Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
File:                     rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json)
Hash identifier:          +4PggBRAuv+JG/OqUMoVtq9U4HcZgNWAvng23Dr6ahU=
Subject key identifier:   2A:90:26:90:C8:FD:F2:02:10:DB:4A:33:9E:09:52:2E:B1:96:D5:23
Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D
Certificate issuer:       /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
Manifest number:          01BE
Signing time:             Wed 25 Mar 2026 03:10:01 +0000
Manifest this update:     Wed 25 Mar 2026 03:10:01 +0000
Manifest next update:     Wed 01 Apr 2026 03:10:01 +0000
Files and hashes:         1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: 7goY3mdVCm1L8iyIGjC6EeGKHBt6RSO7ZsQ2dz72IBY=)
                          2: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: m2Uv3v7XUW3vXrCq6wyXHCyPqWh0u6BnyHOlUQ7XuZM=)
                          3: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: 9nJcymyhJdyjosWxKF37Ye2GxMONKGYPO84iI01RFGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl
                          rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D
        Validity
            Not Before: Mar 25 03:10:01 2026 GMT
            Not After : Apr  1 03:10:01 2026 GMT
        Subject: CN=69c35209-2b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:72:46:36:36:f1:b7:61:31:f7:2e:4f:62:f8:
                    02:93:60:30:28:87:66:e6:78:b7:5c:49:9d:bd:4a:
                    c8:e0:55:7b:a3:b6:32:34:c6:2d:eb:c5:ec:bd:a9:
                    94:0a:54:7c:94:f0:bd:88:00:12:94:2d:2c:42:20:
                    a5:42:dc:39:ce:19:7a:32:4b:4e:eb:95:8e:f8:5b:
                    b4:26:f7:7c:d5:66:95:f1:42:db:d4:19:c6:f2:db:
                    d2:99:81:11:7c:6e:ca:20:ad:4e:5b:71:40:08:1e:
                    1a:12:53:66:50:e5:4c:91:40:f3:7c:0f:3c:0d:4d:
                    19:3e:6c:44:9c:40:5e:75:0c:73:3c:42:a2:bb:84:
                    04:08:33:f3:fc:2c:67:d8:6f:da:a6:6f:a0:8c:8a:
                    b3:a7:c0:16:63:d1:9e:bc:8b:33:d7:31:67:c1:a7:
                    7b:af:b5:cd:6d:35:d6:e8:6d:ad:97:1d:f5:c5:b2:
                    fd:37:6f:ca:94:a4:84:1a:1c:31:ac:9c:56:5b:3e:
                    f1:50:5b:86:a8:f3:6a:1c:4b:91:23:42:ba:bd:72:
                    ce:21:84:12:0b:3a:fa:6d:4f:2d:c2:90:c9:0f:8d:
                    5b:6a:93:78:86:90:2c:6a:a5:40:83:14:51:a0:93:
                    43:70:74:8e:8c:61:c0:e3:60:db:f7:ea:e2:55:58:
                    97:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:90:26:90:C8:FD:F2:02:10:DB:4A:33:9E:09:52:2E:B1:96:D5:23
            X509v3 Authority Key Identifier:
                keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:57:f9:d4:2f:c4:28:9a:fe:d4:75:b8:b8:fe:e3:87:cd:48:
         65:b6:22:06:52:26:61:00:a6:0b:ea:a0:31:bd:9b:6a:98:d9:
         1d:8d:21:5a:98:84:66:d8:b8:a9:c8:98:f1:0f:9d:30:17:34:
         64:91:15:6d:99:d2:b0:ac:7c:d0:43:5c:5e:08:9a:e2:31:ef:
         1e:da:e2:af:9b:32:03:30:83:53:42:fe:47:36:37:07:80:09:
         f4:53:76:c0:c2:ad:df:91:29:2b:24:23:2a:e4:6e:17:fe:2f:
         87:ab:f2:0d:67:90:fc:13:33:56:35:8c:b3:ee:b4:90:b9:eb:
         f3:95:b3:29:8e:e7:dc:55:47:da:da:fb:38:a8:ba:5f:00:7a:
         67:bb:ae:b0:0f:35:b7:2d:59:84:4f:05:75:8f:01:c7:25:4e:
         95:ee:09:cd:4e:ab:ee:b1:07:e7:87:3a:93:49:65:5b:1d:64:
         0f:a6:78:85:e4:f2:e3:c4:89:e1:a2:3a:28:97:5d:6a:15:67:
         66:71:d1:ea:b1:59:d2:ba:3e:99:98:5b:87:5c:e7:2c:d9:e8:
         26:15:3b:eb:7c:a0:5f:29:2a:4d:09:31:81:af:89:49:6d:12:
         2d:72:7a:5b:ea:48:38:68:8f:e8:22:61:36:a7:82:59:13:eb:
         30:fe:b6:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC
RUFDQkNDMkQwHhcNMjYwMzI1MDMxMDAxWhcNMjYwNDAxMDMxMDAxWjAYMRYwFAYD
VQQDEw02OWMzNTIwOS0yYjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7XJGNjbxt2Ex9y5PYvgCk2AwKIdm5ni3XEmdvUrI4FV7o7YyNMYt68XsvamU
ClR8lPC9iAASlC0sQiClQtw5zhl6MktO65WO+Fu0Jvd81WaV8ULb1BnG8tvSmYER
fG7KIK1OW3FACB4aElNmUOVMkUDzfA88DU0ZPmxEnEBedQxzPEKiu4QECDPz/Cxn
2G/apm+gjIqzp8AWY9GevIsz1zFnwad7r7XNbTXW6G2tlx31xbL9N2/KlKSEGhwx
rJxWWz7xUFuGqPNqHEuRI0K6vXLOIYQSCzr6bU8twpDJD41bapN4hpAsaqVAgxRR
oJNDcHSOjGHA42Db9+riVViXwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqQJpDI
/fICENtKM54JUi6xltUjMB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz
NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6
NzBoQjAtTklRb0Mtckx6QzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAylf51C/EKJr+1HW4uP7jh81IZbYiBlImYQCmC+qgMb2bapjZHY0hWpiEZti4
qciY8Q+dMBc0ZJEVbZnSsKx80ENcXgia4jHvHtrir5syAzCDU0L+RzY3B4AJ9FN2
wMKt35EpKyQjKuRuF/4vh6vyDWeQ/BMzVjWMs+60kLnr85WzKY7n3FVH2tr7OKi6
XwB6Z7uusA81ty1ZhE8FdY8BxyVOle4JzU6r7rEH54c6k0llWx1kD6Z4heTy48SJ
4aI6KJddahVnZnHR6rFZ0ro+mZhbh1znLNnoJhU763ygXykqTQkxga+JSW0SLXJ6
W+pIOGiP6CJhNqeCWRPrMP62ng==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:08:04 2026 by rpki-client