Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
File:                     IugbMnyx-zUB4Fr6uUEhkY_bW14.mft (raw, json)
Hash identifier:          HOF/rDp4KjUvgVyA/JDWLJ/z3EmoNi3RRiswplYZ/W0=
Subject key identifier:   C4:35:88:B4:DD:03:6D:B9:E2:3D:6A:2C:F7:29:57:59:07:1A:25:D1
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Certificate issuer:       /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial:       1921
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
Manifest number:          18D9
Signing time:             Tue 24 Mar 2026 16:23:21 +0000
Manifest this update:     Tue 24 Mar 2026 16:23:20 +0000
Manifest next update:     Tue 31 Mar 2026 16:23:20 +0000
Files and hashes:         1: IugbMnyx-zUB4Fr6uUEhkY_bW14.crl (hash: bMX85IRsKQlLfHc9Qp+LipNk1X/p5t9N43339nwtSto=)
                          2: 99D6FBE6341F11E9BF826924C4F9AE02.roa (hash: DTA9mxmgUMp5dN7zA4nVO7JGbSY6mzRAlz02SBccYEA=)
                          3: 609B8BC27D7B11EDB6B77173C4F9AE02.roa (hash: lCIe/jXkg4rN1KsDsytQ0JDHRzjYIhUkGHJLYrtlAfM=)
                          4: 0F71ED56069211F1B57EF04B043D8C67.roa (hash: xPY+wIdcnnb2Oks0I60uG5/7XY88MYgKgdGxnk7WO9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
                          rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6433 (0x1921)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
        Validity
            Not Before: Mar 24 16:23:20 2026 GMT
            Not After : Mar 31 16:23:20 2026 GMT
        Subject: CN=69c2ba79-79bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:6d:da:38:c9:7c:3b:66:af:14:3f:f7:6f:
                    de:ed:e7:8f:36:96:5d:aa:4e:37:51:f2:3a:45:6a:
                    3f:f8:d1:f9:2b:3d:ca:81:30:4c:8d:ee:e8:67:4b:
                    3d:d1:85:b9:d3:43:39:13:8c:e2:6b:a7:be:2f:e2:
                    df:bc:c5:68:59:66:4e:16:29:bb:9e:4a:43:77:cd:
                    7d:2b:d7:f9:46:5c:1b:34:4f:db:29:bf:68:00:bf:
                    a5:25:44:ac:77:7e:1a:10:11:ca:5f:e4:28:a4:64:
                    e2:76:7b:31:94:01:3d:39:26:a9:7b:78:86:37:16:
                    82:d3:17:e3:d3:74:52:3a:af:34:bf:c9:bc:3a:b5:
                    1f:fd:71:e8:a5:9d:36:cc:80:a5:56:b5:60:51:c4:
                    e6:99:00:47:54:24:3b:d7:bd:88:89:35:9e:00:18:
                    ab:05:08:7b:94:8e:4b:73:e2:bf:e5:53:31:10:c5:
                    47:a7:35:f0:dd:47:19:6b:5e:09:79:55:1d:9e:31:
                    1a:d4:d2:bf:59:9e:cc:98:c8:06:2f:e7:ce:fc:3d:
                    dd:f1:c0:df:2c:6d:44:0a:fa:73:fd:e1:e9:53:a0:
                    0b:d0:b2:56:b9:fc:8d:da:2f:60:26:2e:54:2f:d4:
                    ad:b0:be:94:72:34:be:d6:42:87:2a:7b:54:d9:26:
                    3b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:35:88:B4:DD:03:6D:B9:E2:3D:6A:2C:F7:29:57:59:07:1A:25:D1
            X509v3 Authority Key Identifier:
                keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bf:92:79:75:ca:a8:ec:f0:6c:55:eb:ff:ef:af:93:39:57:
         c8:b9:44:d3:c2:6e:7a:65:e8:94:55:39:de:d7:7f:7c:9d:d2:
         9b:1f:7f:0b:ae:ad:09:b4:ca:25:b0:4d:78:30:93:6c:18:d3:
         6b:ef:bb:2b:6e:a8:25:ac:0b:a4:1e:e3:f9:8f:39:86:26:c5:
         66:b5:c3:72:ad:e4:91:88:a0:7d:17:c5:e2:9c:c6:b8:04:32:
         b8:5d:58:85:8a:5e:6c:7c:66:0e:60:9e:bb:61:c9:36:f1:cd:
         ba:2f:7a:99:21:91:27:ef:a3:fd:11:65:aa:19:bf:bf:ff:f8:
         b7:ea:3b:57:73:e7:96:e9:bb:98:c7:7a:fc:a8:7f:92:f8:ed:
         7d:0e:3d:95:38:ab:7d:e4:22:4e:d8:ec:52:55:17:89:ba:d7:
         5c:b1:be:57:59:86:13:36:a1:f9:5e:dc:6a:2e:35:c9:6b:b2:
         ea:21:71:04:3f:81:ba:cc:75:bd:c1:a5:f3:b8:6d:98:9a:90:
         94:06:f7:0a:3e:89:8c:36:05:c1:d6:9f:fd:58:42:48:fd:06:
         b2:3c:61:91:11:ce:86:4a:e5:0f:2b:52:4a:20:9b:c1:15:54:
         6e:3c:ed:d5:2c:84:81:94:d1:65:e5:70:8c:8a:53:21:9f:d7:
         4b:55:c5:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI1QkQxMTAvBgNVBAUTKDIyRTgxQjMyN0NCMUZCMzUwMUUwNUFGQUI5NDEyMTkx
OEZEQjVCNUUwHhcNMjYwMzI0MTYyMzIwWhcNMjYwMzMxMTYyMzIwWjAYMRYwFAYD
VQQDEw02OWMyYmE3OS03OWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq+Vt2jjJfDtmrxQ/92/e7eePNpZdqk43UfI6RWo/+NH5Kz3KgTBMje7oZ0s9
0YW500M5E4zia6e+L+LfvMVoWWZOFim7nkpDd819K9f5RlwbNE/bKb9oAL+lJUSs
d34aEBHKX+QopGTidnsxlAE9OSape3iGNxaC0xfj03RSOq80v8m8OrUf/XHopZ02
zIClVrVgUcTmmQBHVCQ7172IiTWeABirBQh7lI5Lc+K/5VMxEMVHpzXw3UcZa14J
eVUdnjEa1NK/WZ7MmMgGL+fO/D3d8cDfLG1ECvpz/eHpU6AL0LJWufyN2i9gJi5U
L9StsL6UcjS+1kKHKntU2SY7lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQ1iLTd
A2254j1qLPcpV1kHGiXRMB8GA1UdIwQYMBaAFCLoGzJ8sfs1AeBa+rlBIZGP21te
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjVCRC8zM0NCMTE3QUI1
QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16VUI0RnI2dVVFaGtZX2JX
MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l1Z2JNbnl4LXpVQjRGcjZ1VUVoa1lfYlcxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjVCRC8zM0NCMTE3QUI1QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16
VUI0RnI2dVVFaGtZX2JXMTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATL+SeXXKqOzwbFXr/++vkzlXyLlE08JuemXolFU53td/fJ3Smx9/C66tCbTK
JbBNeDCTbBjTa++7K26oJawLpB7j+Y85hibFZrXDcq3kkYigfRfF4pzGuAQyuF1Y
hYpebHxmDmCeu2HJNvHNui96mSGRJ++j/RFlqhm/v//4t+o7V3Pnlum7mMd6/Kh/
kvjtfQ49lTirfeQiTtjsUlUXibrXXLG+V1mGEzah+V7cai41yWuy6iFxBD+Busx1
vcGl87htmJqQlAb3Cj6JjDYFwdaf/VhCSP0GsjxhkRHOhkrlDytSSiCbwRVUbjzt
1SyEgZTRZeVwjIpTIZ/XS1XFug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:34 2026 by rpki-client