Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
File:                     PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json)
Hash identifier:          Jvl7yNFq47bM7+nyDktaSjbzMtcepeHRDrgdjpfUzbg=
Subject key identifier:   08:9F:B7:F5:9C:2A:A1:67:27:FD:85:46:52:C0:0F:56:20:9F:0E:B3
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Certificate issuer:       /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
Manifest number:          021F
Signing time:             Wed 25 Mar 2026 02:13:09 +0000
Manifest this update:     Wed 25 Mar 2026 02:13:09 +0000
Manifest next update:     Wed 01 Apr 2026 02:13:09 +0000
Files and hashes:         1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: PMvrAbp/suBs5//ilOYIbJpmlQgf136ST1ctaSPSyso=)
                          2: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: 6V7NNVVZTxyCh5Txl3hNUmiHovCgfv7Ahs54pF9ckGI=)
                          3: 38891D6C159111EEA7190965C4F9AE02.roa (hash: tadv1xqP3nb6G3HOlaFfSggQWJOGlx//7euYB9t2R9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
        Validity
            Not Before: Mar 25 02:13:09 2026 GMT
            Not After : Apr  1 02:13:09 2026 GMT
        Subject: CN=69c344b5-12fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:8e:78:c4:8c:92:8f:c5:c8:5d:1d:75:ca:
                    75:e2:e4:e9:50:67:02:ef:1d:47:98:98:3c:52:18:
                    82:44:c7:0e:9d:26:b1:f8:00:e9:ed:70:68:0c:10:
                    2d:51:37:4f:06:d2:2b:83:d5:9d:a3:d3:6b:28:59:
                    28:6a:03:a4:c7:04:d6:6f:76:c1:aa:2c:ad:5c:8d:
                    6f:f0:de:e9:c4:66:4a:71:e6:3e:68:39:3e:22:c6:
                    57:6f:2b:ff:40:8d:e3:ee:ca:02:73:d8:77:c1:e0:
                    5c:55:0a:9e:25:72:a6:30:8a:1a:13:a2:c5:8a:a0:
                    76:98:bf:52:fc:3c:d3:0b:dc:9e:53:85:1a:9f:7d:
                    a0:d7:1f:42:99:e9:23:c4:c1:d6:41:13:7f:22:fd:
                    67:89:47:8c:2c:ca:31:71:8b:c7:a4:29:0b:66:cf:
                    ba:ae:8e:a7:76:35:94:f0:18:f5:51:25:ac:dd:20:
                    f2:32:7d:1b:6f:fe:07:ac:b1:0e:0c:40:8f:ab:25:
                    c4:68:7e:18:76:a8:45:c6:da:0b:0c:c6:c9:e5:ec:
                    ec:6f:e5:40:76:aa:6b:d9:92:25:ff:1d:a2:d2:0c:
                    1b:74:23:86:8b:86:e0:57:ba:59:67:b7:5f:a2:19:
                    64:84:d0:3e:05:ae:1a:b0:27:58:6d:95:4f:0b:61:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9F:B7:F5:9C:2A:A1:67:27:FD:85:46:52:C0:0F:56:20:9F:0E:B3
            X509v3 Authority Key Identifier:
                keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a0:38:a7:02:9d:56:70:05:03:e3:a9:92:4d:46:9c:36:a0:
         12:6d:a7:b1:64:e5:fd:91:f6:05:59:8a:62:17:89:1c:09:07:
         ee:b1:f0:fa:c5:8c:d9:56:8f:54:2f:76:20:14:06:5f:d8:ae:
         30:2a:56:ce:39:f3:9f:3c:62:7f:55:74:90:2e:af:a0:af:9c:
         27:8c:2e:30:5e:7f:cc:f1:7a:08:a3:7b:4c:57:9a:7f:0e:d7:
         3e:7f:85:51:9e:74:21:f2:65:64:35:2d:a9:c0:e5:0e:95:4a:
         62:fb:7b:3f:cc:f8:e2:f2:ad:a3:89:93:6a:4d:65:08:02:03:
         be:92:c2:e8:e8:c8:6b:8e:b9:91:95:34:1c:43:3d:f9:b5:6f:
         62:7d:63:bd:36:9b:55:b9:bf:d2:23:ab:07:29:a2:0b:9c:0c:
         c5:f5:f3:db:41:84:5a:cd:07:16:8f:c4:a4:29:97:fa:47:08:
         ed:a1:f6:54:40:eb:94:ee:bb:89:2c:a7:a7:ca:70:a2:40:ac:
         09:6b:b3:bf:44:ac:21:85:fc:fc:be:ac:22:91:3f:08:c1:77:
         75:b7:97:6b:ee:bb:f0:25:47:c4:0a:2c:e0:d7:90:8d:e4:86:
         3f:96:2d:5c:05:d4:0a:a9:5b:01:ae:b1:1b:b5:7b:99:00:93:
         68:84:13:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYxMjMxMTAvBgNVBAUTKDNERTY3ODFENjc1RUNBNzlGMkZFM0QxN0FCMjQzQ0I3
NEI3Qjk2MjIwHhcNMjYwMzI1MDIxMzA5WhcNMjYwNDAxMDIxMzA5WjAYMRYwFAYD
VQQDEw02OWMzNDRiNS0xMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnsKOeMSMko/FyF0ddcp14uTpUGcC7x1HmJg8UhiCRMcOnSax+ADp7XBoDBAt
UTdPBtIrg9Wdo9NrKFkoagOkxwTWb3bBqiytXI1v8N7pxGZKceY+aDk+IsZXbyv/
QI3j7soCc9h3weBcVQqeJXKmMIoaE6LFiqB2mL9S/DzTC9yeU4Uan32g1x9Cmekj
xMHWQRN/Iv1niUeMLMoxcYvHpCkLZs+6ro6ndjWU8Bj1USWs3SDyMn0bb/4HrLEO
DECPqyXEaH4YdqhFxtoLDMbJ5ezsb+VAdqpr2ZIl/x2i0gwbdCOGi4bgV7pZZ7df
ohlkhNA+Ba4asCdYbZVPC2FmiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAift/Wc
KqFnJ/2FRlLAD1Ygnw6zMB8GA1UdIwQYMBaAFD3meB1nXsp58v49F6skPLdLe5Yi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xMEJFOUUyMkY0
OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlubnlfajBYcXlROHQwdDds
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BlWjRIV2RleW5ueV9qMFhxeVE4dDB0N2xpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjEyMy8xMEJFOUUyMkY0OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9QZVo0SFdkZXlu
bnlfajBYcXlROHQwdDdsaUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjaA4pwKdVnAFA+Opkk1GnDagEm2nsWTl/ZH2BVmKYheJHAkH7rHw+sWM2VaP
VC92IBQGX9iuMCpWzjnznzxif1V0kC6voK+cJ4wuMF5/zPF6CKN7TFeafw7XPn+F
UZ50IfJlZDUtqcDlDpVKYvt7P8z44vKto4mTak1lCAIDvpLC6OjIa465kZU0HEM9
+bVvYn1jvTabVbm/0iOrBymiC5wMxfXz20GEWs0HFo/EpCmX+kcI7aH2VEDrlO67
iSynp8pwokCsCWuzv0SsIYX8/L6sIpE/CMF3dbeXa+678CVHxAos4NeQjeSGP5Yt
XAXUCqlbAa6xG7V7mQCTaIQTpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:36 2026 by rpki-client