Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
File:                     cljf1W-lpIfw1KzGnK2xvqwvlw4.mft (raw, json)
Hash identifier:          Nufz1SHN+qeKaE/9NCAQBCwZvkh01CHnomB6xzHLf1U=
Subject key identifier:   C9:68:45:61:FE:E8:CA:8B:28:1A:AD:50:7E:80:5E:D6:31:45:23:E9
Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
Certificate issuer:       /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
Manifest number:          E4
Signing time:             Wed 25 Mar 2026 05:48:57 +0000
Manifest this update:     Wed 25 Mar 2026 05:48:57 +0000
Manifest next update:     Wed 01 Apr 2026 05:48:57 +0000
Files and hashes:         1: cljf1W-lpIfw1KzGnK2xvqwvlw4.crl (hash: 0qZpBJa2FacSjzqA6vxWOyXbf1k1a9/6cP4URfhFzeI=)
                          2: BE713C72E06211F0BC8E94E0746F56BC.roa (hash: EFjR0asu4wd/yeWWK7gzSOj/T05MOi3CBtWkuJ6nqxA=)
                          3: 99AB65EEDA2C11EFAC53882EC4F9AE02.roa (hash: XuBY8r+m0nn8vqkTh0uM6kdpQk4Jsat9oInYlsF5zpo=)
                          4: 9A1D26E8DA2C11EFAC53882EC4F9AE02.roa (hash: 3nJqGrjMdf5D7MugjfLyV3mlrWn6RF9SKC0CMqH5eTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
                          rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
        Validity
            Not Before: Mar 25 05:48:57 2026 GMT
            Not After : Apr  1 05:48:57 2026 GMT
        Subject: CN=69c37749-fd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:18:a9:14:26:9d:7c:e2:2b:85:ab:99:fb:
                    c6:5f:61:b0:b3:95:8e:15:02:69:35:a9:c2:8a:4c:
                    56:85:4e:e5:13:f0:58:91:e9:e5:3a:a8:b6:dd:2a:
                    bc:9c:82:08:40:ba:af:5c:f5:76:65:00:2e:00:15:
                    9f:ef:eb:ba:28:aa:fb:fb:0f:22:e7:66:48:a4:66:
                    b3:a9:67:84:1c:25:98:b5:e0:d5:32:50:db:a5:70:
                    55:d9:59:cf:49:75:d8:01:35:95:a1:98:8a:f3:4b:
                    5b:7e:7e:a7:87:84:de:25:69:d9:56:5d:ce:a9:e5:
                    53:ae:16:b7:14:4c:2c:ce:f2:d6:a9:40:ed:50:da:
                    b1:b5:ca:a7:bb:66:92:c0:c6:fe:31:60:67:59:49:
                    b1:4a:36:8a:a4:6f:82:39:58:17:b8:e7:f0:ba:74:
                    23:08:90:4b:9f:e0:8d:b0:96:f5:f6:4c:f3:b8:8c:
                    b3:8f:11:92:67:ce:6b:50:02:f0:2e:27:37:80:5b:
                    be:b6:58:e6:f8:c9:5a:1e:8c:80:bd:25:7c:55:70:
                    b4:9e:d8:e9:bf:0a:5d:17:b9:80:97:4b:dd:8a:b3:
                    59:a6:79:d9:f3:b8:7b:e4:ed:2d:f6:11:e6:39:01:
                    6f:24:2c:04:6c:69:63:30:6c:53:68:a1:3e:fb:2e:
                    db:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:68:45:61:FE:E8:CA:8B:28:1A:AD:50:7E:80:5E:D6:31:45:23:E9
            X509v3 Authority Key Identifier:
                keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6f:2e:b5:a5:52:fb:50:7c:7c:1e:92:04:f5:da:bc:3c:ec:
         01:ca:41:a6:c8:d8:25:78:96:43:7b:01:f9:fa:be:50:b0:c0:
         59:69:53:a9:2d:eb:6a:35:77:4f:bd:9a:78:4a:18:de:e6:ae:
         6b:43:52:e6:27:b3:8a:30:82:09:e3:c8:34:cf:be:a7:be:fe:
         c3:35:44:18:a5:7e:0c:07:77:a4:ff:b2:e3:c6:29:84:ef:95:
         e7:3f:97:73:8f:1f:c1:a3:73:93:a6:73:1f:55:15:1a:3b:5a:
         c9:34:ac:dc:8b:28:14:5c:82:e9:e1:09:37:f2:f1:2d:0a:0a:
         9e:b0:6e:00:f2:fd:1c:2b:de:e1:b8:6d:7b:17:4a:c4:07:25:
         bc:fa:98:5c:85:91:63:23:f4:12:cb:2c:8d:66:89:04:49:17:
         9d:bc:fc:43:e9:0d:5d:b5:dc:5e:21:c9:17:62:2e:13:a8:fa:
         bd:38:b6:e8:fa:ec:8f:b5:78:e5:b7:3a:3c:27:82:b0:30:ba:
         68:95:c1:2a:39:e2:f2:b8:3b:d9:86:7d:60:62:fd:57:2b:a3:
         97:23:9b:0e:ef:23:3c:8b:82:1b:21:ca:cb:49:96:99:6c:9d:
         bc:d4:aa:e9:0d:05:0e:6e:5b:f7:88:f7:1b:54:d3:f7:03:12:
         a6:b1:70:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA1OUUxMTAvBgNVBAUTKDcyNThERkQ1NkZBNUE0ODdGMEQ0QUNDNjlDQURCMUJF
QUMyRjk3MEUwHhcNMjYwMzI1MDU0ODU3WhcNMjYwNDAxMDU0ODU3WjAYMRYwFAYD
VQQDEw02OWMzNzc0OS1mZDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvEsYqRQmnXziK4WrmfvGX2Gws5WOFQJpNanCikxWhU7lE/BYkenlOqi23Sq8
nIIIQLqvXPV2ZQAuABWf7+u6KKr7+w8i52ZIpGazqWeEHCWYteDVMlDbpXBV2VnP
SXXYATWVoZiK80tbfn6nh4TeJWnZVl3OqeVTrha3FEwszvLWqUDtUNqxtcqnu2aS
wMb+MWBnWUmxSjaKpG+COVgXuOfwunQjCJBLn+CNsJb19kzzuIyzjxGSZ85rUALw
Lic3gFu+tljm+MlaHoyAvSV8VXC0ntjpvwpdF7mAl0vdirNZpnnZ87h75O0t9hHm
OQFvJCwEbGljMGxTaKE++y7bQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMloRWH+
6MqLKBqtUH6AXtYxRSPpMB8GA1UdIwQYMBaAFHJY39VvpaSH8NSsxpytsb6sL5cO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU5RS81NTY2NkI1NkQ5
RDAxMUVGOThCODVFNkRDNEY5QUUwMi9jbGpmMVctbHBJZncxS3pHbksyeHZxd3Zs
dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsamYxVy1scElmdzFLekduSzJ4dnF3dmx3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDU5RS81NTY2NkI1NkQ5RDAxMUVGOThCODVFNkRDNEY5QUUwMi9jbGpmMVctbHBJ
ZncxS3pHbksyeHZxd3ZsdzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHW8utaVS+1B8fB6SBPXavDzsAcpBpsjYJXiWQ3sB+fq+ULDAWWlTqS3rajV3
T72aeEoY3uaua0NS5iezijCCCePINM++p77+wzVEGKV+DAd3pP+y48YphO+V5z+X
c48fwaNzk6ZzH1UVGjtayTSs3IsoFFyC6eEJN/LxLQoKnrBuAPL9HCve4bhtexdK
xAclvPqYXIWRYyP0EsssjWaJBEkXnbz8Q+kNXbXcXiHJF2IuE6j6vTi26Prsj7V4
5bc6PCeCsDC6aJXBKjni8rg72YZ9YGL9VyujlyObDu8jPIuCGyHKy0mWmWydvNSq
6Q0FDm5b94j3G1TT9wMSprFwZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:05 2026 by rpki-client