Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
File:                     _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft (raw, json)
Hash identifier:          3jYAfutnDmmqhrrDIuG+NxP7JvutUaGt5xYkiBUJur4=
Subject key identifier:   34:2D:1B:E2:EC:19:62:0E:DE:D4:AD:D1:95:66:70:6B:C8:66:94:BC
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Certificate issuer:       /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
Manifest number:          0129
Signing time:             Wed 25 Mar 2026 04:56:10 +0000
Manifest this update:     Wed 25 Mar 2026 04:56:09 +0000
Manifest next update:     Wed 01 Apr 2026 04:56:09 +0000
Files and hashes:         1: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl (hash: DlfSt3/JpW4lw6g5rRoqUrcjWWwAEAJymzINjeAE6CA=)
                          2: B538B552701211EFB6868329C4F9AE02.roa (hash: +r7tbi6WVUntCm60F2BN4Gz2em1ApwcRGlCJmDJjK9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
                          rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
        Validity
            Not Before: Mar 25 04:56:09 2026 GMT
            Not After : Apr  1 04:56:09 2026 GMT
        Subject: CN=69c36ae9-5c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6a:2e:db:51:08:38:13:07:a0:1c:21:5b:c0:
                    73:9f:9c:b5:e1:52:ca:2d:33:2d:74:48:a9:b6:14:
                    a5:d8:f8:8f:ce:71:70:ba:ad:58:3e:7c:81:31:da:
                    0e:e1:88:7e:9e:69:02:22:26:e0:6c:4b:cd:e6:99:
                    20:60:e5:9a:3f:a3:83:95:75:9a:84:45:69:d3:82:
                    3a:46:4f:68:c8:78:b7:24:d6:39:92:0a:77:4d:7f:
                    60:3b:8f:27:fe:8a:85:15:97:1d:ae:fc:4a:e9:cc:
                    2d:89:fc:7d:ea:bd:21:1e:8b:0b:df:aa:89:2d:25:
                    ea:6e:9b:de:73:66:f7:10:f0:72:00:9c:bc:32:52:
                    65:a2:0a:1a:1a:8d:8a:69:a5:d3:ab:c0:12:d5:8e:
                    ab:f1:ef:67:b5:ef:8a:35:ec:2c:44:f8:b7:fd:59:
                    f2:bc:35:6c:0b:0b:c3:32:8f:c5:81:90:3b:27:ad:
                    f1:32:5d:62:c7:4c:3a:bc:26:1e:be:39:3d:1e:b7:
                    3b:88:c5:9c:61:57:59:10:6f:40:63:cb:34:74:bc:
                    48:6e:18:ea:25:72:4f:a6:93:ee:fa:02:6a:c3:3e:
                    c9:27:6a:13:60:83:80:02:b7:66:b7:07:5c:65:d0:
                    1c:3d:99:a9:a9:ac:4f:31:f9:c5:f1:62:8b:0d:c7:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2D:1B:E2:EC:19:62:0E:DE:D4:AD:D1:95:66:70:6B:C8:66:94:BC
            X509v3 Authority Key Identifier:
                keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:68:52:e8:b1:64:23:41:ca:c7:89:71:1a:00:de:d1:b5:0e:
         5f:9c:76:24:d2:71:3f:2a:fc:81:cf:c9:8a:c2:8d:f2:14:4c:
         9d:8d:bc:ea:67:29:18:bd:ef:20:f1:97:e1:31:15:12:1f:6b:
         ec:c7:02:24:d2:24:2b:98:2c:09:3c:7b:2e:2b:91:04:a6:ab:
         d8:be:f6:58:33:3f:43:53:1a:cb:34:2e:98:5d:cf:97:19:28:
         0b:20:6b:2f:92:1c:9e:c8:7f:08:81:88:e6:e3:5b:87:98:c9:
         25:64:cc:c5:0b:57:7f:e1:e5:48:cd:0b:b8:49:90:6f:c0:2d:
         b6:78:51:0f:88:f3:46:a4:7c:2a:31:83:2d:a8:9f:0a:97:bd:
         56:05:31:f8:31:7d:64:54:29:6d:5d:3e:0f:63:4d:aa:c8:08:
         05:24:07:25:ca:65:08:8d:14:e3:ce:21:45:0e:d7:d3:2b:76:
         49:4d:ce:d7:c1:b3:01:d3:3b:5b:67:71:38:fe:c5:bf:e2:91:
         ab:c4:59:09:b1:db:aa:ec:b4:f1:aa:1e:41:28:be:74:84:0a:
         06:06:f3:73:fe:64:6b:bc:65:64:2f:46:47:23:a4:20:71:e2:
         31:10:73:07:0c:2d:6a:b3:74:42:1a:c6:e1:9a:02:6a:66:a2:
         f7:b2:a6:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFDRjUxMTAvBgNVBAUTKEZENUEzRjVBMUYzMzU3NDRDMEMxNDJBQzQyMTdFQ0JD
M0QyMENBMEYwHhcNMjYwMzI1MDQ1NjA5WhcNMjYwNDAxMDQ1NjA5WjAYMRYwFAYD
VQQDEw02OWMzNmFlOS01YzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmGou21EIOBMHoBwhW8Bzn5y14VLKLTMtdEipthSl2PiPznFwuq1YPnyBMdoO
4Yh+nmkCIibgbEvN5pkgYOWaP6ODlXWahEVp04I6Rk9oyHi3JNY5kgp3TX9gO48n
/oqFFZcdrvxK6cwtifx96r0hHosL36qJLSXqbpvec2b3EPByAJy8MlJlogoaGo2K
aaXTq8AS1Y6r8e9nte+KNewsRPi3/VnyvDVsCwvDMo/FgZA7J63xMl1ix0w6vCYe
vjk9Hrc7iMWcYVdZEG9AY8s0dLxIbhjqJXJPppPu+gJqwz7JJ2oTYIOAArdmtwdc
ZdAcPZmpqaxPMfnF8WKLDccdOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQtG+Ls
GWIO3tSt0ZVmcGvIZpS8MB8GA1UdIwQYMBaAFP1aP1ofM1dEwMFCrEIX7Lw9IMoP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUNGNS81QjMwQzQ5QTZG
M0MxMUVGQjU4OTk2MTJDNEY5QUUwMi9fVm9fV2g4elYwVEF3VUtzUWhmc3ZEMGd5
ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19Wb19XaDh6VjBUQXdVS3NRaGZzdkQwZ3lnOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUNGNS81QjMwQzQ5QTZGM0MxMUVGQjU4OTk2MTJDNEY5QUUwMi9fVm9fV2g4elYw
VEF3VUtzUWhmc3ZEMGd5ZzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJWhS6LFkI0HKx4lxGgDe0bUOX5x2JNJxPyr8gc/JisKN8hRMnY286mcpGL3v
IPGX4TEVEh9r7McCJNIkK5gsCTx7LiuRBKar2L72WDM/Q1MayzQumF3PlxkoCyBr
L5Icnsh/CIGI5uNbh5jJJWTMxQtXf+HlSM0LuEmQb8AttnhRD4jzRqR8KjGDLaif
Cpe9VgUx+DF9ZFQpbV0+D2NNqsgIBSQHJcplCI0U484hRQ7X0yt2SU3O18GzAdM7
W2dxOP7Fv+KRq8RZCbHbquy08aoeQSi+dIQKBgbzc/5ka7xlZC9GRyOkIHHiMRBz
BwwtarN0QhrG4ZoCamai97Km0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:36:50 2026 by rpki-client