Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
File:                     L904BNZFjq8cs5F7XjMvulxxX5E.mft (raw, json)
Hash identifier:          v6FOtanTjHa9DNg4Fdf694js+lZMKNTURaqO7rIIgHM=
Subject key identifier:   37:08:49:A9:C4:74:77:8B:02:BD:FA:69:A0:C6:52:6C:5D:87:32:B1
Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
Certificate issuer:       /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
Manifest number:          B3
Signing time:             Wed 25 Mar 2026 06:44:48 +0000
Manifest this update:     Wed 25 Mar 2026 06:44:48 +0000
Manifest next update:     Wed 01 Apr 2026 06:44:48 +0000
Files and hashes:         1: L904BNZFjq8cs5F7XjMvulxxX5E.crl (hash: wh5y+SqpUVo6kPBQ3KA0RaDEbqZ6aBowgx2Oj9dWh/c=)
                          2: DE917E7016C511F085B4FF6FC4F9AE02.roa (hash: ETq/ueZ+moHz6omb3XVGSrkGJeYMxT06+9CG44Ybvps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
                          rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
        Validity
            Not Before: Mar 25 06:44:48 2026 GMT
            Not After : Apr  1 06:44:48 2026 GMT
        Subject: CN=69c38460-c718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b9:18:de:1b:da:46:fd:a8:64:25:aa:0f:19:
                    c1:01:23:86:46:f3:fc:9f:5f:dd:49:52:91:ac:a0:
                    c7:7f:e6:5f:c3:0b:ea:c6:15:11:7a:84:d5:3d:aa:
                    d1:03:c8:b9:26:b9:8f:17:57:4e:29:32:fb:eb:04:
                    56:29:e0:6c:36:8f:23:16:03:80:12:95:ef:02:be:
                    09:82:64:85:43:4c:c5:62:1f:c0:19:8e:bb:5a:5d:
                    4e:d2:9d:95:39:68:e1:2d:ae:50:4e:77:d4:64:42:
                    53:c6:9b:b6:e9:d4:04:57:07:58:09:b1:54:0d:97:
                    29:89:bd:4f:8d:3f:29:85:89:8c:e3:75:ae:b4:63:
                    d3:64:80:4f:e5:7c:0a:85:37:23:43:dc:ba:61:45:
                    72:4f:c1:e1:68:c0:02:9f:f1:ee:18:67:96:4b:1f:
                    8d:e7:61:d1:26:f8:80:7d:eb:20:a4:5f:75:46:a9:
                    2a:47:23:2b:44:c5:78:d5:87:62:cd:50:38:2c:c6:
                    fd:e0:d5:10:ff:6d:7f:39:b4:d3:a4:cc:32:fa:e9:
                    37:b4:bd:82:1b:be:d6:cf:cd:2e:bf:1a:b9:4f:16:
                    ce:f9:17:a3:a2:23:5e:a0:cf:06:0a:35:9f:e3:fb:
                    3a:c8:64:f7:cf:50:25:f6:c3:d3:94:da:b5:c1:65:
                    90:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:08:49:A9:C4:74:77:8B:02:BD:FA:69:A0:C6:52:6C:5D:87:32:B1
            X509v3 Authority Key Identifier:
                keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7c:77:3a:c8:cf:c1:8a:29:72:2d:ee:cc:07:a4:d2:8e:d2:
         0d:be:b4:44:11:31:56:74:12:55:7e:ca:ea:67:c4:c5:64:80:
         18:6d:59:cf:5d:83:cd:c3:f9:7d:51:35:84:42:7a:67:df:e9:
         d6:ba:e6:7b:e4:95:a3:2a:4e:7c:90:db:63:fb:cf:97:76:a7:
         31:91:ce:62:91:83:7a:12:02:d7:e6:b6:56:85:48:1f:61:b9:
         19:ae:89:7a:7b:c9:60:3f:5b:e9:75:98:a4:47:90:0f:00:df:
         a5:0d:db:d3:9f:cf:4d:9e:66:de:69:4f:1b:a3:67:fc:f0:dc:
         39:60:41:1e:c7:3c:c9:74:f5:7e:9e:e0:5c:ba:61:be:8f:19:
         55:55:a9:72:e2:de:ac:e3:36:53:40:65:b5:40:76:76:50:ed:
         7d:0a:03:70:df:74:1b:63:db:f8:4f:2f:73:64:e8:3f:9a:52:
         95:d4:f7:71:f0:9b:87:8d:8f:90:f4:7e:38:e8:f5:55:c3:1e:
         b9:f9:7a:9e:5f:5d:24:77:f6:cd:99:30:ba:f8:62:95:a7:58:
         5c:00:1b:3c:55:e1:ef:03:3a:80:d9:e5:a3:8b:e9:18:39:60:
         0b:ff:ae:13:43:ea:f7:7b:c2:b6:50:e7:a9:73:84:e1:ee:21:
         1c:5e:7a:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI1NTExMTAvBgNVBAUTKDJGREQzODA0RDY0NThFQUYxQ0IzOTE3QjVFMzMyRkJB
NUM3MTVGOTEwHhcNMjYwMzI1MDY0NDQ4WhcNMjYwNDAxMDY0NDQ4WjAYMRYwFAYD
VQQDEw02OWMzODQ2MC1jNzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnLkY3hvaRv2oZCWqDxnBASOGRvP8n1/dSVKRrKDHf+ZfwwvqxhUReoTVParR
A8i5JrmPF1dOKTL76wRWKeBsNo8jFgOAEpXvAr4JgmSFQ0zFYh/AGY67Wl1O0p2V
OWjhLa5QTnfUZEJTxpu26dQEVwdYCbFUDZcpib1PjT8phYmM43WutGPTZIBP5XwK
hTcjQ9y6YUVyT8HhaMACn/HuGGeWSx+N52HRJviAfesgpF91RqkqRyMrRMV41Ydi
zVA4LMb94NUQ/21/ObTTpMwy+uk3tL2CG77Wz80uvxq5TxbO+RejoiNeoM8GCjWf
4/s6yGT3z1Al9sPTlNq1wWWQ6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDcISanE
dHeLAr36aaDGUmxdhzKxMB8GA1UdIwQYMBaAFC/dOATWRY6vHLORe14zL7pccV+R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1MS81QUIxOTIwMjE2
QzUxMUYwODgxNUY0NkVDNEY5QUUwMi9MOTA0Qk5aRmpxOGNzNUY3WGpNdnVseHhY
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w5MDRCTlpGanE4Y3M1RjdYak12dWx4eFg1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjU1MS81QUIxOTIwMjE2QzUxMUYwODgxNUY0NkVDNEY5QUUwMi9MOTA0Qk5aRmpx
OGNzNUY3WGpNdnVseHhYNUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa3x3OsjPwYopci3uzAek0o7SDb60RBExVnQSVX7K6mfExWSAGG1Zz12DzcP5
fVE1hEJ6Z9/p1rrme+SVoypOfJDbY/vPl3anMZHOYpGDehIC1+a2VoVIH2G5Ga6J
envJYD9b6XWYpEeQDwDfpQ3b05/PTZ5m3mlPG6Nn/PDcOWBBHsc8yXT1fp7gXLph
vo8ZVVWpcuLerOM2U0BltUB2dlDtfQoDcN90G2Pb+E8vc2ToP5pSldT3cfCbh42P
kPR+OOj1VcMeufl6nl9dJHf2zZkwuvhiladYXAAbPFXh7wM6gNnlo4vpGDlgC/+u
E0Pq93vCtlDnqXOE4e4hHF561g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:23 2026 by rpki-client