Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File:                     Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier:          GkRFjqlF6ay9YM1qEMZNROJDbr+ylqIds+P7M1fTlsE=
Subject key identifier:   C2:9C:2A:99:5A:1B:15:62:03:CE:91:BE:7C:64:3A:94:8A:AC:F4:50
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer:       /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial:       0CCC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number:          0CC4
Signing time:             Tue 24 Mar 2026 18:11:42 +0000
Manifest this update:     Tue 24 Mar 2026 18:11:42 +0000
Manifest next update:     Tue 31 Mar 2026 18:11:42 +0000
Files and hashes:         1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: UMf+UmN7a9N2jjvj5JuEHnm9AQ88n7in08MGOwAEJyg=)
                          2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: QuCnvPryU+p8dBWWOPW2KrTltF89H58QfoFBQxj01yQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
                          rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3276 (0xccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
        Validity
            Not Before: Mar 24 18:11:42 2026 GMT
            Not After : Mar 31 18:11:42 2026 GMT
        Subject: CN=69c2d3de-2ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:77:c7:73:31:42:ea:89:de:62:30:ea:c5:
                    c4:3c:0e:5b:93:b2:f7:18:ae:96:c5:9f:37:87:80:
                    f4:9b:3f:a6:41:4e:91:a1:f9:19:07:04:65:90:74:
                    40:8d:08:24:85:f9:e6:15:0f:85:f2:61:d6:37:b2:
                    23:2e:bd:24:ce:cc:b9:57:4a:d5:4d:5a:ac:ce:56:
                    08:14:a4:c1:ae:7d:b1:07:02:d8:87:0a:8a:bf:25:
                    e5:78:28:ed:0c:9d:96:2f:8f:67:26:75:87:b6:4f:
                    e1:01:ba:bd:27:fa:c8:9b:54:7f:00:e6:2e:67:64:
                    75:d7:fe:57:5b:d8:aa:38:89:2d:b9:16:72:d2:12:
                    ac:99:de:f7:f7:49:3b:c8:1d:f0:92:c8:2a:65:e0:
                    db:22:65:89:35:31:37:1f:ec:d9:06:80:18:b4:13:
                    af:c0:0d:9b:08:de:8e:50:91:8d:a1:55:fa:0b:06:
                    86:d9:0e:3e:b0:b8:19:e0:b3:1a:83:a8:29:cb:da:
                    da:20:b3:22:0f:71:cc:3f:2e:4e:64:1d:cf:7f:0b:
                    57:f6:fb:d4:12:03:4c:72:51:de:c8:e1:3d:48:af:
                    3c:2a:19:cc:2a:4a:bc:52:84:39:30:cd:0c:24:15:
                    4e:84:2b:19:7d:0f:8e:4c:3d:db:9b:de:ff:06:8c:
                    c0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9C:2A:99:5A:1B:15:62:03:CE:91:BE:7C:64:3A:94:8A:AC:F4:50
            X509v3 Authority Key Identifier:
                keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:48:26:09:8a:b2:63:2a:3b:d2:95:47:34:0e:77:7e:bc:d4:
         4a:b4:96:1f:0b:d8:f6:4d:3f:26:5a:e0:02:e6:55:56:82:dd:
         21:31:fc:58:fb:c2:e5:7e:e7:84:4f:19:11:03:6e:7b:ad:89:
         d4:c2:53:44:59:d1:02:21:19:23:d1:80:5a:b5:ef:91:b7:e3:
         32:aa:96:2d:d7:8b:bb:dc:76:47:e2:83:d3:4f:5a:17:6d:87:
         d4:64:09:9c:f6:38:a7:5c:ee:7e:4e:46:e9:b9:9f:8f:68:5c:
         32:50:f3:b6:22:b1:a5:c4:33:7a:69:d0:0e:f0:b6:bf:57:42:
         a8:21:f4:88:ad:93:b4:fa:2a:93:e1:ab:43:71:be:c3:ae:62:
         da:15:96:de:48:2b:3e:44:d2:b8:18:b3:f1:f5:72:f1:14:9b:
         79:d3:c4:a5:6d:b2:45:54:8a:30:0b:fe:6d:3f:c5:b6:32:97:
         b7:0e:e9:87:b7:7d:d5:aa:7c:42:d6:46:5e:e3:04:fc:90:5b:
         92:15:a1:ba:be:0c:8f:60:f0:cf:f3:ff:82:8b:3d:10:5f:4e:
         6a:26:67:89:2e:d0:08:8a:c0:d9:05:22:54:da:79:41:0b:9f:
         4a:0e:53:81:b9:03:9c:d4:bd:ea:5b:7a:67:65:59:dc:be:82:
         17:fb:a9:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE0OUYxMTAvBgNVBAUTKDJBREQ1QUQ4RkI0M0FERDgwRDUyQkI1ODM2OTNDMzFC
OEQ5QUIyRUMwHhcNMjYwMzI0MTgxMTQyWhcNMjYwMzMxMTgxMTQyWjAYMRYwFAYD
VQQDEw02OWMyZDNkZS0yYWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzE53x3MxQuqJ3mIw6sXEPA5bk7L3GK6WxZ83h4D0mz+mQU6RofkZBwRlkHRA
jQgkhfnmFQ+F8mHWN7IjLr0kzsy5V0rVTVqszlYIFKTBrn2xBwLYhwqKvyXleCjt
DJ2WL49nJnWHtk/hAbq9J/rIm1R/AOYuZ2R11/5XW9iqOIktuRZy0hKsmd7390k7
yB3wksgqZeDbImWJNTE3H+zZBoAYtBOvwA2bCN6OUJGNoVX6CwaG2Q4+sLgZ4LMa
g6gpy9raILMiD3HMPy5OZB3PfwtX9vvUEgNMclHeyOE9SK88KhnMKkq8UoQ5MM0M
JBVOhCsZfQ+OTD3bm97/BozAZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKcKpla
GxViA86RvnxkOpSKrPRQMB8GA1UdIwQYMBaAFCrdWtj7Q63YDVK7WDaTwxuNmrLs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTQ5Ri9ERjAxNTgwODA4
RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJkZ05VcnRZTnBQREc0MmFz
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t0MWEyUHREcmRnTlVydFlOcFBERzQyYXN1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTQ5Ri9ERjAxNTgwODA4RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJk
Z05VcnRZTnBQREc0MmFzdXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlkgmCYqyYyo70pVHNA53frzUSrSWHwvY9k0/JlrgAuZVVoLdITH8WPvC5X7n
hE8ZEQNue62J1MJTRFnRAiEZI9GAWrXvkbfjMqqWLdeLu9x2R+KD009aF22H1GQJ
nPY4p1zufk5G6bmfj2hcMlDztiKxpcQzemnQDvC2v1dCqCH0iK2TtPoqk+GrQ3G+
w65i2hWW3kgrPkTSuBiz8fVy8RSbedPEpW2yRVSKMAv+bT/FtjKXtw7ph7d91ap8
QtZGXuME/JBbkhWhur4Mj2Dwz/P/gos9EF9OaiZniS7QCIrA2QUiVNp5QQufSg5T
gbkDnNS96lt6Z2VZ3L6CF/upuA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:16:05 2026 by rpki-client