Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
File:                     M0SkOWDcSkdzux3w_wON9BYPNXo.mft (raw, json)
Hash identifier:          RRvEmDYrfKolaGk0Bnqwkd+dg4XVGjjIUQRCpuQYzj4=
Subject key identifier:   EE:48:D0:C9:58:69:C4:C5:8F:25:1A:17:47:71:C4:2D:6A:F0:CD:81
Authority key identifier: 33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A
Certificate issuer:       /CN=A91676E2/serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A
Certificate serial:       03CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
Manifest number:          03B1
Signing time:             Wed 25 Mar 2026 00:24:40 +0000
Manifest this update:     Wed 25 Mar 2026 00:24:39 +0000
Manifest next update:     Wed 01 Apr 2026 00:24:39 +0000
Files and hashes:         1: M0SkOWDcSkdzux3w_wON9BYPNXo.crl (hash: Y81gCBGy+TRGyjkiG4d7kFY16dujtONjmgGhQcdfn6o=)
                          2: 4D03B06C83FA11EF9E6EC075C4F9AE02.roa (hash: rHTiC7Ruf3Dg+UBL1fmMYzGvALaDp1m8S/nht/QyJ6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl
                          rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970 (0x3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676E2, serialNumber=3344A43960DC4A4773BB1DF0FF038DF4160F357A
        Validity
            Not Before: Mar 25 00:24:39 2026 GMT
            Not After : Apr  1 00:24:39 2026 GMT
        Subject: CN=69c32b47-3df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:06:2d:e2:b3:00:04:34:a9:d3:88:08:79:15:
                    d3:27:8a:e2:15:0e:17:a9:49:4e:07:ef:31:b1:db:
                    0f:66:b6:bc:07:7c:d4:a5:c3:d8:f7:d2:95:ac:92:
                    44:64:0f:a4:19:42:bc:9f:8f:bd:4c:3b:98:fe:48:
                    28:34:46:e6:8c:f3:f1:19:0f:57:61:3d:b8:63:9f:
                    07:6f:3e:3a:e4:7d:a2:32:17:35:1d:45:00:06:14:
                    72:5e:51:97:f5:b5:86:2a:92:83:26:0e:0c:b8:65:
                    bb:58:72:58:d2:1a:46:ae:da:d4:30:a7:42:90:d2:
                    e2:d1:1f:98:6b:a3:05:ca:1f:37:8f:e7:4c:20:26:
                    a4:f7:db:46:da:f8:68:d2:26:61:c7:c2:9c:5f:8f:
                    b1:e3:ec:d4:22:21:7d:07:f8:56:e4:ea:c1:25:07:
                    05:8c:69:d1:8e:74:aa:70:b9:6d:cc:27:16:55:f4:
                    2a:e4:9e:12:df:d9:f4:1c:3f:60:63:87:26:4f:30:
                    48:43:b7:0c:8d:7e:98:51:09:81:a4:74:45:a7:80:
                    e9:45:74:3e:e3:23:1f:64:46:bc:22:bd:87:b2:59:
                    82:18:73:27:fe:3e:4c:d0:a6:a2:b3:58:64:b6:20:
                    2d:f6:98:81:13:f5:63:c6:74:94:ed:8b:f6:3d:c4:
                    19:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:48:D0:C9:58:69:C4:C5:8F:25:1A:17:47:71:C4:2D:6A:F0:CD:81
            X509v3 Authority Key Identifier:
                keyid:33:44:A4:39:60:DC:4A:47:73:BB:1D:F0:FF:03:8D:F4:16:0F:35:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M0SkOWDcSkdzux3w_wON9BYPNXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676E2/2259A186D85411ECB9E1E486C4F9AE02/M0SkOWDcSkdzux3w_wON9BYPNXo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e2:18:d6:9f:5a:2b:72:6d:7c:25:ad:10:67:4d:f6:e0:bd:
         2a:4e:ef:55:31:51:cf:d9:77:5b:cb:fb:d4:b9:45:e7:d7:1a:
         80:6b:97:5e:54:d5:0f:dd:d9:70:ba:69:5e:f2:b5:f3:72:3f:
         33:52:77:e7:26:a5:e1:32:16:1e:23:a6:41:89:c1:54:77:b8:
         93:5a:ec:40:66:c9:1e:77:9b:41:8f:f4:8f:84:56:f9:09:f0:
         9f:2a:2a:21:26:11:fc:f1:b7:61:3b:03:cd:28:1f:ae:42:6c:
         a1:0f:46:d6:8c:b0:96:99:f4:87:96:5d:a5:4f:ea:d1:49:cf:
         b5:00:ba:6b:85:db:f9:51:8d:45:95:7d:b6:e5:f9:3e:04:fe:
         78:b8:a0:eb:57:d9:69:d7:ae:4e:ff:f9:ec:5b:0b:aa:65:02:
         5f:fd:4f:75:8f:ff:48:70:77:65:67:67:4d:96:46:3a:5a:28:
         fd:53:cf:df:ba:ba:3c:01:ab:cf:84:a7:72:3e:20:c2:9c:a2:
         7e:be:06:1a:fc:32:40:2e:2c:43:1a:91:33:7d:b5:bf:d9:6a:
         b6:31:59:54:70:4c:52:34:0c:c3:bc:0f:7b:7c:77:45:15:ec:
         a7:ba:6f:93:b9:44:67:86:51:08:01:32:79:f7:33:b7:13:1f:
         d4:7b:d3:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc2RTIxMTAvBgNVBAUTKDMzNDRBNDM5NjBEQzRBNDc3M0JCMURGMEZGMDM4REY0
MTYwRjM1N0EwHhcNMjYwMzI1MDAyNDM5WhcNMjYwNDAxMDAyNDM5WjAYMRYwFAYD
VQQDEw02OWMzMmI0Ny0zZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5wYt4rMABDSp04gIeRXTJ4riFQ4XqUlOB+8xsdsPZra8B3zUpcPY99KVrJJE
ZA+kGUK8n4+9TDuY/kgoNEbmjPPxGQ9XYT24Y58Hbz465H2iMhc1HUUABhRyXlGX
9bWGKpKDJg4MuGW7WHJY0hpGrtrUMKdCkNLi0R+Ya6MFyh83j+dMICak99tG2vho
0iZhx8KcX4+x4+zUIiF9B/hW5OrBJQcFjGnRjnSqcLltzCcWVfQq5J4S39n0HD9g
Y4cmTzBIQ7cMjX6YUQmBpHRFp4DpRXQ+4yMfZEa8Ir2HslmCGHMn/j5M0Kais1hk
tiAt9piBE/VjxnSU7Yv2PcQZ/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5I0MlY
acTFjyUaF0dxxC1q8M2BMB8GA1UdIwQYMBaAFDNEpDlg3EpHc7sd8P8DjfQWDzV6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzZFMi8yMjU5QTE4NkQ4
NTQxMUVDQjlFMUU0ODZDNEY5QUUwMi9NMFNrT1dEY1NrZHp1eDN3X3dPTjlCWVBO
WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00wU2tPV0RjU2tkenV4M3dfd09OOUJZUE5Yby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzZFMi8yMjU5QTE4NkQ4NTQxMUVDQjlFMUU0ODZDNEY5QUUwMi9NMFNrT1dEY1Nr
ZHp1eDN3X3dPTjlCWVBOWG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ+IY1p9aK3JtfCWtEGdN9uC9Kk7vVTFRz9l3W8v71LlF59cagGuXXlTVD93Z
cLppXvK183I/M1J35yal4TIWHiOmQYnBVHe4k1rsQGbJHnebQY/0j4RW+Qnwnyoq
ISYR/PG3YTsDzSgfrkJsoQ9G1oywlpn0h5ZdpU/q0UnPtQC6a4Xb+VGNRZV9tuX5
PgT+eLig61fZadeuTv/57FsLqmUCX/1PdY//SHB3ZWdnTZZGOloo/VPP37q6PAGr
z4Sncj4gwpyifr4GGvwyQC4sQxqRM321v9lqtjFZVHBMUjQMw7wPe3x3RRXsp7pv
k7lEZ4ZRCAEyefcztxMf1HvTig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:37:37 2026 by rpki-client