Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
File:                     2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft (raw, json)
Hash identifier:          QpAXBC34zz+3oSHbv2PLvHDkQam6LP9bH6rGkSR6H50=
Subject key identifier:   D8:A8:F9:3E:BF:05:9D:9E:68:CB:48:93:6A:30:BB:22:98:06:EA:08
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Certificate issuer:       /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
Manifest number:          98
Signing time:             Wed 25 Mar 2026 06:59:52 +0000
Manifest this update:     Wed 25 Mar 2026 06:59:52 +0000
Manifest next update:     Wed 01 Apr 2026 06:59:52 +0000
Files and hashes:         1: 2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl (hash: dhz1PWxwn7f1B4psx3NnEeFX+W87amv8Asqkx6Po838=)
                          2: 6C8EEADA8FE011F0A1C6120DC4F9AE02.roa (hash: myKIfxb3meeUUBjhH7MLfyukcMOtJkJ6GsFHuLAs3O8=)
                          3: 880DD06A13C411F1A59637CD0A3D8C67.roa (hash: 4wnX+wvYDtSWiFQ76g2DxIqbUHqA4rZ+5fRjRHyOCaE=)
                          4: 0B4068BEC55D11F0B9FDE586C4F9AE02.roa (hash: MpkJnjcMThfx3LCJFdT72z/oCW4Tq8SqMkjTnc2yLCQ=)
                          5: B3D7207C0CCE11F18D20135B323D8C67.roa (hash: bYRZfdjC0+B7/pB57VQ0Saubsf0vMLkkrvGa49hZ1H8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
                          rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
        Validity
            Not Before: Mar 25 06:59:52 2026 GMT
            Not After : Apr  1 06:59:52 2026 GMT
        Subject: CN=69c387e8-1df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1a:df:e3:27:69:20:6b:f9:b2:cd:d0:82:6e:
                    07:7d:22:8b:35:58:70:4d:0d:69:16:89:a6:b5:ca:
                    aa:4e:70:c0:73:57:b9:39:11:32:5f:bd:58:31:4d:
                    9a:32:8f:3d:16:09:37:a0:e9:83:6c:2e:8e:02:1a:
                    f4:8c:d7:9f:f5:5c:a7:85:d1:cf:2b:95:97:fc:6b:
                    60:4c:97:bd:46:e7:89:90:c6:ba:30:3a:08:5b:fc:
                    45:03:9a:70:5e:a9:d0:11:4d:0d:6c:4f:77:6e:a9:
                    3e:8e:9f:c8:55:a0:fb:52:23:8b:c5:0b:f7:83:c5:
                    65:e5:08:7c:7c:1b:b2:3e:53:c7:e4:d1:d8:85:b6:
                    e6:4a:ba:2f:bc:32:27:8d:43:d0:a1:4c:b9:62:af:
                    42:61:1e:2d:f1:3f:5d:46:6c:0f:de:66:c5:a6:93:
                    ff:71:fc:c1:b3:26:dd:0b:d2:c8:ea:cb:6c:a0:93:
                    31:93:24:b9:5b:5e:10:27:07:8f:31:90:8a:9b:88:
                    3e:7e:37:62:9c:1c:bf:e3:67:bd:a4:11:87:e0:10:
                    5e:6d:5b:22:a5:84:98:3c:39:de:8b:00:59:9b:f6:
                    f3:4a:ac:0c:e2:0f:85:97:18:75:c0:9c:14:09:df:
                    89:70:52:88:f6:9e:7c:ac:80:97:ab:bd:c8:8a:03:
                    40:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A8:F9:3E:BF:05:9D:9E:68:CB:48:93:6A:30:BB:22:98:06:EA:08
            X509v3 Authority Key Identifier:
                keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:64:9e:3f:c6:da:2a:14:26:ce:3b:bd:75:61:99:0f:73:21:
         7e:9b:1e:04:82:4c:b8:29:ff:f1:58:67:af:12:dd:cf:97:c9:
         ef:56:b3:d2:29:5e:0f:db:12:f0:65:df:f5:e6:a1:70:b6:8a:
         0b:12:10:dd:14:8b:86:11:69:be:16:78:2c:36:a5:70:d6:08:
         ee:96:e1:84:c0:8c:48:c0:8e:e4:40:6d:6e:99:e9:cb:8c:97:
         9b:2a:11:62:97:42:ee:5e:39:f1:69:8c:90:b2:d9:35:4b:57:
         5b:6f:79:87:aa:84:88:d3:fb:e7:35:18:2c:fa:8f:f0:3e:0a:
         03:d5:68:ed:bc:c2:7b:94:39:41:5e:21:d5:a9:a9:4b:46:15:
         1e:9d:a0:e9:f1:84:99:a2:9a:5c:bc:3c:8b:6b:b1:44:d8:e0:
         75:57:75:ee:d2:0e:1c:68:48:ba:1d:f1:72:72:be:24:35:4e:
         a7:ae:9b:ee:26:8c:eb:d1:d6:00:93:d8:21:d1:0d:69:34:cd:
         ff:66:48:27:99:b9:91:f0:08:d0:25:e5:e2:a5:67:fe:a9:85:
         70:01:0d:3b:ee:41:11:f8:1b:18:20:8c:77:08:e5:1c:fd:96:
         f7:3c:74:77:31:d3:be:84:ff:99:8a:45:c4:ad:2c:88:64:7d:
         e1:33:db:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFDRTIxMTAvBgNVBAUTKERBRTFDRTBBREE2N0I0NDcxM0M2MUIxRkFFQzRGNUQ0
RDY3QTE1OUYwHhcNMjYwMzI1MDY1OTUyWhcNMjYwNDAxMDY1OTUyWjAYMRYwFAYD
VQQDEw02OWMzODdlOC0xZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1xrf4ydpIGv5ss3Qgm4HfSKLNVhwTQ1pFommtcqqTnDAc1e5OREyX71YMU2a
Mo89Fgk3oOmDbC6OAhr0jNef9VynhdHPK5WX/GtgTJe9RueJkMa6MDoIW/xFA5pw
XqnQEU0NbE93bqk+jp/IVaD7UiOLxQv3g8Vl5Qh8fBuyPlPH5NHYhbbmSrovvDIn
jUPQoUy5Yq9CYR4t8T9dRmwP3mbFppP/cfzBsybdC9LI6stsoJMxkyS5W14QJweP
MZCKm4g+fjdinBy/42e9pBGH4BBebVsipYSYPDneiwBZm/bzSqwM4g+Flxh1wJwU
Cd+JcFKI9p58rICXq73IigNAUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNio+T6/
BZ2eaMtIk2owuyKYBuoIMB8GA1UdIwQYMBaAFNrhzgraZ7RHE8YbH67E9dTWehWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUNFMi81MUNEN0ZCQTcy
Q0UxMUYwODQyMUFBNDhDNEY5QUUwMi8ydUhPQ3RwbnRFY1R4aHNmcnNUMTFOWjZG
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ1SE9DdHBudEVjVHhoc2Zyc1QxMU5aNkZaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QUNFMi81MUNEN0ZCQTcyQ0UxMUYwODQyMUFBNDhDNEY5QUUwMi8ydUhPQ3RwbnRF
Y1R4aHNmcnNUMTFOWjZGWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFmSeP8baKhQmzju9dWGZD3MhfpseBIJMuCn/8VhnrxLdz5fJ71az0ileD9sS
8GXf9eahcLaKCxIQ3RSLhhFpvhZ4LDalcNYI7pbhhMCMSMCO5EBtbpnpy4yXmyoR
YpdC7l458WmMkLLZNUtXW295h6qEiNP75zUYLPqP8D4KA9Vo7bzCe5Q5QV4h1amp
S0YVHp2g6fGEmaKaXLw8i2uxRNjgdVd17tIOHGhIuh3xcnK+JDVOp66b7iaM69HW
AJPYIdENaTTN/2ZIJ5m5kfAI0CXl4qVn/qmFcAENO+5BEfgbGCCMdwjlHP2W9zx0
dzHTvoT/mYpFxK0siGR94TPbmQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:06:27 2026 by rpki-client