Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
File:                     rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json)
Hash identifier:          uOfD8NKyPaOcKUSC3r6GvlMrbQ4XAoDODUE748ynEwM=
Subject key identifier:   26:32:9B:B8:21:65:BE:EF:FC:71:3E:C5:21:FD:FF:AE:24:AB:86:E4
Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0
Certificate issuer:       /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
Manifest number:          0104
Signing time:             Wed 25 Mar 2026 05:17:32 +0000
Manifest this update:     Wed 25 Mar 2026 05:17:32 +0000
Manifest next update:     Wed 01 Apr 2026 05:17:32 +0000
Files and hashes:         1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: grplErP+wcppHEawb9+zU4lv7B1EWklxX45NKixkKYw=)
                          2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: Hu4k/NqzAGOhZjU80rFAqOtaPO4XcnFZGlunYG4Pvw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl
                          rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
        Validity
            Not Before: Mar 25 05:17:32 2026 GMT
            Not After : Apr  1 05:17:32 2026 GMT
        Subject: CN=69c36fec-ee7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:bd:5d:2d:88:77:be:9a:d6:8a:88:5e:6f:
                    20:8a:1a:b3:2e:61:c7:8c:b9:bc:da:b7:74:c1:50:
                    e7:7b:c2:a7:37:1b:15:06:5a:71:c3:77:be:c7:f7:
                    f5:b6:e2:cd:d1:f8:ff:2d:ed:28:bd:4a:be:e2:b7:
                    04:5b:4d:2d:cf:98:74:ca:ac:e4:94:94:d9:d1:66:
                    48:39:3b:23:2d:20:6c:21:fa:f0:79:c8:ac:ac:a7:
                    59:06:c3:db:69:b6:ec:ff:6e:9d:5b:2e:0e:b9:f6:
                    9b:67:6b:8d:57:38:62:96:c1:0c:7f:1b:bd:28:dc:
                    9d:94:35:59:cc:08:7a:d9:d0:67:ad:08:09:6f:1f:
                    a5:cb:82:e8:98:b3:74:aa:40:b3:d2:65:8c:97:e5:
                    d0:9b:0e:69:8f:9b:b7:80:86:d2:09:7e:e4:94:bc:
                    e5:21:71:cc:32:04:5f:a3:02:bf:c2:96:97:77:66:
                    f2:6f:f1:bd:af:97:c2:b9:0b:9a:77:e0:50:bf:bf:
                    90:2d:d6:b9:e4:e6:18:a4:52:18:13:6e:45:40:e7:
                    08:3f:95:6d:fd:c8:dd:ee:42:ba:36:c8:74:79:99:
                    54:e5:2f:b5:63:e2:48:32:11:45:05:1c:e8:a8:49:
                    2b:ee:bc:1e:34:ae:08:52:4c:3e:bb:c6:89:ff:8f:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:32:9B:B8:21:65:BE:EF:FC:71:3E:C5:21:FD:FF:AE:24:AB:86:E4
            X509v3 Authority Key Identifier:
                keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c8:c6:fc:d8:66:d0:32:44:88:c7:59:ee:b7:22:0e:bf:66:
         03:92:9f:c7:39:bf:09:9b:a4:b0:69:d8:13:dd:96:ff:31:c4:
         84:a7:a9:0f:d8:a8:f1:1a:56:b3:6e:58:81:8f:11:21:3a:95:
         e5:1c:51:95:e6:8a:f3:de:7f:64:ec:20:ca:19:84:fe:fa:d6:
         fc:92:b0:fa:7a:31:a1:2d:b5:3f:f3:e5:47:33:2f:20:e3:91:
         98:91:1e:6d:40:b6:d8:98:f6:ec:a9:50:0c:f6:dd:d0:6a:89:
         96:96:2f:0e:5d:43:7a:0a:03:4c:20:cb:4a:0f:5f:97:e7:d7:
         80:0e:03:be:d0:7a:4e:49:86:a7:52:ff:81:3d:ab:1d:05:5e:
         94:84:8a:e4:5f:d7:05:3a:0f:2d:95:e5:c8:6e:e4:79:4a:fb:
         33:8f:f6:31:0d:ef:b1:75:9d:c9:a2:dd:a4:0f:b2:3e:37:04:
         16:c2:e5:c0:4b:77:66:cf:7b:0f:68:aa:d3:cd:13:97:9a:8d:
         29:e5:01:87:87:b0:15:37:0a:2a:4d:4d:db:5a:f2:63:23:aa:
         fb:d1:d1:77:3c:8d:73:64:f9:ec:2b:18:01:1a:42:32:90:4b:
         0f:5e:c8:a6:69:19:4a:bb:5b:c3:77:7a:22:71:b2:9f:94:cf:
         94:81:2e:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVBNDYxMTAvBgNVBAUTKEFDMjhEQzJBNTU0QjRFMzM5QTM5OUM5NjQyQjRDRTAy
NjhBOERGQjAwHhcNMjYwMzI1MDUxNzMyWhcNMjYwNDAxMDUxNzMyWjAYMRYwFAYD
VQQDEw02OWMzNmZlYy1lZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtd+9XS2Id76a1oqIXm8gihqzLmHHjLm82rd0wVDne8KnNxsVBlpxw3e+x/f1
tuLN0fj/Le0ovUq+4rcEW00tz5h0yqzklJTZ0WZIOTsjLSBsIfrwecisrKdZBsPb
abbs/26dWy4OufabZ2uNVzhilsEMfxu9KNydlDVZzAh62dBnrQgJbx+ly4LomLN0
qkCz0mWMl+XQmw5pj5u3gIbSCX7klLzlIXHMMgRfowK/wpaXd2byb/G9r5fCuQua
d+BQv7+QLda55OYYpFIYE25FQOcIP5Vt/cjd7kK6Nsh0eZlU5S+1Y+JIMhFFBRzo
qEkr7rweNK4IUkw+u8aJ/494SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCYym7gh
Zb7v/HE+xSH9/64kq4bkMB8GA1UdIwQYMBaAFKwo3CpVS04zmjmclkK0zgJoqN+w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9EQkRBMkNDNDlD
MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRqT2FPWnlXUXJUT0FtaW8z
N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RUE0Ni9EQkRBMkNDNDlDMTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRq
T2FPWnlXUXJUT0FtaW8zN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY8jG/Nhm0DJEiMdZ7rciDr9mA5Kfxzm/CZuksGnYE92W/zHEhKepD9io8RpW
s25YgY8RITqV5RxRleaK895/ZOwgyhmE/vrW/JKw+noxoS21P/PlRzMvIOORmJEe
bUC22Jj27KlQDPbd0GqJlpYvDl1DegoDTCDLSg9fl+fXgA4DvtB6TkmGp1L/gT2r
HQVelISK5F/XBToPLZXlyG7keUr7M4/2MQ3vsXWdyaLdpA+yPjcEFsLlwEt3Zs97
D2iq080Tl5qNKeUBh4ewFTcKKk1N21ryYyOq+9HRdzyNc2T57CsYARpCMpBLD17I
pmkZSrtbw3d6InGyn5TPlIEusQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:58 2026 by rpki-client