Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
File:                     T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json)
Hash identifier:          iaakTymMGDOJE0P+znWZ6xLUIt3X/a6+d3vD1w/Q1oU=
Subject key identifier:   0B:C6:F3:94:3F:4B:D5:3D:50:8E:AE:C0:81:26:73:DC:13:DE:0E:A6
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Certificate issuer:       /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
Manifest number:          DF
Signing time:             Wed 25 Mar 2026 06:14:01 +0000
Manifest this update:     Wed 25 Mar 2026 06:14:01 +0000
Manifest next update:     Wed 01 Apr 2026 06:14:01 +0000
Files and hashes:         1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: bcbPHUP6S17Xw22n33N2PlFvYaRt8EHjZhDI3xaH7ro=)
                          2: 52040BECDCBF11F0B2EC67DA4A6F56BC.roa (hash: 8GUCnWGwQKv7AVc43/CF2Tf/opw5Si0JDT9fOcD5AfE=)
                          3: 103C3FCAE4AF11F0B84F3FCD4D6F56BC.roa (hash: WN9jNLUDVkScc2VwyjVRjxoYh5SYPgH/o4+1aUQoPPY=)
                          4: 502C3A08DFBA11F0A83E81424B6F56BC.roa (hash: 6xHuo0DnepEGRmB08a/9C8nmjyPvfstg4avyUEG2ltc=)
                          5: 51837F10DFBA11F0A83E81424B6F56BC.roa (hash: LVprEoYWuua5rrzKiMs4poYTHMNe7AlnKomE4Yn7e3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
                          rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
        Validity
            Not Before: Mar 25 06:14:01 2026 GMT
            Not After : Apr  1 06:14:01 2026 GMT
        Subject: CN=69c37d29-1f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:67:11:66:c7:68:dd:8b:eb:23:ca:16:63:
                    80:76:16:b4:1c:5c:51:bd:82:28:c1:8f:57:eb:45:
                    b7:2e:06:60:b5:41:a2:09:f7:d8:91:7e:3a:02:9a:
                    bb:e8:00:67:2c:46:82:50:b4:04:71:a2:70:a8:2b:
                    f4:ba:9a:75:4a:1e:8d:63:ad:52:e7:40:4f:28:cc:
                    f7:8a:a7:a5:ac:27:57:6f:56:41:37:9d:26:0a:3d:
                    98:8d:d2:5a:d5:27:ce:fa:8d:d6:85:6d:ee:94:00:
                    a0:62:d5:7e:a5:8f:f2:eb:cd:3f:6d:69:47:b5:d3:
                    c7:eb:55:d5:a0:d1:14:0d:dd:79:fb:66:bd:96:e6:
                    32:b3:d9:23:06:d3:1b:57:94:15:d6:b2:2c:8c:0c:
                    23:06:39:81:61:2b:d6:f6:dd:40:4f:16:d4:13:56:
                    d0:fc:54:d8:72:5d:af:d6:2d:d6:fe:a9:0a:df:2b:
                    4b:c6:88:fb:a9:e0:4f:57:85:b4:be:2f:5f:9b:07:
                    98:0c:59:5a:52:ff:51:ab:8e:12:e5:fe:ab:7f:a1:
                    56:47:a5:46:03:00:fb:4b:02:89:e5:ca:f2:4b:90:
                    f4:92:15:7a:f9:77:75:4a:68:be:9a:f7:e8:77:f4:
                    74:42:7c:e9:61:0b:98:cc:ec:5e:ae:4e:bb:fc:84:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C6:F3:94:3F:4B:D5:3D:50:8E:AE:C0:81:26:73:DC:13:DE:0E:A6
            X509v3 Authority Key Identifier:
                keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e2:4d:80:66:a0:0d:01:f3:11:3e:bc:a6:9e:14:4a:14:20:
         48:15:c0:bb:24:75:80:43:66:fc:81:07:1d:24:6c:de:82:1d:
         33:e3:cb:04:b1:24:43:ba:0f:62:d0:3f:86:b7:17:10:40:b1:
         92:5b:49:ad:85:6e:fc:6f:75:a8:49:b4:2d:e6:67:fb:3d:40:
         ad:43:a7:3e:09:85:08:f5:75:db:67:91:1c:18:65:9c:07:55:
         68:fe:05:64:ea:44:fd:57:be:7f:d5:89:f7:ba:13:08:6b:ed:
         b7:c5:ec:18:46:e3:f8:f0:46:13:9d:a9:59:a5:3d:b1:e3:71:
         c9:86:28:eb:fb:14:56:8d:10:02:26:a1:aa:c2:3f:7f:59:2d:
         45:e2:fa:9f:3c:09:02:9f:d2:da:69:4f:36:0d:d0:e8:25:d5:
         93:31:85:34:ca:ef:77:d1:7e:b3:b4:d1:6a:70:1e:c8:a8:4b:
         82:86:7f:11:1d:fa:b4:0a:f7:49:c4:26:5f:15:fa:6e:df:68:
         36:1b:e4:e4:d4:f9:83:ee:66:c7:87:6a:5f:60:c3:02:c0:85:
         49:0a:ac:d3:2b:a8:f3:ce:0a:2b:0a:ae:8b:08:47:e6:15:4e:
         4d:07:09:b0:0e:cf:d5:34:de:88:28:6c:6f:8f:bd:df:7c:b5:
         67:f4:b8:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMzRkIxMTAvBgNVBAUTKDRGNUY3NUE2QzI5ODhGNThCNjAzMDEyQThEQjQ0NUEx
RjM3RDVENzIwHhcNMjYwMzI1MDYxNDAxWhcNMjYwNDAxMDYxNDAxWjAYMRYwFAYD
VQQDEw02OWMzN2QyOS0xZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+VnEWbHaN2L6yPKFmOAdha0HFxRvYIowY9X60W3LgZgtUGiCffYkX46Apq7
6ABnLEaCULQEcaJwqCv0upp1Sh6NY61S50BPKMz3iqelrCdXb1ZBN50mCj2YjdJa
1SfO+o3WhW3ulACgYtV+pY/y680/bWlHtdPH61XVoNEUDd15+2a9luYys9kjBtMb
V5QV1rIsjAwjBjmBYSvW9t1ATxbUE1bQ/FTYcl2v1i3W/qkK3ytLxoj7qeBPV4W0
vi9fmweYDFlaUv9Rq44S5f6rf6FWR6VGAwD7SwKJ5cryS5D0khV6+Xd1Smi+mvfo
d/R0QnzpYQuYzOxerk67/IRFIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAvG85Q/
S9U9UI6uwIEmc9wT3g6mMB8GA1UdIwQYMBaAFE9fdabCmI9YtgMBKo20RaHzfV1y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzNGQi83MDE3ODIxNjBC
QTExMUYwOEVGRUQyMTlDNEY5QUUwMi9UMTkxcHNLWWoxaTJBd0VxamJSRm9mTjlY
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1QxOTFwc0tZajFpMkF3RXFqYlJGb2ZOOVhYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzNGQi83MDE3ODIxNjBCQTExMUYwOEVGRUQyMTlDNEY5QUUwMi9UMTkxcHNLWWox
aTJBd0VxamJSRm9mTjlYWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqeJNgGagDQHzET68pp4UShQgSBXAuyR1gENm/IEHHSRs3oIdM+PLBLEkQ7oP
YtA/hrcXEECxkltJrYVu/G91qEm0LeZn+z1ArUOnPgmFCPV122eRHBhlnAdVaP4F
ZOpE/Ve+f9WJ97oTCGvtt8XsGEbj+PBGE52pWaU9seNxyYYo6/sUVo0QAiahqsI/
f1ktReL6nzwJAp/S2mlPNg3Q6CXVkzGFNMrvd9F+s7TRanAeyKhLgoZ/ER36tAr3
ScQmXxX6bt9oNhvk5NT5g+5mx4dqX2DDAsCFSQqs0yuo884KKwquiwhH5hVOTQcJ
sA7P1TTeiChsb4+933y1Z/S4FQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:57 2026 by rpki-client