Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
File:                     1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json)
Hash identifier:          N0uFhkwlban1zWI4YmbalgxrqQ4iRmicKdJnHhce2zY=
Subject key identifier:   D8:2F:5B:93:B9:53:56:C3:27:BC:81:FF:92:FF:9B:A1:D6:40:C0:C3
Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98
Certificate issuer:       /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
Certificate serial:       0234
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
Manifest number:          022E
Signing time:             Wed 25 Mar 2026 02:03:22 +0000
Manifest this update:     Wed 25 Mar 2026 02:03:21 +0000
Manifest next update:     Wed 01 Apr 2026 02:03:21 +0000
Files and hashes:         1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: LOLz6+dq05KEUJs50aWCBi+9rsPGOcRVOAsVRxal2n8=)
                          2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: Jyx2g2LuWi9RChNnQzsKyfqbLFT8q1vzBpyZSYuRyps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl
                          rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
        Validity
            Not Before: Mar 25 02:03:21 2026 GMT
            Not After : Apr  1 02:03:21 2026 GMT
        Subject: CN=69c3426a-b455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:63:15:ef:61:8d:50:b9:3d:dd:c2:bf:65:
                    b9:5b:bb:06:e6:cd:f3:13:fe:8d:5b:32:32:06:c9:
                    01:db:3e:2c:47:4d:6a:45:fe:77:e6:a6:6e:a6:f0:
                    aa:d1:6d:2f:db:e0:1a:d8:23:8a:57:90:c5:74:c8:
                    04:6f:d1:f1:e8:64:42:67:0c:40:40:b4:17:d4:9b:
                    78:0c:86:74:c4:86:ab:a9:38:de:26:bc:f1:78:96:
                    92:58:f1:d7:af:6f:b4:29:eb:e1:f6:36:e1:2d:13:
                    e7:10:b9:a0:4a:de:b3:4e:4a:40:f2:20:41:f0:96:
                    7c:8b:da:e7:e9:ae:a8:17:ab:e6:eb:c7:80:da:6d:
                    e3:80:88:e7:95:75:17:da:de:a6:71:9c:05:54:4d:
                    03:b3:29:8f:e9:0f:5d:aa:2e:58:6b:b6:b0:d0:18:
                    24:80:16:07:ef:b1:a3:08:54:67:dc:8c:80:04:ba:
                    88:ff:3e:e2:06:db:8c:ce:cb:8b:6a:79:03:db:fd:
                    2e:d3:a5:97:6a:cf:32:3a:ae:f1:93:ed:9d:e6:90:
                    49:1d:73:5d:d1:e5:50:1a:81:14:4b:49:32:69:f0:
                    9b:00:2e:b7:5a:ba:7e:86:e0:d7:ca:fb:b8:61:36:
                    c5:c6:a5:4a:04:40:ef:9e:3f:1a:fb:0c:c3:80:99:
                    ed:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2F:5B:93:B9:53:56:C3:27:BC:81:FF:92:FF:9B:A1:D6:40:C0:C3
            X509v3 Authority Key Identifier:
                keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c6:29:73:b6:b8:15:2a:fe:80:48:c8:45:e9:f8:14:8f:65:
         47:2d:db:3a:ef:f8:d5:32:56:b4:0d:26:3d:30:8a:7e:a0:fa:
         56:fa:d1:bb:87:ab:9a:54:f6:53:29:02:88:1a:93:f8:a6:32:
         19:e2:ff:69:74:fe:48:54:6f:f5:3b:75:71:19:c5:bf:55:3b:
         5e:79:7b:32:ed:da:b0:69:38:6c:d0:c4:89:55:c1:29:d6:52:
         ce:d8:71:3c:35:6f:ce:fa:34:da:fd:1b:bd:ee:1e:f3:b1:99:
         d5:a7:f5:b4:82:30:15:2e:14:91:e9:a7:d1:c3:a6:4a:28:ea:
         86:b1:0d:42:46:dc:b4:f2:b8:22:cf:31:eb:54:8b:5b:b9:d3:
         00:88:94:99:97:62:9f:95:23:a2:50:61:b9:dc:61:fc:aa:59:
         7a:37:df:e1:af:3b:00:9a:15:31:ca:71:ad:8d:5d:bc:ba:33:
         7a:69:8f:91:e6:4c:5d:d7:8a:a8:4c:c8:93:c9:11:b5:92:23:
         e1:42:bf:b7:62:02:ae:c0:52:5e:89:de:42:92:f0:3b:8f:6d:
         73:f8:36:cc:01:af:b4:fe:7e:32:6c:a2:c7:6b:75:69:5c:e9:
         ab:18:ee:11:df:71:87:55:ae:6a:6a:5d:0c:a4:1c:ab:32:23:
         d6:40:d3:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlDQTgxMTAvBgNVBAUTKEQ2OTYxQURBOENENTc3Q0MzM0Q3MUE5QTJEQzgxQjBD
MTkyNUFDOTgwHhcNMjYwMzI1MDIwMzIxWhcNMjYwNDAxMDIwMzIxWjAYMRYwFAYD
VQQDEw02OWMzNDI2YS1iNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvY5jFe9hjVC5Pd3Cv2W5W7sG5s3zE/6NWzIyBskB2z4sR01qRf535qZupvCq
0W0v2+Aa2COKV5DFdMgEb9Hx6GRCZwxAQLQX1Jt4DIZ0xIarqTjeJrzxeJaSWPHX
r2+0Kevh9jbhLRPnELmgSt6zTkpA8iBB8JZ8i9rn6a6oF6vm68eA2m3jgIjnlXUX
2t6mcZwFVE0DsymP6Q9dqi5Ya7aw0BgkgBYH77GjCFRn3IyABLqI/z7iBtuMzsuL
ankD2/0u06WXas8yOq7xk+2d5pBJHXNd0eVQGoEUS0kyafCbAC63Wrp+huDXyvu4
YTbFxqVKBEDvnj8a+wzDgJntTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNgvW5O5
U1bDJ7yB/5L/m6HWQMDDMB8GA1UdIwQYMBaAFNaWGtqM1XfMM9cami3IGwwZJayY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBOC8wNTY2MDkyNkQ0
NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4d3oxeHFhTGNnYkRCa2xy
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFwWWEyb3pWZDh3ejF4cWFMY2diREJrbHJKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUNBOC8wNTY2MDkyNkQ0NDcxMUVEQUE0MUJGN0VDNEY5QUUwMi8xcFlhMm96VmQ4
d3oxeHFhTGNnYkRCa2xySmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACcYpc7a4FSr+gEjIRen4FI9lRy3bOu/41TJWtA0mPTCKfqD6VvrRu4ermlT2
UykCiBqT+KYyGeL/aXT+SFRv9Tt1cRnFv1U7Xnl7Mu3asGk4bNDEiVXBKdZSzthx
PDVvzvo02v0bve4e87GZ1af1tIIwFS4Ukemn0cOmSijqhrENQkbctPK4Is8x61SL
W7nTAIiUmZdin5UjolBhudxh/KpZejff4a87AJoVMcpxrY1dvLozemmPkeZMXdeK
qEzIk8kRtZIj4UK/t2ICrsBSXoneQpLwO49tc/g2zAGvtP5+Mmyix2t1aVzpqxju
Ed9xh1WuampdDKQcqzIj1kDTlQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:23:30 2026 by rpki-client