Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
File:                     U_b3klO824sdFxgs5PGdOf1JnfU.mft (raw, json)
Hash identifier:          BnLFe/fw3/O/J+P8ZP6RnO4HL5gR2O62Wnx6oAIONJs=
Subject key identifier:   ED:EE:45:34:52:39:DF:D1:F8:6D:F0:61:21:F3:BC:68:0B:07:E2:EF
Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
Certificate issuer:       /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Certificate serial:       06DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
Manifest number:          06D6
Signing time:             Tue 24 Mar 2026 21:55:47 +0000
Manifest this update:     Tue 24 Mar 2026 21:55:47 +0000
Manifest next update:     Tue 31 Mar 2026 21:55:47 +0000
Files and hashes:         1: U_b3klO824sdFxgs5PGdOf1JnfU.crl (hash: UZ+tzxsAJRXwRBWAwlLGVySh63SLAYs7oF/rLHrdDB8=)
                          2: 28D1785891E311EBA138E330C4F9AE02.roa (hash: gFr9tBtN+YsBA4oZiVIoYAd+eRR5ghbNb9orW5HThAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1756 (0x6dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340, serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
        Validity
            Not Before: Mar 24 21:55:47 2026 GMT
            Not After : Mar 31 21:55:47 2026 GMT
        Subject: CN=69c30863-7d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:4a:77:73:92:5d:7a:b4:8d:be:44:e2:14:
                    ce:16:79:ac:29:08:b6:38:de:58:41:81:41:51:12:
                    57:cc:91:66:70:38:08:07:60:5f:37:f7:fc:e3:57:
                    2c:d1:b5:99:bc:57:25:a4:b6:2c:e3:d1:76:80:60:
                    8d:b0:b0:42:09:a7:5e:de:66:74:d7:46:90:85:92:
                    75:d1:d5:ef:e5:ff:0f:84:e9:56:8f:9a:17:ca:3e:
                    f9:e1:9c:7c:08:ba:22:63:8e:74:f0:b4:a1:12:77:
                    84:32:42:19:77:f8:41:fb:f0:63:52:1b:07:64:e7:
                    9a:ba:58:d5:9d:03:fe:96:0d:e7:a3:47:50:f4:04:
                    df:c0:80:ed:80:92:db:db:36:cc:76:2a:57:07:d2:
                    d2:15:ac:df:6f:a3:b3:7d:af:aa:97:ac:d6:52:4d:
                    7e:e2:eb:02:71:6b:dd:53:5a:a5:c8:03:8a:d4:bc:
                    5c:02:b0:8b:8e:50:3c:f3:38:5b:ba:54:e8:21:5b:
                    8c:ec:b9:45:ac:d6:78:2b:c7:3a:9e:22:31:8b:16:
                    c6:12:de:fb:1b:ba:b0:8f:66:64:a5:88:75:dc:54:
                    fc:a0:9a:0d:14:cc:0b:fc:ea:e4:8c:ca:07:ab:b0:
                    72:90:b3:3d:8c:8b:9f:09:a0:61:93:eb:e5:11:0f:
                    9f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EE:45:34:52:39:DF:D1:F8:6D:F0:61:21:F3:BC:68:0B:07:E2:EF
            X509v3 Authority Key Identifier:
                keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:73:5c:ed:16:70:50:fd:2c:10:86:49:64:ac:58:09:80:50:
         02:a1:76:c1:3a:24:79:ad:ae:ee:6d:ae:35:93:30:be:e6:02:
         7b:cb:f4:fb:65:8f:2d:d1:46:55:5c:c0:8e:02:2c:c9:04:d7:
         eb:b9:08:82:1b:25:90:a2:93:00:4e:ad:db:6d:ac:3f:ce:fa:
         e4:0b:67:ca:db:7f:f0:02:d8:5f:df:6c:f1:68:98:2f:85:0b:
         11:e2:b1:5f:f2:7f:da:3d:7a:9c:e2:66:75:d1:b9:5c:a4:27:
         01:02:56:10:b1:82:ba:4a:f7:ad:19:ea:3d:eb:48:c5:c2:70:
         7a:38:67:ba:9b:4d:f8:17:8a:e6:a7:a3:f6:f6:9f:8d:4b:74:
         c1:53:8d:17:2b:46:e2:e6:ec:67:3a:87:06:2c:c4:87:18:4a:
         0a:9a:e4:49:a8:2c:5c:27:0f:96:ff:6a:40:61:59:95:a7:77:
         22:16:30:be:53:ed:39:6d:8b:c6:61:40:67:b7:10:74:ba:0a:
         25:2a:03:44:c6:8c:b4:35:7f:bc:05:f6:6b:5e:66:59:ed:53:
         bd:92:62:e6:69:c8:51:87:03:4e:b5:42:08:ca:d6:d6:00:b6:
         d2:0a:85:58:20:dd:d3:cb:a5:db:0c:89:e7:93:da:5d:5c:a8:
         f5:3d:90:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQzNDAxMTAvBgNVBAUTKDUzRjZGNzkyNTNCQ0RCOEIxRDE3MTgyQ0U0RjE5RDM5
RkQ0OTlERjUwHhcNMjYwMzI0MjE1NTQ3WhcNMjYwMzMxMjE1NTQ3WjAYMRYwFAYD
VQQDEw02OWMzMDg2My03ZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2yFKd3OSXXq0jb5E4hTOFnmsKQi2ON5YQYFBURJXzJFmcDgIB2BfN/f841cs
0bWZvFclpLYs49F2gGCNsLBCCade3mZ010aQhZJ10dXv5f8PhOlWj5oXyj754Zx8
CLoiY4508LShEneEMkIZd/hB+/BjUhsHZOeauljVnQP+lg3no0dQ9ATfwIDtgJLb
2zbMdipXB9LSFazfb6Ozfa+ql6zWUk1+4usCcWvdU1qlyAOK1LxcArCLjlA88zhb
ulToIVuM7LlFrNZ4K8c6niIxixbGEt77G7qwj2ZkpYh13FT8oJoNFMwL/OrkjMoH
q7BykLM9jIufCaBhk+vlEQ+f0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3uRTRS
Od/R+G3wYSHzvGgLB+LvMB8GA1UdIwQYMBaAFFP295JTvNuLHRcYLOTxnTn9SZ31
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC83QzFGRDFEMjkx
RTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0c2RGeGdzNVBHZE9mMUpu
ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VfYjNrbE84MjRzZEZ4Z3M1UEdkT2YxSm5mVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDM0MC83QzFGRDFEMjkxRTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0
c2RGeGdzNVBHZE9mMUpuZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzXNc7RZwUP0sEIZJZKxYCYBQAqF2wTokea2u7m2uNZMwvuYCe8v0+2WPLdFG
VVzAjgIsyQTX67kIghslkKKTAE6t222sP8765Atnytt/8ALYX99s8WiYL4ULEeKx
X/J/2j16nOJmddG5XKQnAQJWELGCukr3rRnqPetIxcJwejhnuptN+BeK5qej9vaf
jUt0wVONFytG4ubsZzqHBizEhxhKCprkSagsXCcPlv9qQGFZlad3IhYwvlPtOW2L
xmFAZ7cQdLoKJSoDRMaMtDV/vAX2a15mWe1TvZJi5mnIUYcDTrVCCMrW1gC20gqF
WCDd08ul2wyJ55PaXVyo9T2QQw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:10 2026 by rpki-client