Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
File:                     4bseYl2967MiD_kjzWoRos4kUZY.mft (raw, json)
Hash identifier:          6fR9MP+QrT+WhQ68Lh2wqumCT0zJ9DMh8/JbVq6ZHQY=
Subject key identifier:   41:5E:A5:4D:13:19:3B:DD:72:5B:1C:B2:79:51:C8:3E:68:AE:43:81
Authority key identifier: E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96
Certificate issuer:       /CN=A916A31E/serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
Certificate serial:       18A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
Manifest number:          1864
Signing time:             Thu 26 Mar 2026 16:29:15 +0000
Manifest this update:     Thu 26 Mar 2026 16:29:14 +0000
Manifest next update:     Thu 02 Apr 2026 16:29:14 +0000
Files and hashes:         1: 4bseYl2967MiD_kjzWoRos4kUZY.crl (hash: a0EHy2lyJZcgQun9+1U2urHeEWE06v5u7pEuyZkl9zU=)
                          2: 2A3161763D9F11EEACFF646FC4F9AE02.roa (hash: dgLQAd17tzBsK66kQ0H0dwAp53SX6GdmC4ibG9feFVM=)
                          3: 2B04CC143D9F11EEACFF646FC4F9AE02.roa (hash: X9rsotZF7CeUjy+uRHBz/MOZBNYjTpkQ13IOleGdKEE=)
                          4: FA2CCDCCDE6111E88BFD7810C4F9AE02.roa (hash: 7ZAEA0r9lzg48+UEX+NDAtHxRbz47d+Yj5cRgz6OmvE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl
                          rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6311 (0x18a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A31E, serialNumber=E1BB1E625DBDEBB3220FF923CD6A11A2CE245196
        Validity
            Not Before: Mar 26 16:29:14 2026 GMT
            Not After : Apr  2 16:29:14 2026 GMT
        Subject: CN=69c55eda-36d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:86:86:ef:92:e2:35:ec:56:6e:08:53:7a:
                    4c:69:d8:c2:54:f5:4b:92:16:b8:ac:9a:3e:07:e0:
                    00:21:fe:b8:3f:fb:d9:13:3f:61:20:e9:65:3f:d4:
                    13:cb:c7:c1:d7:e6:8a:c6:ed:6c:aa:15:e9:18:5c:
                    8d:06:08:85:f1:3c:23:b6:9d:be:17:99:f1:af:e2:
                    a1:88:89:0b:bd:b8:38:b9:ab:e4:32:a5:c7:7c:7c:
                    46:2d:09:e0:af:21:a4:b9:fc:b4:c1:02:63:eb:7c:
                    67:c5:0e:3b:e6:8b:eb:21:99:15:a9:f8:6c:dd:1f:
                    cf:cb:02:5c:b3:8e:3a:88:85:48:b8:d4:80:61:a3:
                    0e:46:c8:c5:1f:df:2f:00:25:a8:84:bd:b0:67:7d:
                    c8:11:60:cd:10:5b:e6:45:57:3c:00:a4:51:e2:f8:
                    89:ad:a1:a4:c5:6e:c6:41:e5:f0:c6:03:0a:17:0e:
                    2e:b2:34:ee:1a:ab:01:b1:84:20:6b:3e:3d:dd:9f:
                    0e:33:02:f9:42:38:1f:6f:0e:dc:66:61:0f:6b:a9:
                    ed:20:81:61:6f:59:8e:80:cd:1c:fb:67:33:c8:fa:
                    94:26:dc:e2:19:3b:22:ac:b0:7b:27:88:2d:30:ff:
                    6f:5e:f9:ae:1d:f3:f4:ea:c1:ec:1b:59:2b:af:a7:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5E:A5:4D:13:19:3B:DD:72:5B:1C:B2:79:51:C8:3E:68:AE:43:81
            X509v3 Authority Key Identifier:
                keyid:E1:BB:1E:62:5D:BD:EB:B3:22:0F:F9:23:CD:6A:11:A2:CE:24:51:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bseYl2967MiD_kjzWoRos4kUZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A31E/C1FA082CC8CB11E790A88138C4F9AE02/4bseYl2967MiD_kjzWoRos4kUZY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:03:f4:a6:46:f6:40:9b:ea:7c:33:78:ee:1f:b9:9c:2e:d0:
         88:2b:63:2a:62:e0:d2:e9:4e:51:52:0d:33:73:22:f2:5a:6d:
         fa:bf:ab:1f:1a:eb:cf:e3:ba:80:65:a0:e5:58:fe:79:34:06:
         6e:12:dc:81:b8:f8:d6:12:a1:a6:63:ae:59:dc:81:07:b6:7b:
         fa:cb:f3:01:ac:a9:cf:a5:45:73:0e:77:40:52:54:0f:fb:ab:
         84:d6:d1:06:08:b9:bf:f4:f0:33:7e:02:a6:44:ac:3f:1a:c4:
         7b:95:5c:29:7e:e0:21:d0:c0:fc:51:96:f9:e7:2e:62:22:d1:
         fc:75:83:b8:32:97:5f:45:b6:4b:71:0d:02:5d:4f:0c:8a:7c:
         80:6c:82:fe:b0:55:59:65:a2:e7:01:63:e0:6d:78:13:66:49:
         fb:c2:8b:91:1e:21:fe:5c:49:16:47:05:00:ff:4b:75:06:fd:
         49:da:55:fe:d2:23:85:eb:d2:8c:31:31:10:07:a6:0a:28:f9:
         52:cf:92:a4:2b:8c:3e:d3:e1:fd:31:e8:19:7a:9d:00:94:34:
         36:03:ba:e6:f2:87:54:bf:52:ae:ea:8b:b5:91:2c:db:d6:23:
         c5:68:4c:e6:ca:53:87:72:95:a5:96:34:4b:53:f2:c5:79:4d:
         32:d5:c3:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEzMUUxMTAvBgNVBAUTKEUxQkIxRTYyNURCREVCQjMyMjBGRjkyM0NENkExMUEy
Q0UyNDUxOTYwHhcNMjYwMzI2MTYyOTE0WhcNMjYwNDAyMTYyOTE0WjAYMRYwFAYD
VQQDEw02OWM1NWVkYS0zNmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzz2Ghu+S4jXsVm4IU3pMadjCVPVLkha4rJo+B+AAIf64P/vZEz9hIOllP9QT
y8fB1+aKxu1sqhXpGFyNBgiF8Twjtp2+F5nxr+KhiIkLvbg4uavkMqXHfHxGLQng
ryGkufy0wQJj63xnxQ475ovrIZkVqfhs3R/PywJcs446iIVIuNSAYaMORsjFH98v
ACWohL2wZ33IEWDNEFvmRVc8AKRR4viJraGkxW7GQeXwxgMKFw4usjTuGqsBsYQg
az493Z8OMwL5Qjgfbw7cZmEPa6ntIIFhb1mOgM0c+2czyPqUJtziGTsirLB7J4gt
MP9vXvmuHfP06sHsG1krr6fWlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFepU0T
GTvdclscsnlRyD5orkOBMB8GA1UdIwQYMBaAFOG7HmJdveuzIg/5I81qEaLOJFGW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxRS9DMUZBMDgyQ0M4
Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3TWlEX2tqeldvUm9zNGtV
WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRic2VZbDI5NjdNaURfa2p6V29Sb3M0a1VaWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTMxRS9DMUZBMDgyQ0M4Q0IxMUU3OTBBODgxMzhDNEY5QUUwMi80YnNlWWwyOTY3
TWlEX2tqeldvUm9zNGtVWlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkQP0pkb2QJvqfDN47h+5nC7QiCtjKmLg0ulOUVINM3Mi8lpt+r+rHxrrz+O6
gGWg5Vj+eTQGbhLcgbj41hKhpmOuWdyBB7Z7+svzAaypz6VFcw53QFJUD/urhNbR
Bgi5v/TwM34CpkSsPxrEe5VcKX7gIdDA/FGW+ecuYiLR/HWDuDKXX0W2S3ENAl1P
DIp8gGyC/rBVWWWi5wFj4G14E2ZJ+8KLkR4h/lxJFkcFAP9LdQb9SdpV/tIjhevS
jDExEAemCij5Us+SpCuMPtPh/THoGXqdAJQ0NgO65vKHVL9SruqLtZEs29YjxWhM
5spTh3KVpZY0S1PyxXlNMtXDYA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:04:10 2026 by rpki-client