Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
File:                     mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json)
Hash identifier:          3bpkmxaGcEsR4TXodCGfrK/j5vxZ/nQd2Pqp89CaDE4=
Subject key identifier:   1A:2F:EB:6A:CC:53:B5:90:32:4C:7F:0E:6B:EB:02:33:3B:D6:9E:AC
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Certificate issuer:       /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial:       0781
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
Manifest number:          0771
Signing time:             Tue 24 Mar 2026 21:19:30 +0000
Manifest this update:     Tue 24 Mar 2026 21:19:29 +0000
Manifest next update:     Tue 31 Mar 2026 21:19:29 +0000
Files and hashes:         1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: F8XDZZevtNeRZtbnnCU39y9/+snrsYFMTLSTmLE3MQU=)
                          2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: qR0zYrZcU8j5K8WV7bPn4xhqvhYEokgOOEVOXblOyTg=)
                          3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: Pp0Q2Rt/MPS3CBGeHmja8TJHMrNs3vbhSj9LYTXUoPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1921 (0x781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
        Validity
            Not Before: Mar 24 21:19:29 2026 GMT
            Not After : Mar 31 21:19:29 2026 GMT
        Subject: CN=69c2ffe2-70ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:bc:84:fb:46:8b:a7:2e:6e:c6:10:4e:7c:d2:
                    e4:64:eb:ad:92:3a:57:ce:02:db:e7:b2:ab:fc:1a:
                    50:75:98:25:47:c4:ef:93:69:8e:ec:84:b7:df:fe:
                    66:7f:42:f1:15:f3:08:6d:6f:05:39:ad:cb:c4:73:
                    29:c4:33:fc:40:0c:a0:56:5b:5d:9d:c5:74:0a:42:
                    25:b3:87:95:e4:7d:bb:76:49:0b:81:d0:6b:cf:ba:
                    44:b1:92:8f:25:08:63:07:84:70:ec:6b:05:0c:6e:
                    d4:1c:a0:0f:c8:51:35:0b:bf:0f:fb:d8:88:ce:3a:
                    47:24:8f:d9:28:38:ca:91:3a:33:6a:10:7e:60:9b:
                    2b:22:1c:bb:54:b5:be:c8:13:54:2f:2f:71:b4:f8:
                    8f:9d:5f:40:90:3a:e5:d8:8f:83:64:ce:73:7e:7d:
                    eb:9b:1b:42:ea:f9:b4:6c:a7:52:76:3f:43:6c:ba:
                    55:8f:87:de:fd:54:3f:1c:ab:ce:41:bd:18:17:81:
                    7b:76:6f:c7:68:18:49:e1:b3:8a:1e:3d:b0:03:79:
                    c9:9b:8c:43:2f:36:a5:27:83:2a:2e:a3:f9:dd:70:
                    ba:1e:49:a6:9c:9f:db:a8:c3:2a:51:f9:a0:31:c4:
                    ec:a7:f1:7b:a1:07:8a:d4:bf:b1:52:88:c5:62:51:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2F:EB:6A:CC:53:B5:90:32:4C:7F:0E:6B:EB:02:33:3B:D6:9E:AC
            X509v3 Authority Key Identifier:
                keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ad:1f:d4:18:44:a1:2c:52:1e:90:0b:a4:76:37:a3:28:36:
         c6:ad:ae:7b:b9:39:3b:df:0c:26:90:c0:aa:78:72:22:1d:a2:
         28:aa:db:24:df:69:6a:70:7a:8b:5c:6f:9a:ec:2f:5b:5a:5c:
         24:a8:3a:94:46:f3:bb:8f:ef:f9:d8:f9:68:12:af:84:8e:28:
         8b:72:d8:4d:6b:98:76:bc:0b:fe:9d:8c:6f:f9:30:b8:f0:e1:
         3f:0e:fe:cb:fa:32:a6:0f:63:ab:00:83:4b:de:6d:18:9c:4f:
         f8:3d:9a:e5:e5:45:75:7a:44:e0:d0:62:56:b5:e2:ad:39:ff:
         aa:b9:01:c6:d0:42:7c:97:7e:5d:a9:35:f1:5d:01:5f:a2:15:
         b9:b6:3d:e7:49:36:96:4d:63:d3:fc:d0:fb:40:d9:5a:94:bf:
         49:05:1f:96:4e:14:0b:52:59:32:ee:dd:8e:7d:63:6a:14:ea:
         6c:26:0f:b4:c0:4a:c3:55:fc:13:48:6e:73:cc:1d:3a:be:34:
         63:3f:de:3f:8b:9b:9d:94:40:f8:cf:18:9c:c5:7e:bd:cc:7e:
         1b:ca:20:b2:1f:9a:91:d6:63:cf:0c:0a:e9:0d:4b:81:ed:c7:
         00:64:df:d3:f3:2e:09:3e:55:d0:5b:24:d7:24:a3:4b:2a:b3:
         1e:b7:12:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI1QzcxMTAvBgNVBAUTKDlBMTQ4MzZBMjE4NkQxOTcyMjE0ODYyMjQ4MzU1REFC
OEJCOTczNjYwHhcNMjYwMzI0MjExOTI5WhcNMjYwMzMxMjExOTI5WjAYMRYwFAYD
VQQDEw02OWMyZmZlMi03MGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+7yE+0aLpy5uxhBOfNLkZOutkjpXzgLb57Kr/BpQdZglR8Tvk2mO7IS33/5m
f0LxFfMIbW8FOa3LxHMpxDP8QAygVltdncV0CkIls4eV5H27dkkLgdBrz7pEsZKP
JQhjB4Rw7GsFDG7UHKAPyFE1C78P+9iIzjpHJI/ZKDjKkTozahB+YJsrIhy7VLW+
yBNULy9xtPiPnV9AkDrl2I+DZM5zfn3rmxtC6vm0bKdSdj9DbLpVj4fe/VQ/HKvO
Qb0YF4F7dm/HaBhJ4bOKHj2wA3nJm4xDLzalJ4MqLqP53XC6HkmmnJ/bqMMqUfmg
McTsp/F7oQeK1L+xUojFYlHMlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBov62rM
U7WQMkx/DmvrAjM71p6sMB8GA1UdIwQYMBaAFJoUg2ohhtGXIhSGIkg1XauLuXNm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVDNy8yNDM5ODIzMDU0
ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBaY2lGSVlpU0RWZHE0dTVj
MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21oU0RhaUdHMFpjaUZJWWlTRFZkcTR1NWMyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjVDNy8yNDM5ODIzMDU0ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBa
Y2lGSVlpU0RWZHE0dTVjMlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF60f1BhEoSxSHpALpHY3oyg2xq2ue7k5O98MJpDAqnhyIh2iKKrbJN9panB6
i1xvmuwvW1pcJKg6lEbzu4/v+dj5aBKvhI4oi3LYTWuYdrwL/p2Mb/kwuPDhPw7+
y/oypg9jqwCDS95tGJxP+D2a5eVFdXpE4NBiVrXirTn/qrkBxtBCfJd+Xak18V0B
X6IVubY950k2lk1j0/zQ+0DZWpS/SQUflk4UC1JZMu7djn1jahTqbCYPtMBKw1X8
E0huc8wdOr40Yz/eP4ubnZRA+M8YnMV+vcx+G8ogsh+akdZjzwwK6Q1Lge3HAGTf
0/MuCT5V0Fsk1ySjSyqzHrcSTw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:43:02 2026 by rpki-client