Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
File:                     aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json)
Hash identifier:          H/C4uur/F0by9iy1VYvRg7HmF07sYntr76MmLxaBVnA=
Subject key identifier:   9C:08:D6:57:B5:E3:47:67:3E:43:C9:C0:EA:46:34:85:84:C5:3C:EB
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Certificate issuer:       /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial:       027B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
Manifest number:          026B
Signing time:             Wed 25 Mar 2026 01:33:49 +0000
Manifest this update:     Wed 25 Mar 2026 01:33:48 +0000
Manifest next update:     Wed 01 Apr 2026 01:33:48 +0000
Files and hashes:         1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: Azu3E4QPQEwJm8jIVu2fXUcS0Z9sCx4Bw+AvFM4uDqc=)
                          2: 0A03942001B311F1BDE34C726D6F56BC.roa (hash: 4okKosxS6IEGC1+htR6SIJMkssQ9kfQRZTp5TOGcyNo=)
                          3: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: ALR7tiUN9OO7R8fFOreHtqwUwWbttRypaQgzgT65w2M=)
                          4: 95873DC401B511F1AABC9C3D6E6F56BC.roa (hash: JMpkHDzDVK/usfbHjSL6Kqnw95uZaR659+4yGn0oEJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
                          rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
        Validity
            Not Before: Mar 25 01:33:48 2026 GMT
            Not After : Apr  1 01:33:48 2026 GMT
        Subject: CN=69c33b7d-8672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:f9:27:96:9e:06:ef:6d:36:99:82:65:2f:
                    94:f8:95:00:df:3f:ba:dc:f0:87:40:2e:d3:23:6c:
                    d2:d5:2d:0c:7c:7e:ee:a7:41:e2:74:50:a5:49:ff:
                    c0:f4:67:c8:86:12:7d:fe:57:0b:c2:27:45:4a:d1:
                    36:f6:48:76:43:c1:83:49:7c:5f:67:b1:76:57:4d:
                    1d:f4:68:97:b0:07:b8:74:a7:bf:6b:23:db:75:6c:
                    ec:2b:7a:0a:42:37:20:bf:7a:c3:fe:f1:27:dc:75:
                    7a:6a:d4:8a:d2:14:33:64:81:85:fc:de:0a:4c:9b:
                    4a:a1:1b:74:c8:3f:88:7e:da:ac:c0:27:20:06:76:
                    e9:3e:10:24:06:4b:9c:4e:c9:e9:d4:8f:8a:ca:c2:
                    32:dd:0a:f6:ec:65:ce:6d:f4:e4:36:20:ab:93:91:
                    88:7d:5e:39:fa:06:b3:39:e0:71:4f:14:51:6c:0a:
                    83:1b:1e:7e:ea:66:77:8f:c9:8e:04:0f:51:db:c7:
                    63:58:80:40:da:5c:a5:91:43:dc:d8:44:95:f5:7f:
                    3a:56:2d:9c:5b:f8:d5:ed:b7:b7:17:33:ff:c1:b6:
                    3a:62:83:03:c8:dd:3b:a9:a4:2e:dc:a8:a1:ae:9a:
                    d7:0e:d5:2f:f2:9d:8a:5e:48:bb:b4:dd:76:28:97:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:08:D6:57:B5:E3:47:67:3E:43:C9:C0:EA:46:34:85:84:C5:3C:EB
            X509v3 Authority Key Identifier:
                keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8f:f2:c1:79:85:8a:b5:cb:58:93:d3:17:d4:10:35:a9:d9:
         6d:ff:07:7c:3c:78:e6:37:59:db:aa:20:f2:4f:b3:78:95:14:
         7b:c5:d1:c8:d5:24:e7:8d:1b:0f:16:eb:dd:a9:de:55:f2:be:
         72:e9:6e:ed:c1:cf:9b:6f:7b:43:82:8f:1e:70:46:1a:1e:f7:
         7f:7a:75:0f:a9:54:1f:f5:66:62:90:a0:7d:10:44:10:e1:c7:
         ab:24:66:96:12:b2:e5:66:ab:8f:d4:7a:fa:b7:c3:c4:af:b0:
         f8:ed:e6:67:0e:9b:38:b3:48:df:cb:55:2e:06:80:b3:89:9a:
         f3:e1:4e:2c:f8:f3:bf:ae:2e:dc:b4:2f:fa:15:18:ec:cb:9d:
         d3:d3:a6:01:94:46:7c:f4:e9:77:cc:0b:1b:87:d3:9a:41:e2:
         58:42:b3:16:5b:0d:f4:6a:44:79:68:89:75:bc:b1:6f:95:c5:
         f3:98:35:b0:ce:01:8d:17:c2:49:d7:d6:dc:86:a6:5a:f7:c5:
         9d:1c:dd:9b:03:20:29:4f:28:26:78:39:49:97:dd:4e:19:d6:
         88:16:80:4c:4c:0a:54:a7:1f:9c:38:6e:1e:47:7b:86:ff:ad:
         7b:79:ac:dc:55:0c:55:03:db:91:37:4c:de:24:61:5f:f2:d3:
         33:b8:8c:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5
QzUxMjIyRTYwHhcNMjYwMzI1MDEzMzQ4WhcNMjYwNDAxMDEzMzQ4WjAYMRYwFAYD
VQQDEw02OWMzM2I3ZC04NjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr9f5J5aeBu9tNpmCZS+U+JUA3z+63PCHQC7TI2zS1S0MfH7up0HidFClSf/A
9GfIhhJ9/lcLwidFStE29kh2Q8GDSXxfZ7F2V00d9GiXsAe4dKe/ayPbdWzsK3oK
Qjcgv3rD/vEn3HV6atSK0hQzZIGF/N4KTJtKoRt0yD+IftqswCcgBnbpPhAkBkuc
Tsnp1I+KysIy3Qr27GXObfTkNiCrk5GIfV45+gazOeBxTxRRbAqDGx5+6mZ3j8mO
BA9R28djWIBA2lylkUPc2ESV9X86Vi2cW/jV7be3FzP/wbY6YoMDyN07qaQu3Kih
rprXDtUv8p2KXki7tN12KJeM9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJwI1le1
40dnPkPJwOpGNIWExTzrMB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw
MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkVEMC9EREI1ODlBMDgwMTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdI
UnVhRU8yRW8zU0NjVVNJdVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG4/ywXmFirXLWJPTF9QQNanZbf8HfDx45jdZ26og8k+zeJUUe8XRyNUk540b
Dxbr3aneVfK+culu7cHPm297Q4KPHnBGGh73f3p1D6lUH/VmYpCgfRBEEOHHqyRm
lhKy5Warj9R6+rfDxK+w+O3mZw6bOLNI38tVLgaAs4ma8+FOLPjzv64u3LQv+hUY
7Mud09OmAZRGfPTpd8wLG4fTmkHiWEKzFlsN9GpEeWiJdbyxb5XF85g1sM4BjRfC
SdfW3IamWvfFnRzdmwMgKU8oJng5SZfdThnWiBaATEwKVKcfnDhuHkd7hv+te3ms
3FUMVQPbkTdM3iRhX/LTM7iMMA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:39:24 2026 by rpki-client