Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
File:                     ixVECuImyZD8nlWRX-jJUJvLZnY.mft (raw, json)
Hash identifier:          9v4tVlygOUmFR2lZLjGgfwkOWzBhXypXBPgQBEOI5kE=
Subject key identifier:   77:FD:EC:D0:5E:E7:9E:5F:86:0D:66:75:DD:EC:C4:7D:B5:63:AB:12
Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76
Certificate issuer:       /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
Manifest number:          0108
Signing time:             Wed 25 Mar 2026 05:17:30 +0000
Manifest this update:     Wed 25 Mar 2026 05:17:29 +0000
Manifest next update:     Wed 01 Apr 2026 05:17:29 +0000
Files and hashes:         1: ixVECuImyZD8nlWRX-jJUJvLZnY.crl (hash: xshL54fkU6JlczPjrX6HNTVjVhCcxlQThcb4MNum1vQ=)
                          2: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (hash: jZxAOWiAe/BSMfxj7HHzJhOBvkhZZ5jWDWhZwPaoTDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl
                          rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA46, serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676
        Validity
            Not Before: Mar 25 05:17:29 2026 GMT
            Not After : Apr  1 05:17:29 2026 GMT
        Subject: CN=69c36fe9-3a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:e6:e4:ec:4b:2a:1a:5e:17:4a:31:a7:20:
                    3f:51:6a:42:23:bd:1e:50:af:31:2b:14:59:16:76:
                    13:a2:98:7e:df:66:25:43:56:ce:37:4d:a1:32:d3:
                    c3:b6:0e:fe:db:4c:60:fd:75:e4:43:ed:df:72:5e:
                    a1:d1:8f:f1:0b:d0:f7:35:8b:b4:20:fd:06:ac:ec:
                    fe:cc:4f:bd:b3:25:7b:6b:5c:71:d6:3f:7f:68:fe:
                    2f:af:ca:58:e2:a5:46:ef:74:b4:2c:8c:e2:ca:0e:
                    9b:d8:ae:f7:c2:6c:cb:59:de:cb:2f:51:d8:84:cf:
                    52:1d:57:e7:c1:4c:c6:db:10:f3:b9:78:86:d3:d3:
                    a2:9f:ec:da:7c:03:e7:1d:98:47:52:ae:a2:20:a2:
                    f3:e6:a1:62:ff:f8:71:fc:34:e3:74:2e:a3:78:32:
                    fc:24:eb:1f:e9:81:8b:e9:a9:c9:ec:1c:ee:10:e0:
                    60:89:4e:b5:92:97:80:b7:1d:08:d4:68:21:5f:51:
                    e1:b3:02:00:55:9d:4b:3e:f2:db:bb:77:71:7a:73:
                    bc:c8:a1:34:d9:15:16:ea:65:7f:8d:c5:c5:56:eb:
                    a7:c9:84:89:90:07:b6:3a:47:b0:95:fc:fd:31:67:
                    38:87:17:b8:94:a3:32:9c:53:1f:4b:64:74:6c:5c:
                    1e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FD:EC:D0:5E:E7:9E:5F:86:0D:66:75:DD:EC:C4:7D:B5:63:AB:12
            X509v3 Authority Key Identifier:
                keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:dc:d6:bc:78:7e:53:95:e7:d6:e4:36:22:dd:15:69:d0:83:
         30:71:7f:06:74:81:d8:e9:cc:9e:59:93:df:78:3c:2c:5f:6e:
         1c:7a:cf:fc:b9:98:10:d1:fd:6e:b0:4e:e5:80:43:f7:cc:c6:
         27:a6:65:4a:61:68:57:6c:8e:ed:59:e3:76:f0:7c:74:65:27:
         fd:0c:36:76:1d:aa:db:a2:8c:b5:90:84:6f:68:b1:a2:af:1d:
         94:b4:29:0d:ac:60:eb:07:85:9c:06:5b:97:e6:49:7f:e8:1d:
         34:6b:18:e2:6e:fd:e2:b7:09:eb:01:66:0a:a8:c3:f3:7b:c7:
         c3:1b:b5:26:ea:a4:68:9f:8e:42:be:63:d2:3f:99:1a:26:f0:
         29:76:30:15:16:a8:e6:1d:dd:75:bd:eb:c0:f3:89:6f:ca:7f:
         e4:25:94:74:cb:5e:54:f2:cb:16:2a:d3:9f:25:c8:83:4c:ee:
         99:27:b6:1e:c3:d9:53:6d:27:8b:e4:c0:cc:cc:98:82:04:a2:
         aa:e3:04:f6:e8:f1:e1:0b:ec:67:6c:7e:bf:51:32:dd:6a:fb:
         a8:8f:ee:0c:ab:9a:97:62:c5:93:61:e2:12:f3:86:e6:7d:aa:
         04:fc:2f:f8:19:cc:47:84:c7:ce:15:0e:49:69:cc:a3:23:ae:
         af:43:0c:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVBNDYxMTAvBgNVBAUTKDhCMTU0NDBBRTIyNkM5OTBGQzlFNTU5MTVGRThDOTUw
OUJDQjY2NzYwHhcNMjYwMzI1MDUxNzI5WhcNMjYwNDAxMDUxNzI5WjAYMRYwFAYD
VQQDEw02OWMzNmZlOS0zYTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAopXm5OxLKhpeF0oxpyA/UWpCI70eUK8xKxRZFnYToph+32YlQ1bON02hMtPD
tg7+20xg/XXkQ+3fcl6h0Y/xC9D3NYu0IP0GrOz+zE+9syV7a1xx1j9/aP4vr8pY
4qVG73S0LIziyg6b2K73wmzLWd7LL1HYhM9SHVfnwUzG2xDzuXiG09Oin+zafAPn
HZhHUq6iIKLz5qFi//hx/DTjdC6jeDL8JOsf6YGL6anJ7BzuEOBgiU61kpeAtx0I
1GghX1HhswIAVZ1LPvLbu3dxenO8yKE02RUW6mV/jcXFVuunyYSJkAe2Okewlfz9
MWc4hxe4lKMynFMfS2R0bFweEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHf97NBe
555fhg1mdd3sxH21Y6sSMB8GA1UdIwQYMBaAFIsVRAriJsmQ/J5VkV/oyVCby2Z2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9ENDM3MTExMjlD
MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9peFZFQ3VJbXlaRDhubFdSWC1qSlVKdkxa
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2l4VkVDdUlteVpEOG5sV1JYLWpKVUp2TFpuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RUE0Ni9ENDM3MTExMjlDMTExMUVGOTJGQkE5N0NDNEY5QUUwMi9peFZFQ3VJbXla
RDhubFdSWC1qSlVKdkxablkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAItzWvHh+U5Xn1uQ2It0VadCDMHF/BnSB2OnMnlmT33g8LF9uHHrP/LmYENH9
brBO5YBD98zGJ6ZlSmFoV2yO7VnjdvB8dGUn/Qw2dh2q26KMtZCEb2ixoq8dlLQp
Daxg6weFnAZbl+ZJf+gdNGsY4m794rcJ6wFmCqjD83vHwxu1JuqkaJ+OQr5j0j+Z
GibwKXYwFRao5h3ddb3rwPOJb8p/5CWUdMteVPLLFirTnyXIg0zumSe2HsPZU20n
i+TAzMyYggSiquME9ujx4QvsZ2x+v1Ey3Wr7qI/uDKual2LFk2HiEvOG5n2qBPwv
+BnMR4THzhUOSWnMoyOur0MMQg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:18:07 2026 by rpki-client