Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
File:                     C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json)
Hash identifier:          mp0b1fpkpF1BTACPllzh9aT/656WgHWB21k4SzQv0vw=
Subject key identifier:   DE:9C:0D:76:72:D7:77:50:B0:41:F8:81:16:DE:2A:3F:21:D4:C7:39
Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
Certificate issuer:       /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
Manifest number:          0228
Signing time:             Wed 25 Mar 2026 02:24:01 +0000
Manifest this update:     Wed 25 Mar 2026 02:24:00 +0000
Manifest next update:     Wed 01 Apr 2026 02:24:00 +0000
Files and hashes:         1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: dMYW/uXz/oUXta9xdL0MY2KIfUTCLZCqEQgQTE66Jwc=)
                          2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: xubgESY7ENUwjaYICY3KQDEJuRzIf66RrN29YCUy9DU=)
                          3: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: 0hf744/8ClGNM1pPRKsYmzGhD2Zto6yat3iUOtKyOcU=)
                          4: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: 49siwc9TCEX7qSFWEwhlrKnStCVbHuwNYdSKXeuPW+8=)
                          5: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: PNuCCopETWS6vlNk5jS1Oy7RDkYmnLxq7jDjnr/jkg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
                          rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
        Validity
            Not Before: Mar 25 02:24:00 2026 GMT
            Not After : Apr  1 02:24:00 2026 GMT
        Subject: CN=69c34740-6ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:82:56:71:bf:d4:78:c9:2e:ec:21:19:1d:
                    61:44:74:f6:67:44:36:0b:94:61:e4:7c:50:c0:0d:
                    cc:ee:0e:99:62:44:e1:6f:8b:fa:72:2e:ad:0b:a8:
                    a8:a2:c9:5a:95:dc:1e:86:d4:d9:c0:21:76:3d:9f:
                    c6:78:b1:5f:bd:8f:d5:37:f4:ed:77:e1:d3:41:30:
                    aa:07:a9:58:da:78:65:7d:a7:c2:c9:f6:94:06:32:
                    16:3a:68:5e:37:0a:07:93:ef:0b:24:cb:48:1d:d8:
                    f0:f4:71:39:09:36:30:85:1b:fa:cf:46:5e:ec:2c:
                    70:24:64:44:7e:be:6d:a4:33:d3:73:5f:2a:53:cc:
                    31:b2:f8:62:91:19:dd:b1:4e:7f:86:85:79:b5:25:
                    2c:1d:cc:9d:7f:e5:66:61:8a:90:2a:b2:9b:a2:8f:
                    4d:58:d9:e7:d4:e0:88:51:5a:e2:89:26:ad:5b:c5:
                    3b:88:20:73:99:99:d2:81:41:89:fd:f9:2d:ae:31:
                    49:4e:29:80:70:bd:fa:98:57:1e:1b:74:8b:b2:4d:
                    0f:30:45:5c:47:57:28:34:1a:f9:9c:04:3e:18:12:
                    c4:bb:e1:5f:0d:32:10:c3:73:c5:93:8f:b8:c6:70:
                    ef:4b:03:c4:61:a8:f9:a6:7b:f6:e6:27:81:85:bb:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9C:0D:76:72:D7:77:50:B0:41:F8:81:16:DE:2A:3F:21:D4:C7:39
            X509v3 Authority Key Identifier:
                keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:eb:37:43:49:df:fc:34:3a:2b:f5:42:39:58:89:ca:5b:e6:
         db:ca:f6:3b:f1:2d:45:a5:a4:58:e0:bf:8d:f4:d8:27:60:f5:
         9c:d1:ea:a4:d4:7d:3b:ee:d0:c7:45:89:be:60:3e:12:77:f0:
         35:e1:20:5c:21:7b:5a:29:82:9b:72:8a:7d:21:a5:93:b2:7c:
         13:4a:3b:f4:85:65:22:1a:ef:b6:26:2c:75:25:f2:92:8a:0f:
         43:d8:3d:b4:e6:8d:3e:7e:f6:94:26:56:20:9c:8d:4d:3a:24:
         e1:ee:0f:06:de:31:0c:48:f9:bd:b5:ae:fe:12:85:b9:d3:a5:
         59:f0:8f:d5:a7:1d:81:bd:03:99:a5:2f:ec:17:b6:c7:33:f2:
         eb:8a:95:a5:59:40:36:65:8d:89:ac:41:de:e4:7a:88:39:07:
         e2:8d:d3:79:c4:ed:40:5a:4a:9f:6b:d0:33:2f:cd:0b:10:90:
         a4:36:4c:29:ac:fe:89:51:53:88:5c:1d:08:0a:d5:77:fb:6d:
         20:9d:cb:b9:c4:d7:bb:0e:e9:5a:6b:88:6e:85:a4:b7:6e:06:
         21:18:39:c1:03:5b:65:32:a0:e7:94:f7:e8:8e:b7:00:7c:f6:
         c1:39:83:b6:04:3b:6b:e2:d3:28:12:ba:d2:86:5e:49:4f:78:
         0b:17:ee:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5
Q0U3RDc4QjUwHhcNMjYwMzI1MDIyNDAwWhcNMjYwNDAxMDIyNDAwWjAYMRYwFAYD
VQQDEw02OWMzNDc0MC02Y2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJKCVnG/1HjJLuwhGR1hRHT2Z0Q2C5Rh5HxQwA3M7g6ZYkThb4v6ci6tC6io
oslaldwehtTZwCF2PZ/GeLFfvY/VN/Ttd+HTQTCqB6lY2nhlfafCyfaUBjIWOmhe
NwoHk+8LJMtIHdjw9HE5CTYwhRv6z0Ze7CxwJGREfr5tpDPTc18qU8wxsvhikRnd
sU5/hoV5tSUsHcydf+VmYYqQKrKboo9NWNnn1OCIUVriiSatW8U7iCBzmZnSgUGJ
/fktrjFJTimAcL36mFceG3SLsk0PMEVcR1coNBr5nAQ+GBLEu+FfDTIQw3PFk4+4
xnDvSwPEYaj5pnv25ieBhbuUiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6cDXZy
13dQsEH4gRbeKj8h1Mc5MB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx
NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm
ZC1TT0c3WGZLWktjNTllTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhus3Q0nf/DQ6K/VCOViJylvm28r2O/EtRaWkWOC/jfTYJ2D1nNHqpNR9O+7Q
x0WJvmA+EnfwNeEgXCF7WimCm3KKfSGlk7J8E0o79IVlIhrvtiYsdSXykooPQ9g9
tOaNPn72lCZWIJyNTTok4e4PBt4xDEj5vbWu/hKFudOlWfCP1acdgb0DmaUv7Be2
xzPy64qVpVlANmWNiaxB3uR6iDkH4o3TecTtQFpKn2vQMy/NCxCQpDZMKaz+iVFT
iFwdCArVd/ttIJ3LucTXuw7pWmuIboWkt24GIRg5wQNbZTKg55T36I63AHz2wTmD
tgQ7a+LTKBK60oZeSU94CxfunA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:06 2026 by rpki-client