Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
File:                     Rm8RJELF0C5g8kaZGTriFRlbO6k.mft (raw, json)
Hash identifier:          7f4xczzOTEme7ZI/HmQ9Zc9D7ylbo9LE6wcJOiXdQ+4=
Subject key identifier:   61:04:38:E1:37:44:A0:32:14:50:2A:B4:55:E2:98:52:15:2F:A6:50
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0E43
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
Manifest number:          0E1B
Signing time:             Tue 24 Mar 2026 14:22:43 +0000
Manifest this update:     Tue 24 Mar 2026 14:22:43 +0000
Manifest next update:     Tue 31 Mar 2026 14:22:43 +0000
Files and hashes:         1: Rm8RJELF0C5g8kaZGTriFRlbO6k.crl (hash: PsoHXt3qCeN099qdTIEZqItLUZGUcFZOSwmpIR6b2vs=)
                          2: 266ABA161E5811EF89038F3BC4F9AE02.roa (hash: 2mykxIxiqsMsDnD5UHQtUMKZScZ9tuzk0LE2MZEIafE=)
                          3: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (hash: FYg1sztOimGkD/LIpHQVCG8NcB8eonAdaVTsth0VmSw=)
                          4: 91CA6CBC740111EFB5E97021C4F9AE02.roa (hash: VUZOzVeu3Rmihqe+9bsoHbZ1D9W7VkSJow2zZcM/4pU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3651 (0xe43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: Mar 24 14:22:43 2026 GMT
            Not After : Mar 31 14:22:43 2026 GMT
        Subject: CN=69c29e33-0a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:0e:09:64:ee:31:79:c6:03:57:7f:69:49:
                    21:09:30:f2:3a:a0:4c:c3:4b:d5:27:59:60:10:79:
                    59:fc:92:bf:e3:77:f7:7a:0b:3e:ba:2d:6e:d6:10:
                    fa:ed:5d:8d:0e:10:17:28:84:4f:c3:ae:fa:d6:cb:
                    19:8f:b3:d4:2b:6c:95:4e:d4:68:fa:42:e9:79:f9:
                    21:1a:34:d0:5f:8f:fc:13:79:33:48:52:69:1c:40:
                    6c:99:bd:ca:45:48:fb:1b:df:4a:b9:61:92:9d:3c:
                    bc:93:c6:46:74:58:a1:58:f4:88:f1:20:58:46:00:
                    ea:eb:7e:1e:b6:5e:e8:81:29:95:1f:ed:e5:1d:49:
                    5c:21:8f:b7:93:4a:d5:cf:d6:f4:93:c8:25:bf:72:
                    4a:62:19:1f:be:45:e9:6e:9e:3f:92:0f:e7:67:52:
                    98:0e:67:d2:60:1a:d7:a5:0f:f3:98:2c:dc:ca:ae:
                    ea:a3:d7:40:e6:0f:9a:70:21:4c:dc:aa:9b:9e:20:
                    cc:57:38:0c:85:1f:99:08:18:36:f1:ca:90:65:16:
                    cd:54:77:a1:e5:7b:2f:09:df:41:2a:9c:23:ab:c8:
                    9d:89:2e:17:5d:ba:d4:88:79:c4:3c:f3:2d:c0:60:
                    0f:b8:6d:2e:9d:86:d3:07:0a:f9:77:46:5a:0c:59:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:04:38:E1:37:44:A0:32:14:50:2A:B4:55:E2:98:52:15:2F:A6:50
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:16:66:ac:b2:51:a3:2d:75:ce:ee:3d:c9:91:0e:85:e3:f3:
         0f:79:d8:47:e7:00:5d:60:4c:df:3d:22:77:51:40:a9:96:19:
         fa:ae:35:ae:1b:1a:2d:71:8b:0c:03:43:22:30:55:04:2d:4f:
         4d:c3:89:b2:5e:3b:da:3f:9c:c8:3a:82:e5:b5:89:32:84:d2:
         17:8b:f0:bc:33:63:6c:35:ae:7a:cb:ae:b3:eb:5c:30:93:9f:
         9e:d2:95:cc:e1:db:bd:86:d7:d1:60:3e:da:7c:b2:b1:d3:6b:
         60:05:fa:1e:20:b7:4b:87:6a:2e:b9:50:62:4e:77:34:e3:4d:
         c8:45:1a:f3:32:a3:75:25:ef:35:36:e6:e7:c2:33:01:ac:16:
         87:dc:f7:6d:4b:de:97:9e:f7:de:c5:ce:72:7e:44:e9:be:b5:
         aa:05:61:f1:ce:92:e0:ca:de:32:cf:fe:d5:f4:82:db:1a:39:
         cb:8a:ba:9c:5c:84:36:50:71:c9:77:8e:95:a2:d0:e3:84:9e:
         90:c4:11:5a:3b:d1:af:8e:21:ab:65:2c:25:8b:09:20:44:22:
         91:b3:3e:aa:19:61:ec:e6:43:45:9b:37:54:a3:2f:57:40:ee:
         6a:f6:49:5d:ec:34:17:48:b8:65:38:a3:a3:9f:c2:12:eb:10:
         c9:70:5d:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKDQ2NkYxMTI0NDJDNUQwMkU2MEYyNDY5OTE5M0FFMjE1
MTk1QjNCQTkwHhcNMjYwMzI0MTQyMjQzWhcNMjYwMzMxMTQyMjQzWjAYMRYwFAYD
VQQDEw02OWMyOWUzMy0wYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAryUOCWTuMXnGA1d/aUkhCTDyOqBMw0vVJ1lgEHlZ/JK/43f3egs+ui1u1hD6
7V2NDhAXKIRPw6761ssZj7PUK2yVTtRo+kLpefkhGjTQX4/8E3kzSFJpHEBsmb3K
RUj7G99KuWGSnTy8k8ZGdFihWPSI8SBYRgDq634etl7ogSmVH+3lHUlcIY+3k0rV
z9b0k8glv3JKYhkfvkXpbp4/kg/nZ1KYDmfSYBrXpQ/zmCzcyq7qo9dA5g+acCFM
3KqbniDMVzgMhR+ZCBg28cqQZRbNVHeh5XsvCd9BKpwjq8idiS4XXbrUiHnEPPMt
wGAPuG0unYbTBwr5d0ZaDFnBAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGEEOOE3
RKAyFFAqtFXimFIVL6ZQMB8GA1UdIwQYMBaAFEZvESRCxdAuYPJGmRk64hUZWzup
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy8wMUIwNjlGNkNF
QkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBDNWc4a2FaR1RyaUZSbGJP
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1JtOFJKRUxGMEM1ZzhrYVpHVHJpRlJsYk82ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Rjg5Qy8wMUIwNjlGNkNFQkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBD
NWc4a2FaR1RyaUZSbGJPNmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVBZmrLJRoy11zu49yZEOhePzD3nYR+cAXWBM3z0id1FAqZYZ+q41rhsaLXGL
DANDIjBVBC1PTcOJsl472j+cyDqC5bWJMoTSF4vwvDNjbDWuesuus+tcMJOfntKV
zOHbvYbX0WA+2nyysdNrYAX6HiC3S4dqLrlQYk53NONNyEUa8zKjdSXvNTbm58Iz
AawWh9z3bUvel5733sXOcn5E6b61qgVh8c6S4MreMs/+1fSC2xo5y4q6nFyENlBx
yXeOlaLQ44SekMQRWjvRr44hq2UsJYsJIEQikbM+qhlh7OZDRZs3VKMvV0DuavZJ
Xew0F0i4ZTijo5/CEusQyXBd3A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:43 2026 by rpki-client