Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft
File:                     SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft (raw, json)
Hash identifier:          yrCyJGEcJoFMgomzRNzl/u+7sB+7o2qz5X1iiqFix74=
Subject key identifier:   50:CD:E6:BB:6B:6B:93:F8:C5:A3:59:0F:CC:EB:63:B4:84:A3:0A:74
Authority key identifier: 49:E6:84:D5:0D:8B:D7:8C:18:1E:07:41:8C:6D:12:02:32:93:E9:94
Certificate issuer:       /CN=A9177A7E/serialNumber=49E684D50D8BD78C181E07418C6D12023293E994
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft
Manifest number:          0127
Signing time:             Wed 25 Mar 2026 04:53:35 +0000
Manifest this update:     Wed 25 Mar 2026 04:53:34 +0000
Manifest next update:     Wed 01 Apr 2026 04:53:34 +0000
Files and hashes:         1: SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl (hash: m4Lh2GcMhSRJbrAkCKjJzUqofENHZusNwWT2Nce6adk=)
                          2: 228CC738816611EFA8852945C4F9AE02.roa (hash: LmSPNOfKZua7Xhki6D/DxdSEWzPYNTVBIifdXvW394A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl
                          rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177A7E, serialNumber=49E684D50D8BD78C181E07418C6D12023293E994
        Validity
            Not Before: Mar 25 04:53:34 2026 GMT
            Not After : Apr  1 04:53:34 2026 GMT
        Subject: CN=69c36a4f-ee48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:7e:0e:1e:39:b7:60:b1:94:6d:2c:70:1e:
                    c2:43:c1:a6:79:ca:ca:8a:f8:5c:d4:c8:bd:4d:fe:
                    81:cb:5c:24:43:1f:b4:4e:f4:31:b0:39:8f:81:77:
                    ec:1b:df:e2:17:f5:17:40:ac:24:5f:06:20:84:5c:
                    3d:87:57:7a:81:af:b6:c9:7e:a1:81:b9:f2:e4:39:
                    69:4d:14:ef:bf:59:99:49:47:4e:5c:cc:77:9d:89:
                    75:0c:8b:11:2f:de:6b:27:c8:e3:23:d3:44:08:f3:
                    6d:8a:d1:26:25:c5:ea:00:76:ed:b5:58:13:f2:8a:
                    32:f2:e8:42:f1:8a:8a:1e:59:66:48:d9:66:cf:2c:
                    a2:ae:ae:f5:b8:d7:1a:be:59:8d:bf:4c:75:de:37:
                    14:65:ba:6c:f5:66:df:66:03:99:04:68:65:3f:0a:
                    8b:38:25:b3:e4:cd:33:63:f6:c8:c2:19:11:2c:b5:
                    31:e6:f4:f4:d4:8d:b2:da:5f:2c:9c:ea:2d:bf:e2:
                    c9:cc:31:d2:79:d9:7d:5a:6c:53:f4:68:b9:10:70:
                    8f:83:24:10:15:a2:ba:c9:ae:cf:af:82:0d:bd:94:
                    a1:1b:81:61:e6:db:ea:8b:c8:5b:bd:d4:64:fd:85:
                    bc:e2:1b:64:23:72:70:22:7f:93:69:9e:0e:ee:f8:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CD:E6:BB:6B:6B:93:F8:C5:A3:59:0F:CC:EB:63:B4:84:A3:0A:74
            X509v3 Authority Key Identifier:
                keyid:49:E6:84:D5:0D:8B:D7:8C:18:1E:07:41:8C:6D:12:02:32:93:E9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177A7E/30353B8A6A6F11EFBF3F1136C4F9AE02/SeaE1Q2L14wYHgdBjG0SAjKT6ZQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b0:9a:ff:8e:c2:76:c7:9f:64:3c:ba:af:fb:3f:fd:54:26:
         51:04:71:a3:4c:2c:75:c0:74:dc:f4:6e:07:8c:ed:00:c7:f9:
         ab:eb:1d:77:52:b8:0d:6d:a2:28:70:a9:ae:4f:da:3d:2d:0f:
         8f:b8:1a:f4:a8:45:c5:59:b6:bf:ed:4b:a5:6f:bc:89:b2:6b:
         b6:4b:73:a4:de:7d:a8:a3:b6:25:17:a9:1d:84:59:fb:c7:f1:
         f3:f4:0e:91:73:a9:ba:b0:2f:f1:8b:57:8a:0d:e8:c4:2e:b6:
         67:b5:62:d1:1d:6e:6c:e2:4c:a9:ec:16:9d:0e:67:ab:98:89:
         37:66:dd:28:6d:f7:7f:f9:29:43:64:e8:de:75:1f:fa:bd:d2:
         dc:01:51:bd:fe:55:1a:63:34:55:f5:da:45:5a:2e:36:ab:59:
         99:70:31:fc:12:da:bd:ce:ad:9f:b4:5a:3a:a2:23:e3:6e:51:
         74:7f:f7:40:45:9d:4c:c8:83:46:c3:f0:10:dc:38:f5:3b:d7:
         6e:45:c9:f5:5c:a4:21:10:b7:c7:66:53:c6:04:b7:65:3b:6f:
         87:ef:0a:d1:68:f8:97:21:e4:61:61:32:d3:56:d8:8f:2b:f6:
         56:45:bb:6e:ce:87:f4:56:b6:10:27:22:fc:76:40:7c:28:e5:
         d3:56:ca:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzdBN0UxMTAvBgNVBAUTKDQ5RTY4NEQ1MEQ4QkQ3OEMxODFFMDc0MThDNkQxMjAy
MzI5M0U5OTQwHhcNMjYwMzI1MDQ1MzM0WhcNMjYwNDAxMDQ1MzM0WjAYMRYwFAYD
VQQDEw02OWMzNmE0Zi1lZTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxUd+Dh45t2CxlG0scB7CQ8GmecrKivhc1Mi9Tf6By1wkQx+0TvQxsDmPgXfs
G9/iF/UXQKwkXwYghFw9h1d6ga+2yX6hgbny5DlpTRTvv1mZSUdOXMx3nYl1DIsR
L95rJ8jjI9NECPNtitEmJcXqAHbttVgT8ooy8uhC8YqKHllmSNlmzyyirq71uNca
vlmNv0x13jcUZbps9WbfZgOZBGhlPwqLOCWz5M0zY/bIwhkRLLUx5vT01I2y2l8s
nOotv+LJzDHSedl9WmxT9Gi5EHCPgyQQFaK6ya7Pr4INvZShG4Fh5tvqi8hbvdRk
/YW84htkI3JwIn+TaZ4O7vh3XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDN5rtr
a5P4xaNZD8zrY7SEowp0MB8GA1UdIwQYMBaAFEnmhNUNi9eMGB4HQYxtEgIyk+mU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0E3RS8zMDM1M0I4QTZB
NkYxMUVGQkYzRjExMzZDNEY5QUUwMi9TZWFFMVEyTDE0d1lIZ2RCakcwU0FqS1Q2
WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NlYUUxUTJMMTR3WUhnZEJqRzBTQWpLVDZaUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
N0E3RS8zMDM1M0I4QTZBNkYxMUVGQkYzRjExMzZDNEY5QUUwMi9TZWFFMVEyTDE0
d1lIZ2RCakcwU0FqS1Q2WlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgrCa/47CdsefZDy6r/s//VQmUQRxo0wsdcB03PRuB4ztAMf5q+sdd1K4DW2i
KHCprk/aPS0Pj7ga9KhFxVm2v+1LpW+8ibJrtktzpN59qKO2JRepHYRZ+8fx8/QO
kXOpurAv8YtXig3oxC62Z7Vi0R1ubOJMqewWnQ5nq5iJN2bdKG33f/kpQ2To3nUf
+r3S3AFRvf5VGmM0VfXaRVouNqtZmXAx/BLavc6tn7RaOqIj425RdH/3QEWdTMiD
RsPwENw49TvXbkXJ9VykIRC3x2ZTxgS3ZTtvh+8K0Wj4lyHkYWEy01bYjyv2VkW7
bs6H9Fa2ECci/HZAfCjl01bKOg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:16 2026 by rpki-client