Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
File:                     iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json)
Hash identifier:          T27t0SilHQ+wFSMgv732oUfFiuj+tS0aiYGGF8NRihY=
Subject key identifier:   1D:50:83:39:D1:3C:72:5A:7C:D5:C6:A0:89:2D:11:8F:2B:6D:FF:F3
Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B
Certificate issuer:       /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
Manifest number:          012B
Signing time:             Wed 25 Mar 2026 04:55:43 +0000
Manifest this update:     Wed 25 Mar 2026 04:55:42 +0000
Manifest next update:     Wed 01 Apr 2026 04:55:42 +0000
Files and hashes:         1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: ZYbjG5l+OffllQnoaToWiAR9ctGEDGaEgW3oD1HmNM8=)
                          2: 10435EE8740511EF93658977C4F9AE02.roa (hash: 6+dRrxPmWRCMlxCcSYhpVStcDeLZfIKjMMz2mDaOI+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl
                          rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B
        Validity
            Not Before: Mar 25 04:55:42 2026 GMT
            Not After : Apr  1 04:55:42 2026 GMT
        Subject: CN=69c36acf-230d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3a:89:ee:fa:ea:e9:7c:44:b1:88:f4:b5:70:
                    d3:e0:19:4e:ad:03:de:19:bf:3c:3a:5c:7a:a0:8c:
                    32:9a:1b:af:a5:54:39:40:64:f6:17:2e:01:8d:1d:
                    f5:b8:c0:f4:b2:8e:49:19:82:f3:1c:93:48:97:4e:
                    1d:80:3e:83:dc:1a:e2:cc:bd:e6:15:e5:c0:80:99:
                    ca:e2:ef:56:90:95:b2:9b:8d:27:f6:4a:c6:55:b2:
                    b8:e1:aa:cf:14:f8:1b:ad:7c:83:7e:df:5d:12:0b:
                    70:e1:a9:cc:b9:06:63:04:51:b3:fa:fb:a4:bc:07:
                    18:04:c9:78:5f:ce:b6:d5:ed:71:ab:09:a2:58:61:
                    13:97:85:f2:17:8c:cf:f0:df:7d:d3:c9:4f:5d:7b:
                    a5:c9:aa:f1:74:fd:8b:74:70:86:93:a9:c4:d7:bb:
                    e4:33:51:b2:19:a0:c0:b6:33:98:85:2d:bf:f4:87:
                    d8:ba:06:b5:3a:fe:02:0b:94:7a:98:0d:7e:2f:b3:
                    ab:5a:bd:7f:a5:a5:f4:90:e1:b0:5c:de:c3:29:04:
                    13:67:00:47:7d:7b:3d:ec:4f:ec:05:b0:ac:aa:c7:
                    24:4f:4a:92:f8:d7:ff:62:e0:67:b5:73:fb:40:79:
                    1b:44:6e:2e:d7:3f:b5:30:1a:7f:ab:a0:74:48:68:
                    ee:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:50:83:39:D1:3C:72:5A:7C:D5:C6:A0:89:2D:11:8F:2B:6D:FF:F3
            X509v3 Authority Key Identifier:
                keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ec:b3:d3:d2:d3:a1:79:34:2b:b1:ff:33:76:f6:76:5e:34:
         72:47:3d:41:a8:bc:9a:8f:ae:52:9c:05:18:c4:9e:64:50:30:
         4d:01:e8:4b:ff:7b:1c:10:f8:36:30:a8:07:b8:b5:fd:4c:73:
         30:1c:67:ec:43:cc:bd:67:57:9c:64:2c:d9:8d:e1:8b:69:d0:
         a2:48:01:81:ca:12:76:4f:51:59:25:0b:ae:c4:1f:5d:b6:a7:
         83:15:72:1b:8d:b4:b4:53:29:02:83:20:7f:e3:d2:aa:ee:59:
         d8:03:0e:d7:ca:77:6d:37:f0:96:9e:c8:26:a9:12:9e:af:9f:
         07:4e:ed:1e:50:1f:f5:4f:f2:9c:5b:bc:a0:b1:cd:40:0d:8e:
         b8:c8:1b:18:45:d4:13:35:bf:b6:02:a1:1b:14:35:38:80:5c:
         46:49:6d:04:cb:22:ac:62:9e:76:50:58:d8:50:f9:52:23:c3:
         5f:7b:44:9a:b4:bf:f3:19:ab:51:ff:b1:3a:29:8d:7f:a7:6d:
         87:96:6f:3f:6d:b8:07:5c:db:0d:ac:a2:bf:83:e6:f0:4a:0b:
         5e:80:27:a0:9b:ba:48:32:30:fc:bb:f9:b9:a3:df:82:f7:57:
         61:1c:e9:be:e8:db:59:f0:17:3c:1c:89:38:da:7e:d8:e2:64:
         d3:1a:95:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU4MDYxMTAvBgNVBAUTKDg4N0UxMTA3QTgzRjExNzRGRjdFM0U3ODA4ODhEQjU3
MjNCNzkyNUIwHhcNMjYwMzI1MDQ1NTQyWhcNMjYwNDAxMDQ1NTQyWjAYMRYwFAYD
VQQDEw02OWMzNmFjZi0yMzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2jqJ7vrq6XxEsYj0tXDT4BlOrQPeGb88Olx6oIwymhuvpVQ5QGT2Fy4BjR31
uMD0so5JGYLzHJNIl04dgD6D3BrizL3mFeXAgJnK4u9WkJWym40n9krGVbK44arP
FPgbrXyDft9dEgtw4anMuQZjBFGz+vukvAcYBMl4X8621e1xqwmiWGETl4XyF4zP
8N9908lPXXulyarxdP2LdHCGk6nE17vkM1GyGaDAtjOYhS2/9IfYuga1Ov4CC5R6
mA1+L7OrWr1/paX0kOGwXN7DKQQTZwBHfXs97E/sBbCsqsckT0qS+Nf/YuBntXP7
QHkbRG4u1z+1MBp/q6B0SGjuZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB1QgznR
PHJafNXGoIktEY8rbf/zMB8GA1UdIwQYMBaAFIh+EQeoPxF0/34+eAiI21cjt5Jb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9DNzM5QkFFRTZF
OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VYVF9majU0Q0lqYlZ5TzNr
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lINFJCNmdfRVhUX2ZqNTRDSWpiVnlPM2tscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTgwNi9DNzM5QkFFRTZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VY
VF9majU0Q0lqYlZ5TzNrbHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU+yz09LToXk0K7H/M3b2dl40ckc9Qai8mo+uUpwFGMSeZFAwTQHoS/97HBD4
NjCoB7i1/UxzMBxn7EPMvWdXnGQs2Y3hi2nQokgBgcoSdk9RWSULrsQfXbangxVy
G420tFMpAoMgf+PSqu5Z2AMO18p3bTfwlp7IJqkSnq+fB07tHlAf9U/ynFu8oLHN
QA2OuMgbGEXUEzW/tgKhGxQ1OIBcRkltBMsirGKedlBY2FD5UiPDX3tEmrS/8xmr
Uf+xOimNf6dth5ZvP224B1zbDayiv4Pm8EoLXoAnoJu6SDIw/Lv5uaPfgvdXYRzp
vujbWfAXPByJONp+2OJk0xqVtg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:54:40 2026 by rpki-client