Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
File:                     u7dF5o0mJdldbQcyKFARSry-_wQ.mft (raw, json)
Hash identifier:          lCLy72OYbZ2BIBO7jFHrLNcXZcKoKXsHdtMbFnMBPs4=
Subject key identifier:   6A:D3:93:09:65:B5:68:82:E4:C3:2F:38:BF:7F:FF:87:1B:42:88:17
Authority key identifier: BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04
Certificate issuer:       /CN=A9168F50/serialNumber=BBB745E68D2625D95D6D07322850114ABCBEFF04
Certificate serial:       43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
Manifest number:          41
Signing time:             Fri 27 Mar 2026 07:58:46 +0000
Manifest this update:     Fri 27 Mar 2026 07:58:46 +0000
Manifest next update:     Fri 03 Apr 2026 07:58:46 +0000
Files and hashes:         1: u7dF5o0mJdldbQcyKFARSry-_wQ.crl (hash: 0MWXZ0DzZulvgHXzARmudXKCH4PeKxX5I2s2u49sWwI=)
                          2: 8FD832B4C9B311F0BC2AD366C4F9AE02.roa (hash: cQJLuCSOM+o2aUzG2mT2OZwzOyveUbTM2bM6yH/VclY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.crl
                          rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168F50, serialNumber=BBB745E68D2625D95D6D07322850114ABCBEFF04
        Validity
            Not Before: Mar 27 07:58:46 2026 GMT
            Not After : Apr  3 07:58:46 2026 GMT
        Subject: CN=69c638b6-290c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:df:e9:bb:8b:ce:b7:ac:80:63:b7:61:d2:
                    70:a8:3b:0e:00:2b:97:ba:d7:d4:c4:43:ad:e9:e0:
                    e3:4a:ab:ea:7f:55:6a:27:dc:d2:bf:cc:e5:f2:58:
                    f7:de:2e:ab:34:78:eb:14:79:7c:98:08:5e:4d:de:
                    b3:80:85:54:72:f2:7c:85:9f:a2:b3:40:30:21:2f:
                    a0:94:23:b3:24:6c:fa:72:e1:8d:ca:b5:09:60:d7:
                    f2:95:5c:7a:93:2d:2d:14:f7:8e:08:f7:6f:7a:58:
                    b0:11:6b:8d:f1:16:00:01:91:f0:70:91:6d:06:42:
                    b8:9e:7e:22:cb:f8:fc:a6:e7:83:8c:50:ed:56:d7:
                    d8:f2:6e:0a:44:47:0b:56:f1:7c:76:47:b9:64:de:
                    cd:02:9e:23:71:02:13:3f:49:cc:f0:9f:93:00:bf:
                    06:ac:19:01:56:4b:bf:20:b4:35:17:13:66:ef:35:
                    a6:05:4d:94:86:6d:d9:e7:1b:a6:21:b2:ae:75:af:
                    10:0b:42:71:08:82:d0:4b:10:b7:5d:c8:ee:b6:18:
                    54:43:24:c4:c5:87:1f:4c:6b:31:cd:9c:6d:95:6a:
                    d9:79:e1:f2:ad:d7:dc:38:5d:a2:64:4e:98:51:ae:
                    ee:88:77:0d:04:6d:df:90:d0:91:bd:e3:ac:33:62:
                    f0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D3:93:09:65:B5:68:82:E4:C3:2F:38:BF:7F:FF:87:1B:42:88:17
            X509v3 Authority Key Identifier:
                keyid:BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:18:5a:fd:13:b2:4c:a1:b7:16:95:cb:6b:03:a3:27:82:2f:
         88:c9:06:59:e7:00:bd:cf:d6:df:62:06:82:c7:b1:37:18:52:
         77:68:61:ba:f3:23:39:45:f9:89:dd:1b:40:33:7c:26:c2:ce:
         03:93:33:b6:d7:db:8b:f8:f3:5a:f6:c6:d5:c6:52:e8:1e:91:
         45:0e:35:39:41:b5:d3:56:bc:37:22:38:8a:b7:c8:43:05:5d:
         b2:10:5f:47:e5:aa:90:3a:11:94:32:fc:a5:50:87:d8:0e:b1:
         83:b1:af:6c:fa:d9:52:1c:ee:53:d5:b0:2a:c7:1d:17:8d:5c:
         ec:fd:8e:29:e0:11:bb:a3:81:2c:b3:c2:ad:b1:cc:f2:46:04:
         06:fb:9b:2d:60:8c:ee:6e:96:c5:c4:dd:0e:e6:a7:52:a5:41:
         23:c1:41:ce:7e:d2:28:0c:7c:5f:85:a6:f8:0b:b2:10:87:fe:
         96:62:fb:e7:d8:39:9f:c5:08:2d:b4:43:7b:60:17:c2:64:cc:
         85:97:9f:4a:9f:b4:24:86:ee:b7:5e:1d:b5:28:1c:81:26:60:
         b4:d0:49:c0:45:bf:2f:22:8a:4c:32:0e:23:55:ce:97:46:0a:
         db:99:8b:f9:56:7a:05:17:42:ef:57:e7:f0:b0:aa:25:8a:48:
         56:d0:36:b0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
OEY1MDExMC8GA1UEBRMoQkJCNzQ1RTY4RDI2MjVEOTVENkQwNzMyMjg1MDExNEFC
Q0JFRkYwNDAeFw0yNjAzMjcwNzU4NDZaFw0yNjA0MDMwNzU4NDZaMBgxFjAUBgNV
BAMTDTY5YzYzOGI2LTI5MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyid/pu4vOt6yAY7dh0nCoOw4AK5e619TEQ63p4ONKq+p/VWon3NK/zOXyWPfe
Lqs0eOsUeXyYCF5N3rOAhVRy8nyFn6KzQDAhL6CUI7MkbPpy4Y3KtQlg1/KVXHqT
LS0U944I9296WLARa43xFgABkfBwkW0GQriefiLL+Pym54OMUO1W19jybgpERwtW
8Xx2R7lk3s0CniNxAhM/Sczwn5MAvwasGQFWS78gtDUXE2bvNaYFTZSGbdnnG6Yh
sq51rxALQnEIgtBLELddyO62GFRDJMTFhx9MazHNnG2Vatl54fKt19w4XaJkTphR
ru6Idw0Ebd+Q0JG946wzYvBJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUatOTCWW1
aILkwy84v3//hxtCiBcwHwYDVR0jBBgwFoAUu7dF5o0mJdldbQcyKFARSry+/wQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RjUwLzBDRUREMUNFQzlC
MzExRjA5QjM0RkM3OEM0RjlBRTAyL3U3ZEY1bzBtSmRsZGJRY3lLRkFSU3J5LV93
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdTdkRjVvMG1KZGxkYlFjeUtGQVJTcnktX3dRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4
RjUwLzBDRUREMUNFQzlCMzExRjA5QjM0RkM3OEM0RjlBRTAyL3U3ZEY1bzBtSmRs
ZGJRY3lLRkFSU3J5LV93US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQACGFr9E7JMobcWlctrA6Mngi+IyQZZ5wC9z9bfYgaCx7E3GFJ3aGG68yM5RfmJ
3RtAM3wmws4DkzO219uL+PNa9sbVxlLoHpFFDjU5QbXTVrw3IjiKt8hDBV2yEF9H
5aqQOhGUMvylUIfYDrGDsa9s+tlSHO5T1bAqxx0XjVzs/Y4p4BG7o4Ess8Ktsczy
RgQG+5stYIzubpbFxN0O5qdSpUEjwUHOftIoDHxfhab4C7IQh/6WYvvn2DmfxQgt
tEN7YBfCZMyFl59Kn7Qkhu63Xh21KByBJmC00EnARb8vIopMMg4jVc6XRgrbmYv5
VnoFF0LvV+fwsKolikhW0Daw
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:36:49 2026 by rpki-client