:75:b5:60:b9:d1:a7:8a:86:a9:e3:
         7e:cc:dc:6f:a3:1d:03:fe:8d:3e:af:a7:a8:82:2e:8a:e1:de:
         fb:13:37:4e:3d:38:b0:bd:c0:80:1e:0e:e5:85:aa:28:75:0e:
         3f:ee:b6:f0:ee:eb:cc:e1:46:80:ec:bc:82:a0:70:aa:e0:70:
         6b:b2:27:6a:02:49:61:07:4e:df:63:04:b5:45:1e:84:55:4e:
         c4:9d:5a:34:86:95:3c:a5:21:8f:78:3b:c2:4d:f5:ed:1b:64:
         f4:78:e2:4d:9f:c9:77:11:1a:5e:13:7b:e4:89:25:84:9f:06:
         7e:4f:71:82:c4:82:9c:62:7b:1c:83:df:74:74:20:c9:f6:db:
         ad:29:74:c5:4a:c0:48:23:8b:79:d9:6b:04:ef:b8:49:98:04:
         7c:86:ce:4a:e4:95:e5:b4:a9:58:81:2f:38:53:ae:66:cb:e2:
         67:ca:0a:c1:26:6e:c9:22:ff:7b:1a:b9:e4:1c:77:0a:ad:de:
         99:1d:18:e1:a9:b9:f1:a6:03:1f:36:6e:2a:76:0f:66:c3:d4:
         6c:7c:dd:bb:1e:7c:6f:ec:08:94:08:3b:08:82:09:e3:d0:dc:
         7f:eb:89:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFDODMxMTAvBgNVBAUTKDBCQjAwNTcxRkRGNkQ2QkNDNjM0NDZFQjNBNjQ5MUZB
RUFBOTA4NkYwHhcNMjYwMzI0MjI0MjQ3WhcNMjYwMzMxMjI0MjQ3WjAYMRYwFAYD
VQQDEw02OWMzMTM2Ny1lMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3VE5CKW536tMHgcSHTRuTkFxl2IAlczszEB73SlEzW9vX2AXXvvkZj+eLszp
tuID10H6BgyYpz+PD0yx94Si1atDKVl/qkHLm6MACBqgqwWlayyXEzMm5lpr0bGQ
DuO1VDnObRGWDDeIHPRUHz2mA54jFVpLDihjYJyNlQ8l1ykbbU+mTPTjp8imZSiN
pOsH49y/spmjsTZWk9VQ1iCEr64i092vfiknQKVW+wlTSQ9P8+O2TEw0ONxMNADa
VSzpuXBJ3Xoy8iNskiyk79QNpbyG1RXFpYiSEn/rIfpf56HS3R9JfIgI/MR644T9
gjS10pWLrTe3GrWwC/z60yVHbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6O3bED
pdb3rYh8x+Ot3R+Dv7fqMB8GA1UdIwQYMBaAFAuwBXH99ta8xjRG6zpkkfrqqQhv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My80QkFGQjExOEY3
NTYxMUVCOTlGOTEwNENDNEY5QUUwMi9DN0FGY2YzMjFyekdORWJyT21TUi11cXBD
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M3QUZjZjMyMXJ6R05FYnJPbVNSLXVxcENHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUM4My80QkFGQjExOEY3NTYxMUVCOTlGOTEwNENDNEY5QUUwMi9DN0FGY2YzMjFy
ekdORWJyT21TUi11cXBDRzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEa5Obh7Icdb2ZR65mmt0/t7IFXzQvlbYbB91tWC50aeKhqnjfszcb6MdA/6N
Pq+nqIIuiuHe+xM3Tj04sL3AgB4O5YWqKHUOP+628O7rzOFGgOy8gqBwquBwa7In
agJJYQdO32MEtUUehFVOxJ1aNIaVPKUhj3g7wk317Rtk9HjiTZ/JdxEaXhN75Ikl
hJ8Gfk9xgsSCnGJ7HIPfdHQgyfbbrSl0xUrASCOLedlrBO+4SZgEfIbOSuSV5bSp
WIEvOFOuZsviZ8oKwSZuySL/exq55Bx3Cq3emR0Y4am58aYDHzZuKnYPZsPUbHzd
ux58b+wIlAg7CIIJ49Dcf+uJCg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:16 2026 by rpki-client