Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft
File:                     DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft (raw, json)
Hash identifier:          EGIVDE1l+ltFPQ7NzZtU21/OOV59bvry26LfD09XZy4=
Subject key identifier:   BA:1F:DA:DE:0F:18:8F:D3:CE:53:4C:4B:5A:EE:A5:5D:5D:BC:DC:8E
Authority key identifier: 0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84
Certificate issuer:       /CN=A917A4C7/serialNumber=0D5594855310D916064B7991370CC964C3D2F384
Certificate serial:       03BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft
Manifest number:          03B2
Signing time:             Fri 27 Mar 2026 00:27:24 +0000
Manifest this update:     Fri 27 Mar 2026 00:27:24 +0000
Manifest next update:     Fri 03 Apr 2026 00:27:24 +0000
Files and hashes:         1: DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl (hash: c9M/qM7mfycqSXbXaR8QeWfqby7xRpqdHVK49zZWpTk=)
                          2: C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa (hash: /a9vJxDdnPMf0i2jU8RPOLfmLWr4u/vqoKuKwHNpKWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl
                          rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:27:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954 (0x3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A4C7, serialNumber=0D5594855310D916064B7991370CC964C3D2F384
        Validity
            Not Before: Mar 27 00:27:24 2026 GMT
            Not After : Apr  3 00:27:24 2026 GMT
        Subject: CN=69c5ceec-3445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:d1:62:0d:26:9c:48:d6:4d:00:88:e9:86:
                    d5:94:c0:bc:d8:cc:72:e5:f3:94:7a:4f:f9:2a:ee:
                    08:ea:df:66:4f:65:a7:6d:3a:79:37:88:66:2d:7b:
                    e8:00:7b:27:fd:5c:dd:2d:8f:f4:60:28:9b:70:ec:
                    20:70:65:00:e3:d5:e0:a6:35:6c:a1:0e:1e:36:c3:
                    64:6e:52:46:10:b1:6c:2c:63:e9:00:d2:f5:0c:fc:
                    99:72:73:a9:08:94:45:e2:fe:38:c5:ee:44:7c:91:
                    2a:16:19:b7:fe:29:24:bc:5a:46:be:50:e7:db:e6:
                    05:e5:91:fb:cd:95:45:04:a7:86:bb:5a:e1:18:07:
                    c1:36:5d:52:7f:84:5e:08:6c:1f:16:94:59:c8:69:
                    5a:e6:3a:13:4a:63:0f:37:8b:4a:9b:5d:79:f3:72:
                    d6:88:03:c9:36:06:13:10:d7:8b:dc:3b:0c:69:35:
                    5c:1c:7e:c7:ad:01:d0:4c:90:55:1b:c3:5e:29:ef:
                    f9:c3:ff:e3:96:0c:db:ac:64:3f:e1:a9:7b:45:7e:
                    57:04:83:df:f8:ce:c9:eb:b6:3a:de:91:16:c6:c8:
                    10:39:23:21:3d:67:dc:8f:12:be:1f:69:ae:7d:a4:
                    29:55:42:21:58:c7:e8:d5:0c:b0:c3:13:6f:de:6c:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1F:DA:DE:0F:18:8F:D3:CE:53:4C:4B:5A:EE:A5:5D:5D:BC:DC:8E
            X509v3 Authority Key Identifier:
                keyid:0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c4:75:31:25:08:f5:7c:ac:f0:e9:86:6e:73:c5:d3:6c:a2:
         da:fe:03:24:b6:91:d9:9c:f4:a3:40:7a:75:00:ab:7b:f3:c5:
         96:50:c8:4f:99:84:b0:f6:99:9e:b2:94:dc:cd:2b:0d:31:c3:
         49:0b:04:c4:87:5f:ed:7a:c5:00:bf:df:81:c1:fe:2b:49:bd:
         ba:fa:a3:c3:4d:eb:cf:f2:fa:52:d3:7a:1b:e7:4a:4d:40:ae:
         fb:12:45:64:a4:1e:9f:fd:9c:4f:5b:76:0b:fa:45:a7:19:8f:
         8d:f5:f2:5d:b0:fe:87:e8:27:42:2c:38:29:f9:77:1e:0b:ec:
         e0:af:98:4d:e8:d5:cd:4d:27:c7:11:4b:9a:c6:84:c9:5b:94:
         ce:5c:59:8c:37:fb:96:1d:ca:05:e3:f4:05:51:7b:81:b5:ad:
         e2:e9:a8:80:07:0e:87:5e:eb:ba:33:45:67:80:b0:42:e5:70:
         cf:ae:c1:64:5b:99:93:64:bb:f6:57:cc:60:48:2a:bc:41:26:
         bb:ab:9a:f4:df:fe:a0:ee:e6:ca:f6:4e:1b:a4:f0:35:cf:3c:
         46:86:df:f1:ab:5c:8b:9f:cd:59:fb:26:9d:9c:24:b1:25:c3:
         dd:d7:78:3c:b4:aa:c5:8e:6a:1a:ad:bb:fc:78:15:b4:18:66:
         cd:25:7f:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0QzcxMTAvBgNVBAUTKDBENTU5NDg1NTMxMEQ5MTYwNjRCNzk5MTM3MENDOTY0
QzNEMkYzODQwHhcNMjYwMzI3MDAyNzI0WhcNMjYwNDAzMDAyNzI0WjAYMRYwFAYD
VQQDEw02OWM1Y2VlYy0zNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0w3RYg0mnEjWTQCI6YbVlMC82Mxy5fOUek/5Ku4I6t9mT2WnbTp5N4hmLXvo
AHsn/VzdLY/0YCibcOwgcGUA49XgpjVsoQ4eNsNkblJGELFsLGPpANL1DPyZcnOp
CJRF4v44xe5EfJEqFhm3/ikkvFpGvlDn2+YF5ZH7zZVFBKeGu1rhGAfBNl1Sf4Re
CGwfFpRZyGla5joTSmMPN4tKm11583LWiAPJNgYTENeL3DsMaTVcHH7HrQHQTJBV
G8NeKe/5w//jlgzbrGQ/4al7RX5XBIPf+M7J67Y63pEWxsgQOSMhPWfcjxK+H2mu
faQpVUIhWMfo1QywwxNv3my/rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLof2t4P
GI/TzlNMS1rupV1dvNyOMB8GA1UdIwQYMBaAFA1VlIVTENkWBkt5kTcMyWTD0vOE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRDNy9DRjZFQzA0NEQw
MTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJSWUdTM21STnd6SlpNUFM4
NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RWV1VoVk1RMlJZR1MzbVJOd3pKWk1QUzg0US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTRDNy9DRjZFQzA0NEQwMTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJS
WUdTM21STnd6SlpNUFM4NFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALsR1MSUI9Xys8OmGbnPF02yi2v4DJLaR2Zz0o0B6dQCre/PFllDIT5mEsPaZ
nrKU3M0rDTHDSQsExIdf7XrFAL/fgcH+K0m9uvqjw03rz/L6UtN6G+dKTUCu+xJF
ZKQen/2cT1t2C/pFpxmPjfXyXbD+h+gnQiw4Kfl3Hgvs4K+YTejVzU0nxxFLmsaE
yVuUzlxZjDf7lh3KBeP0BVF7gbWt4umogAcOh17rujNFZ4CwQuVwz67BZFuZk2S7
9lfMYEgqvEEmu6ua9N/+oO7myvZOG6TwNc88Robf8atci5/NWfsmnZwksSXD3dd4
PLSqxY5qGq27/HgVtBhmzSV/Mg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:44 2026 by rpki-client