Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
File:                     iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json)
Hash identifier:          cthPnQGMo3dC6KaUTsJnqyIu1LEKRpmcf0XZYVj4tss=
Subject key identifier:   55:A6:3C:38:DB:30:31:45:7D:05:74:1F:9E:4B:B0:50:0D:B1:EE:3E
Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
Certificate issuer:       /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
Manifest number:          F9
Signing time:             Wed 25 Mar 2026 05:30:07 +0000
Manifest this update:     Wed 25 Mar 2026 05:30:07 +0000
Manifest next update:     Wed 01 Apr 2026 05:30:07 +0000
Files and hashes:         1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: n41dT3Ql9kbrWY72fXph8geLl0dNGVXEYOktm+ehsFU=)
                          2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: lra+qhDRGNXUaND0a9KhE0KK0EaPsUI652BkcyFm2ic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
                          rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
        Validity
            Not Before: Mar 25 05:30:07 2026 GMT
            Not After : Apr  1 05:30:07 2026 GMT
        Subject: CN=69c372df-8f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:0e:3e:b6:7f:d1:83:6f:45:c8:cf:e9:7c:
                    06:33:c2:f3:e2:7b:19:09:3c:f9:47:e7:71:43:de:
                    4c:f9:c0:62:35:81:ac:ba:ca:0b:bc:fe:c9:aa:ac:
                    30:ed:bc:d6:25:69:d9:9a:ca:69:1e:0c:08:71:8e:
                    ca:1b:42:59:00:cb:b6:3c:10:c5:9d:ff:77:0e:60:
                    f1:0b:e8:a3:8f:d9:bf:8c:a5:47:0c:36:be:dd:9c:
                    84:8d:91:c1:eb:f6:15:e8:ae:ec:f5:16:b9:2b:f4:
                    b4:bf:92:86:52:1d:c5:52:4b:de:f9:5c:03:c1:62:
                    f3:fb:6c:fe:d5:ae:a5:0f:fd:5d:38:88:8b:5e:72:
                    4a:0d:d8:a5:a3:2c:84:1d:e5:50:2c:b5:09:d9:a5:
                    2a:3c:b2:3b:46:6c:97:43:44:f4:08:5e:f6:e9:23:
                    fa:66:bb:47:6c:e0:10:d0:2a:01:b4:bd:58:a4:e5:
                    f9:a9:f3:f5:13:f8:9e:e9:fb:f6:93:5d:27:67:e9:
                    95:4d:48:40:6a:75:72:37:da:b7:d9:bb:b8:95:21:
                    87:d1:5f:66:b6:7b:e8:22:54:d0:0e:23:c6:06:52:
                    dc:8d:fd:e2:c5:94:df:11:f7:9f:c4:3d:bc:ad:38:
                    62:8e:90:c5:84:de:83:c3:09:e3:3e:9f:b6:24:4c:
                    ef:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A6:3C:38:DB:30:31:45:7D:05:74:1F:9E:4B:B0:50:0D:B1:EE:3E
            X509v3 Authority Key Identifier:
                keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2a:58:6d:52:5b:89:4e:20:19:2e:72:e7:ea:b5:7f:57:87:
         5b:1f:1b:1e:6e:f5:f4:1c:39:cc:05:e1:f0:c1:0f:68:a5:d5:
         ba:15:63:52:1b:7d:78:e6:54:cd:bb:90:c6:c8:b8:c1:9a:7d:
         cf:f4:b9:04:73:83:ae:61:3b:47:71:14:3c:84:ad:24:e2:1f:
         6c:5a:d8:80:52:ca:ae:1e:3a:11:9a:ac:8b:1e:ca:61:ea:30:
         c1:26:68:ce:21:85:f9:44:81:b1:c3:1f:02:e1:c2:07:e7:f5:
         a6:4b:28:5b:75:ba:75:f0:40:d6:ab:83:a9:73:a2:a7:77:24:
         f8:5f:79:62:ec:13:3f:9f:3c:ab:6b:8f:30:77:7b:67:3c:92:
         48:2e:e8:ef:04:0f:a9:31:1b:d1:74:f7:e4:c3:60:19:fa:bc:
         40:91:76:2e:0b:fa:97:31:8e:78:0d:2e:55:d8:f7:c4:38:ab:
         9b:69:75:f2:20:8b:b9:9c:9b:b6:d2:90:0f:51:ec:1b:75:ab:
         1a:e2:c4:da:ef:f8:84:73:d9:30:e9:a7:19:23:e9:b3:26:00:
         5d:d0:a1:a2:d7:c3:fb:51:ae:45:88:9c:7d:c3:6a:96:76:48:
         da:9d:02:27:cf:9c:a7:e6:c9:99:32:86:b8:11:4a:b3:b3:62:
         c9:37:01:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkUzQzcxMTAvBgNVBAUTKDg5M0FDNTc5MDE0MTU2MTg2QUVBRjUwMzRCQTBCNDky
NkY5MkUzNzQwHhcNMjYwMzI1MDUzMDA3WhcNMjYwNDAxMDUzMDA3WjAYMRYwFAYD
VQQDEw02OWMzNzJkZi04ZjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArWkOPrZ/0YNvRcjP6XwGM8Lz4nsZCTz5R+dxQ95M+cBiNYGsusoLvP7Jqqww
7bzWJWnZmsppHgwIcY7KG0JZAMu2PBDFnf93DmDxC+ijj9m/jKVHDDa+3ZyEjZHB
6/YV6K7s9Ra5K/S0v5KGUh3FUkve+VwDwWLz+2z+1a6lD/1dOIiLXnJKDdiloyyE
HeVQLLUJ2aUqPLI7RmyXQ0T0CF726SP6ZrtHbOAQ0CoBtL1YpOX5qfP1E/ie6fv2
k10nZ+mVTUhAanVyN9q32bu4lSGH0V9mtnvoIlTQDiPGBlLcjf3ixZTfEfefxD28
rThijpDFhN6DwwnjPp+2JEzv4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWmPDjb
MDFFfQV0H55LsFANse4+MB8GA1UdIwQYMBaAFIk6xXkBQVYYaur1A0ugtJJvkuN0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTNDNy84NjU4ODdCNkIy
NjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZoaHE2dlVEUzZDMGttLVM0
M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTNDNy84NjU4ODdCNkIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9pVHJGZVFGQlZo
aHE2dlVEUzZDMGttLVM0M1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIipYbVJbiU4gGS5y5+q1f1eHWx8bHm719Bw5zAXh8MEPaKXVuhVjUht9eOZU
zbuQxsi4wZp9z/S5BHODrmE7R3EUPIStJOIfbFrYgFLKrh46EZqsix7KYeowwSZo
ziGF+USBscMfAuHCB+f1pksoW3W6dfBA1quDqXOip3ck+F95YuwTP588q2uPMHd7
ZzySSC7o7wQPqTEb0XT35MNgGfq8QJF2Lgv6lzGOeA0uVdj3xDirm2l18iCLuZyb
ttKQD1HsG3WrGuLE2u/4hHPZMOmnGSPpsyYAXdChotfD+1GuRYicfcNqlnZI2p0C
J8+cp+bJmTKGuBFKs7NiyTcBbA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:32:06 2026 by rpki-client