Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
File:                     D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json)
Hash identifier:          /yA+e+wzvL/UkUyMOI3SOclcNa2Yi6SsypD04mIMvfM=
Subject key identifier:   53:7D:92:2D:AF:E3:E0:34:05:4B:33:09:5A:AE:8F:2D:4F:C5:34:F4
Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93
Certificate issuer:       /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
Manifest number:          A5
Signing time:             Wed 25 Mar 2026 06:30:13 +0000
Manifest this update:     Wed 25 Mar 2026 06:30:12 +0000
Manifest next update:     Wed 01 Apr 2026 06:30:12 +0000
Files and hashes:         1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: 9QMQpci+IA6NSzieEqPR/cQW0iUT/L9+oFAKg4mgqEo=)
                          2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: QDtioVWIhSQHKs0Tk+R/fmPWRMMOJ24+WyiTZJLSleU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl
                          rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093
        Validity
            Not Before: Mar 25 06:30:12 2026 GMT
            Not After : Apr  1 06:30:12 2026 GMT
        Subject: CN=69c380f5-4e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:64:9e:0f:a4:59:c0:e0:1d:f7:38:ce:79:
                    84:ae:3c:02:86:fa:fd:ac:b0:99:5a:6e:5d:b2:15:
                    4f:96:06:37:87:f8:01:65:40:95:01:ff:de:a2:a1:
                    a1:61:9f:6b:bb:f7:fb:ca:9c:50:e5:d2:34:01:ae:
                    fb:ef:d9:b2:32:c3:90:b7:08:f9:3f:94:a9:72:ef:
                    e1:2d:88:6f:a0:96:f4:b5:6e:46:6f:99:d0:0e:fa:
                    e6:0d:85:d4:ea:9b:9f:ed:60:5f:2c:fa:9f:c1:53:
                    bd:a1:a0:1c:60:c8:0c:ae:b2:bf:b1:e5:cc:18:0c:
                    cf:21:12:1e:de:fc:7f:73:ed:e0:7b:18:d4:b7:8e:
                    cd:f7:84:eb:78:98:c7:1f:2b:81:66:f5:28:8e:1a:
                    0c:fa:17:4e:50:e6:b6:2e:f3:30:38:10:b0:bb:89:
                    50:92:7d:ed:21:12:de:f9:52:0c:52:24:b8:64:ea:
                    89:dd:80:dc:fd:da:51:f0:57:0b:4b:44:75:0a:92:
                    49:23:5a:6b:27:c2:63:d1:77:1f:00:53:9d:e9:53:
                    99:17:b9:f0:42:c2:da:9d:7a:3c:ac:c4:c6:c5:b1:
                    ca:1b:04:f1:e9:42:de:c0:4a:9d:a6:7d:76:b1:a4:
                    a7:50:0b:d0:25:10:38:81:61:d0:8c:b4:49:cd:17:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7D:92:2D:AF:E3:E0:34:05:4B:33:09:5A:AE:8F:2D:4F:C5:34:F4
            X509v3 Authority Key Identifier:
                keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b5:62:10:2d:20:7f:44:e6:fd:e0:bd:f8:14:d7:50:a3:9b:
         18:51:25:e6:80:95:f9:19:4e:d1:61:7e:e4:13:ee:1c:31:71:
         4d:6f:18:0f:19:29:95:15:c2:fa:86:82:1b:72:d7:30:79:41:
         da:e0:af:a0:81:4a:57:b7:97:d2:20:3a:09:c1:44:89:68:3a:
         e7:35:47:36:94:12:45:92:7d:31:a7:29:e4:46:fd:77:80:f8:
         9e:fe:aa:bb:cb:e3:7a:fb:b4:5e:57:0e:46:10:cd:7c:03:39:
         b0:9c:b5:de:8b:59:b4:43:01:4a:34:67:9a:7d:b2:5c:bf:0e:
         76:e4:47:69:3a:58:a7:21:78:48:10:f4:3e:c8:17:67:9c:8a:
         3d:60:68:3c:5f:2f:6b:8b:2f:24:60:81:41:3a:b8:2b:2e:93:
         4e:ee:68:9d:85:a8:8c:d5:6c:6a:4c:3e:66:3a:b8:0a:c5:5c:
         52:39:fe:8f:8a:40:cc:d1:5f:72:d8:dc:b7:11:30:45:df:cb:
         52:b1:56:39:57:1d:b7:fd:ce:e6:00:82:51:4d:0b:fb:bc:09:
         77:55:8f:7b:b7:bf:6d:a0:38:0e:06:39:30:fa:e3:f6:5a:e7:
         eb:07:6a:cc:22:91:ed:aa:7a:ee:9c:a9:71:d3:d5:ad:9b:fb:
         32:ff:36:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU2Q0YxMTAvBgNVBAUTKDBGRkY3MTc5ODJEOUUxRDk2RjREN0ZDNTMxMUVEMzIz
MjM2QkEwOTMwHhcNMjYwMzI1MDYzMDEyWhcNMjYwNDAxMDYzMDEyWjAYMRYwFAYD
VQQDEw02OWMzODBmNS00ZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz9dkng+kWcDgHfc4znmErjwChvr9rLCZWm5dshVPlgY3h/gBZUCVAf/eoqGh
YZ9ru/f7ypxQ5dI0Aa7779myMsOQtwj5P5Spcu/hLYhvoJb0tW5Gb5nQDvrmDYXU
6puf7WBfLPqfwVO9oaAcYMgMrrK/seXMGAzPIRIe3vx/c+3gexjUt47N94TreJjH
HyuBZvUojhoM+hdOUOa2LvMwOBCwu4lQkn3tIRLe+VIMUiS4ZOqJ3YDc/dpR8FcL
S0R1CpJJI1prJ8Jj0XcfAFOd6VOZF7nwQsLanXo8rMTGxbHKGwTx6ULewEqdpn12
saSnUAvQJRA4gWHQjLRJzRey3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFN9ki2v
4+A0BUszCVqujy1PxTT0MB8GA1UdIwQYMBaAFA//cXmC2eHZb01/xTEe0yMja6CT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZDRi8wMTM5MzQ5NjMx
MkQxMUYwOTZDRUVBNUVDNEY5QUUwMi9EXzl4ZVlMWjRkbHZUWF9GTVI3VEl5TnJv
Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RfOXhlWUxaNGRsdlRYX0ZNUjdUSXlOcm9KTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTZDRi8wMTM5MzQ5NjMxMkQxMUYwOTZDRUVBNUVDNEY5QUUwMi9EXzl4ZVlMWjRk
bHZUWF9GTVI3VEl5TnJvSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJrViEC0gf0Tm/eC9+BTXUKObGFEl5oCV+RlO0WF+5BPuHDFxTW8YDxkplRXC
+oaCG3LXMHlB2uCvoIFKV7eX0iA6CcFEiWg65zVHNpQSRZJ9Macp5Eb9d4D4nv6q
u8vjevu0XlcORhDNfAM5sJy13otZtEMBSjRnmn2yXL8OduRHaTpYpyF4SBD0PsgX
Z5yKPWBoPF8va4svJGCBQTq4Ky6TTu5onYWojNVsakw+Zjq4CsVcUjn+j4pAzNFf
ctjctxEwRd/LUrFWOVcdt/3O5gCCUU0L+7wJd1WPe7e/baA4DgY5MPrj9lrn6wdq
zCKR7ap67pypcdPVrZv7Mv82lw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:13 2026 by rpki-client