Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
File:                     64P0iA8jV15XUXhcbgqyvgskm8M.mft (raw, json)
Hash identifier:          dwrokj+9K44TzOh+5ECafaTR1SgC5cdYIotgrh/ngwU=
Subject key identifier:   9A:0C:07:C3:91:F8:DB:18:D7:5A:F9:D4:E3:2E:1E:C7:9A:50:4E:FE
Authority key identifier: EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
Certificate issuer:       /CN=A917C0F3/serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
Manifest number:          E4
Signing time:             Wed 25 Mar 2026 05:43:16 +0000
Manifest this update:     Wed 25 Mar 2026 05:43:16 +0000
Manifest next update:     Wed 01 Apr 2026 05:43:16 +0000
Files and hashes:         1: 64P0iA8jV15XUXhcbgqyvgskm8M.crl (hash: gg+ba5OlC/waZpRmIyszTuLwRPvSW0T465TcIhosdak=)
                          2: 028452F0D0BA11EFA8B5A526C4F9AE02.roa (hash: VwphhGhSSxLYmxwzAbdpnMPMVv5nEltMnX3C48e6dF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl
                          rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0F3, serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
        Validity
            Not Before: Mar 25 05:43:16 2026 GMT
            Not After : Apr  1 05:43:16 2026 GMT
        Subject: CN=69c375f4-6e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:90:92:f6:de:4d:bd:61:4c:34:d4:fc:1d:b9:
                    af:b8:ae:38:32:0e:7d:d3:ec:a3:4b:10:4b:b8:58:
                    84:e9:8f:66:ad:e4:71:09:d1:da:ef:d8:ac:a2:96:
                    01:c8:1c:b5:94:33:cf:3e:93:f1:70:48:53:a7:f2:
                    57:74:e9:65:dd:8f:41:97:b7:39:f4:3d:50:27:8a:
                    90:ce:7e:96:12:66:24:87:40:8a:53:e2:6e:bc:f2:
                    a1:23:a4:da:39:55:5b:41:fa:66:a6:79:50:d6:3e:
                    4f:20:51:46:83:a3:b1:f4:ab:7d:dc:bf:05:27:14:
                    74:fc:d4:fc:15:12:38:20:e5:de:1b:0c:f9:1e:38:
                    58:0d:50:81:fb:bc:bd:7c:55:12:56:b1:36:82:58:
                    8b:ad:30:97:07:d9:6e:35:f5:7b:4f:29:54:7e:d3:
                    d1:04:f1:69:13:f5:cf:29:69:86:47:92:e2:8d:26:
                    ec:65:bc:2f:48:5a:27:d6:11:5c:c4:90:15:b2:51:
                    c8:d3:96:01:88:42:dc:03:7f:36:a8:7b:b3:4d:7a:
                    af:98:77:5e:3b:19:40:35:fb:b3:1c:4b:2f:f2:f5:
                    4c:0a:37:8b:1a:9b:8d:00:7f:70:0c:44:5f:c2:59:
                    58:b3:7f:7f:da:c1:c9:91:63:da:dc:3e:2c:a4:c3:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0C:07:C3:91:F8:DB:18:D7:5A:F9:D4:E3:2E:1E:C7:9A:50:4E:FE
            X509v3 Authority Key Identifier:
                keyid:EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:7b:d0:f7:e7:17:0f:8d:19:8d:d2:7f:37:4a:f7:b3:47:
         67:12:b0:cb:6a:6e:8b:c9:7d:32:b3:8c:fb:ed:6e:26:ae:00:
         d6:88:85:b4:57:60:ae:35:44:6d:44:54:5b:4c:af:45:c8:e6:
         26:bd:6b:46:ea:fa:b4:fe:bc:b4:5a:51:06:b1:e7:8c:f8:a9:
         0a:cd:60:a3:c5:19:df:b5:c8:bd:2e:cf:d1:6e:b5:ac:f1:cc:
         fc:4b:a8:41:31:38:21:57:1c:cd:7a:88:98:99:6f:e9:2a:fe:
         61:e8:38:08:3f:b3:b2:6b:ce:b7:b1:1c:66:22:d8:b5:f2:0a:
         77:31:c7:67:fe:98:0c:e5:90:57:30:e2:74:cb:9c:7a:0e:c8:
         c1:ce:23:c7:70:12:2a:25:0c:e7:1b:e3:0b:ba:a7:17:09:50:
         aa:85:6e:4a:ab:a2:87:bf:c4:d1:41:2b:05:ff:55:fd:50:d3:
         66:ff:79:cc:bc:36:9f:b8:a5:8e:5b:a0:a5:44:bd:56:3a:38:
         9b:7a:53:74:e4:df:57:84:5e:d4:5b:75:65:bf:03:ac:e1:9b:
         88:b0:51:5e:e7:5e:ad:ae:c0:ca:6c:6c:03:9d:63:35:be:89:
         19:1d:75:98:11:43:5c:3f:6f:bd:17:dd:32:ad:cb:ce:03:5e:
         e9:52:6b:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MwRjMxMTAvBgNVBAUTKEVCODNGNDg4MEYyMzU3NUU1NzUxNzg1QzZFMEFCMkJF
MEIyNDlCQzMwHhcNMjYwMzI1MDU0MzE2WhcNMjYwNDAxMDU0MzE2WjAYMRYwFAYD
VQQDEw02OWMzNzVmNC02ZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoJCS9t5NvWFMNNT8HbmvuK44Mg590+yjSxBLuFiE6Y9mreRxCdHa79isopYB
yBy1lDPPPpPxcEhTp/JXdOll3Y9Bl7c59D1QJ4qQzn6WEmYkh0CKU+JuvPKhI6Ta
OVVbQfpmpnlQ1j5PIFFGg6Ox9Kt93L8FJxR0/NT8FRI4IOXeGwz5HjhYDVCB+7y9
fFUSVrE2gliLrTCXB9luNfV7TylUftPRBPFpE/XPKWmGR5LijSbsZbwvSFon1hFc
xJAVslHI05YBiELcA382qHuzTXqvmHdeOxlANfuzHEsv8vVMCjeLGpuNAH9wDERf
wllYs39/2sHJkWPa3D4spMPaLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJoMB8OR
+NsY11r51OMuHseaUE7+MB8GA1UdIwQYMBaAFOuD9IgPI1deV1F4XG4Ksr4LJJvD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGMy81OEZFNzRBRUQw
QjkxMUVGQTA4NDg4MjVDNEY5QUUwMi82NFAwaUE4alYxNVhVWGhjYmdxeXZnc2tt
OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzY0UDBpQThqVjE1WFVYaGNiZ3F5dmdza204TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzBGMy81OEZFNzRBRUQwQjkxMUVGQTA4NDg4MjVDNEY5QUUwMi82NFAwaUE4alYx
NVhVWGhjYmdxeXZnc2ttOE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhdB70PfnFw+NGY3SfzdK97NHZxKwy2pui8l9MrOM++1uJq4A1oiFtFdgrjVE
bURUW0yvRcjmJr1rRur6tP68tFpRBrHnjPipCs1go8UZ37XIvS7P0W61rPHM/Euo
QTE4IVcczXqImJlv6Sr+Yeg4CD+zsmvOt7EcZiLYtfIKdzHHZ/6YDOWQVzDidMuc
eg7Iwc4jx3ASKiUM5xvjC7qnFwlQqoVuSquih7/E0UErBf9V/VDTZv95zLw2n7il
jlugpUS9Vjo4m3pTdOTfV4Re1Ft1Zb8DrOGbiLBRXudera7AymxsA51jNb6JGR11
mBFDXD9vvRfdMq3LzgNe6VJrtw==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:39:51 2026 by rpki-client