Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
File:                     u51dUPdVgZcvw68cbOavz1fPuT8.mft (raw, json)
Hash identifier:          f6/D4wu6YNJJZaq3Y7ue4SaOBFJR6IARWDnM7gmpImo=
Subject key identifier:   89:CE:CF:FF:98:64:7D:B4:9F:2E:A0:07:C1:99:C0:35:EC:B9:18:2B
Authority key identifier: BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F
Certificate issuer:       /CN=A913DD6A/serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
Certificate serial:       08C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
Manifest number:          086A
Signing time:             Tue 24 Mar 2026 20:36:16 +0000
Manifest this update:     Tue 24 Mar 2026 20:36:16 +0000
Manifest next update:     Tue 31 Mar 2026 20:36:16 +0000
Files and hashes:         1: u51dUPdVgZcvw68cbOavz1fPuT8.crl (hash: 2GFAPBtfU4rf7PFjnqAN4FYRJ2f4BH/mM9uKac8QAlc=)
                          2: 862720F4031611EB9086351AC4F9AE02.roa (hash: 6jSpWn6cv0FodfsIjYxe0Brj0ndtXQ6KLtWKLImHfe8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl
                          rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240 (0x8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DD6A, serialNumber=BB9D5D50F75581972FC3AF1C6CE6AFCF57CFB93F
        Validity
            Not Before: Mar 24 20:36:16 2026 GMT
            Not After : Mar 31 20:36:16 2026 GMT
        Subject: CN=69c2f5c0-5aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:e9:59:dc:cd:40:b4:c4:3a:e1:bc:01:ce:
                    5d:fb:71:72:8b:4c:4d:00:a2:a9:62:fb:ea:57:bc:
                    6b:bc:c3:25:b5:69:51:84:80:c4:1d:63:45:a0:7b:
                    a0:29:3d:26:4a:ea:53:e4:f2:1e:dd:3f:97:08:13:
                    8c:3c:60:f4:56:0e:bb:bd:ec:88:87:2a:c9:cc:95:
                    e2:ad:21:59:6f:0e:94:df:bf:06:a0:97:eb:37:ae:
                    9b:12:36:7d:64:b2:d5:29:23:81:f9:47:e7:99:24:
                    7d:09:81:b7:11:3b:97:06:a0:fb:a5:b3:a2:55:cb:
                    ef:a1:2d:09:99:be:cd:79:3e:78:ee:6f:d7:60:d5:
                    6d:ab:59:4b:ed:b4:94:e1:1e:98:11:a8:5a:27:5f:
                    9a:d7:20:5b:88:46:8f:7e:8c:05:ba:55:2b:87:0a:
                    4c:2e:57:d6:bb:d1:e2:4e:de:39:7b:63:69:44:13:
                    01:08:45:a0:7c:c6:4b:90:ba:e5:24:f2:fc:43:eb:
                    80:13:ff:8b:9a:f9:dc:91:c5:22:d1:c0:36:f0:44:
                    e8:15:ac:c9:29:b5:8b:d5:3b:92:b9:7b:88:57:f7:
                    fe:c0:8f:48:45:16:df:82:ac:ed:3a:1d:02:d2:24:
                    72:a3:72:5a:a7:61:ea:fd:d2:a8:29:ac:16:9e:10:
                    d1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CE:CF:FF:98:64:7D:B4:9F:2E:A0:07:C1:99:C0:35:EC:B9:18:2B
            X509v3 Authority Key Identifier:
                keyid:BB:9D:5D:50:F7:55:81:97:2F:C3:AF:1C:6C:E6:AF:CF:57:CF:B9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u51dUPdVgZcvw68cbOavz1fPuT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD6A/39F48A10031511EBB55D2219C4F9AE02/u51dUPdVgZcvw68cbOavz1fPuT8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:61:fc:6a:a7:54:f9:55:3f:15:d0:ec:12:f9:af:39:5a:4e:
         ba:4a:c5:0e:0b:12:05:93:73:53:97:b3:52:9b:cc:e5:1a:f3:
         5c:b9:6a:fb:d5:9b:5f:a0:0e:84:f1:b6:95:8b:44:4f:36:0a:
         48:7b:1f:d0:82:4c:f5:1f:02:53:75:61:13:d1:ad:e7:f9:89:
         35:c2:42:70:23:df:45:29:ea:5f:cd:01:72:2b:12:81:b2:ea:
         88:27:38:2c:16:42:4c:3f:56:29:42:14:03:91:05:3d:a3:de:
         4f:fc:6a:35:49:50:f6:62:ef:72:5b:21:a7:09:47:d8:f4:e2:
         9d:9f:27:79:1e:25:b9:8e:ee:4f:cc:ca:50:9f:93:e7:e1:84:
         4a:be:7d:0b:ed:b5:6d:7c:27:26:fd:89:a0:ef:5e:98:16:ad:
         de:f4:51:fb:68:47:7f:3d:83:18:f0:46:4b:d2:79:78:52:cd:
         b5:d0:df:b6:5e:b2:7d:c3:76:5f:eb:82:21:40:bb:0e:d7:5e:
         da:94:d8:97:08:66:b0:58:91:42:8e:8f:4d:0b:5a:97:ba:bc:
         24:29:31:0a:ce:fa:ef:a3:60:57:09:14:21:ce:1d:c9:38:c8:
         07:68:2d:73:d2:6a:26:67:c3:a5:c6:79:9c:01:75:6e:e1:1c:
         92:39:0d:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RENkExMTAvBgNVBAUTKEJCOUQ1RDUwRjc1NTgxOTcyRkMzQUYxQzZDRTZBRkNG
NTdDRkI5M0YwHhcNMjYwMzI0MjAzNjE2WhcNMjYwMzMxMjAzNjE2WjAYMRYwFAYD
VQQDEw02OWMyZjVjMC01YWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn1HpWdzNQLTEOuG8Ac5d+3Fyi0xNAKKpYvvqV7xrvMMltWlRhIDEHWNFoHug
KT0mSupT5PIe3T+XCBOMPGD0Vg67veyIhyrJzJXirSFZbw6U378GoJfrN66bEjZ9
ZLLVKSOB+UfnmSR9CYG3ETuXBqD7pbOiVcvvoS0Jmb7NeT547m/XYNVtq1lL7bSU
4R6YEahaJ1+a1yBbiEaPfowFulUrhwpMLlfWu9HiTt45e2NpRBMBCEWgfMZLkLrl
JPL8Q+uAE/+LmvnckcUi0cA28EToFazJKbWL1TuSuXuIV/f+wI9IRRbfgqztOh0C
0iRyo3Jap2Hq/dKoKawWnhDRDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFInOz/+Y
ZH20ny6gB8GZwDXsuRgrMB8GA1UdIwQYMBaAFLudXVD3VYGXL8OvHGzmr89Xz7k/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREQ2QS8zOUY0OEExMDAz
MTUxMUVCQjU1RDIyMTlDNEY5QUUwMi91NTFkVVBkVmdaY3Z3NjhjYk9hdnoxZlB1
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U1MWRVUGRWZ1pjdnc2OGNiT2F2ejFmUHVUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REQ2QS8zOUY0OEExMDAzMTUxMUVCQjU1RDIyMTlDNEY5QUUwMi91NTFkVVBkVmda
Y3Z3NjhjYk9hdnoxZlB1VDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOWH8aqdU+VU/FdDsEvmvOVpOukrFDgsSBZNzU5ezUpvM5RrzXLlq+9WbX6AO
hPG2lYtETzYKSHsf0IJM9R8CU3VhE9Gt5/mJNcJCcCPfRSnqX80BcisSgbLqiCc4
LBZCTD9WKUIUA5EFPaPeT/xqNUlQ9mLvclshpwlH2PTinZ8neR4luY7uT8zKUJ+T
5+GESr59C+21bXwnJv2JoO9emBat3vRR+2hHfz2DGPBGS9J5eFLNtdDftl6yfcN2
X+uCIUC7Dtde2pTYlwhmsFiRQo6PTQtal7q8JCkxCs7676NgVwkUIc4dyTjIB2gt
c9JqJmfDpcZ5nAF1buEckjkNMA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:12 2026 by rpki-client