Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
File:                     RyIWWikMD62wOOjNLGOuxx6Pg-w.mft (raw, json)
Hash identifier:          1XqT9SVq2T5OvMvfybCCFbM4vf87bqXYVZK448mYRkg=
Subject key identifier:   9E:FE:BE:6A:27:05:BF:F9:A9:DC:7F:25:D8:89:2D:D2:47:1C:42:81
Authority key identifier: 47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC
Certificate issuer:       /CN=A918A341/serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
Certificate serial:       05B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
Manifest number:          05AA
Signing time:             Tue 24 Mar 2026 22:51:41 +0000
Manifest this update:     Tue 24 Mar 2026 22:51:40 +0000
Manifest next update:     Tue 31 Mar 2026 22:51:40 +0000
Files and hashes:         1: RyIWWikMD62wOOjNLGOuxx6Pg-w.crl (hash: 68PtW/fH+agUq7M79qd5IJ0HxFs8W5PbtV6u2oPZZIk=)
                          2: EF3517E8099311ECAD398842C4F9AE02.roa (hash: m5rNWZp0dOLnvfXWxVY4E1RwDznb8PJhyNSY32AfQA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl
                          rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1459 (0x5b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A341, serialNumber=4722165A290C0FADB038E8CD2C63AEC71E8F83EC
        Validity
            Not Before: Mar 24 22:51:40 2026 GMT
            Not After : Mar 31 22:51:40 2026 GMT
        Subject: CN=69c3157c-444f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b2:4b:8d:ab:f0:7b:50:ff:6c:fe:a6:b8:90:
                    96:bb:bf:02:36:dd:0a:d5:62:8d:27:4f:dd:b4:30:
                    cd:1d:dd:7b:2f:7c:0b:c4:89:eb:98:c4:fe:ec:ac:
                    13:56:3b:bd:65:de:de:1a:ba:4f:a3:7e:7e:c5:23:
                    f9:7f:85:01:14:72:c3:9a:52:df:1e:fc:06:3b:ae:
                    77:a1:ee:76:53:d2:35:b0:26:9a:e0:7a:14:dc:2e:
                    2e:a5:05:de:64:78:40:9b:dd:02:4f:9f:90:33:4f:
                    c3:d6:48:f8:cc:d4:74:75:8f:c3:1c:04:86:0a:1a:
                    77:b7:71:de:45:af:7d:34:af:ed:59:06:42:8f:85:
                    5e:49:92:42:eb:03:a3:55:0c:6d:6b:af:a9:62:6b:
                    c4:0d:50:9e:af:69:d8:84:8c:65:ef:50:72:f0:7a:
                    1a:ae:7f:fc:d7:85:b8:d6:da:f1:8b:e7:dc:1e:da:
                    4b:62:1b:b4:54:69:27:cc:c2:5d:e2:5b:d1:6b:f0:
                    42:e1:07:6b:dc:11:8b:b2:de:99:93:f2:ff:45:63:
                    a3:bc:6c:5e:2a:46:74:d5:f2:6b:22:d3:36:9d:c9:
                    d6:04:ea:80:52:d7:ba:87:c6:cd:e1:72:05:bf:5e:
                    74:94:58:de:42:f4:72:d3:a1:02:89:d8:73:07:96:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FE:BE:6A:27:05:BF:F9:A9:DC:7F:25:D8:89:2D:D2:47:1C:42:81
            X509v3 Authority Key Identifier:
                keyid:47:22:16:5A:29:0C:0F:AD:B0:38:E8:CD:2C:63:AE:C7:1E:8F:83:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RyIWWikMD62wOOjNLGOuxx6Pg-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A341/9A7EAC4A098F11ECA633E13BC4F9AE02/RyIWWikMD62wOOjNLGOuxx6Pg-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:57:c3:3e:c4:70:4f:9e:64:1a:97:ff:b0:55:0d:b1:ef:0d:
         bc:98:77:f8:d7:5e:0a:82:3c:c4:df:13:69:74:4f:94:2c:44:
         fb:d6:50:17:5d:88:22:2e:ac:43:a1:90:43:44:31:a6:c9:ac:
         68:3a:25:a2:2c:65:a5:03:cf:3d:77:81:2e:a4:59:3e:64:67:
         83:48:d3:13:9a:26:38:29:06:77:fa:ea:fb:e2:64:1b:99:c5:
         8f:11:61:d3:58:43:35:ba:c1:7a:a2:22:c9:75:ab:a8:6f:f3:
         86:6c:19:1f:d3:9e:57:0d:24:d6:53:db:e0:ad:4c:69:d7:79:
         a8:51:cb:ba:c7:94:5d:45:7b:ff:4e:40:93:d6:ab:83:3d:67:
         9f:c7:62:73:28:7c:25:65:fd:74:a8:d0:61:b3:1a:d2:c3:83:
         28:56:f7:30:ac:25:fa:3b:0f:3a:29:ac:6b:cf:d4:92:05:78:
         4d:a2:7c:cd:83:0b:5d:4c:5b:7e:9b:61:63:fc:19:4d:2e:90:
         93:25:da:d4:d1:14:25:bc:a3:f5:45:2d:0e:be:8d:24:be:9f:
         c1:26:9f:ed:80:83:e1:f0:01:cd:43:1a:1f:81:8c:24:7a:5c:
         a6:ea:93:75:90:dd:dc:18:27:07:29:46:63:58:ec:e7:65:86:
         af:9e:81:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEzNDExMTAvBgNVBAUTKDQ3MjIxNjVBMjkwQzBGQURCMDM4RThDRDJDNjNBRUM3
MUU4RjgzRUMwHhcNMjYwMzI0MjI1MTQwWhcNMjYwMzMxMjI1MTQwWjAYMRYwFAYD
VQQDEw02OWMzMTU3Yy00NDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8LJLjavwe1D/bP6muJCWu78CNt0K1WKNJ0/dtDDNHd17L3wLxInrmMT+7KwT
Vju9Zd7eGrpPo35+xSP5f4UBFHLDmlLfHvwGO653oe52U9I1sCaa4HoU3C4upQXe
ZHhAm90CT5+QM0/D1kj4zNR0dY/DHASGChp3t3HeRa99NK/tWQZCj4VeSZJC6wOj
VQxta6+pYmvEDVCer2nYhIxl71By8Hoarn/814W41trxi+fcHtpLYhu0VGknzMJd
4lvRa/BC4Qdr3BGLst6Zk/L/RWOjvGxeKkZ01fJrItM2ncnWBOqAUte6h8bN4XIF
v150lFjeQvRy06ECidhzB5YVjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7+vmon
Bb/5qdx/JdiJLdJHHEKBMB8GA1UdIwQYMBaAFEciFlopDA+tsDjozSxjrscej4Ps
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM0MS85QTdFQUM0QTA5
OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2MndPT2pOTEdPdXh4NlBn
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J5SVdXaWtNRDYyd09Pak5MR091eHg2UGctdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTM0MS85QTdFQUM0QTA5OEYxMUVDQTYzM0UxM0JDNEY5QUUwMi9SeUlXV2lrTUQ2
MndPT2pOTEdPdXh4NlBnLXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ1fDPsRwT55kGpf/sFUNse8NvJh3+NdeCoI8xN8TaXRPlCxE+9ZQF12IIi6s
Q6GQQ0QxpsmsaDoloixlpQPPPXeBLqRZPmRng0jTE5omOCkGd/rq++JkG5nFjxFh
01hDNbrBeqIiyXWrqG/zhmwZH9OeVw0k1lPb4K1Madd5qFHLuseUXUV7/05Ak9ar
gz1nn8dicyh8JWX9dKjQYbMa0sODKFb3MKwl+jsPOimsa8/UkgV4TaJ8zYMLXUxb
fpthY/wZTS6QkyXa1NEUJbyj9UUtDr6NJL6fwSaf7YCD4fABzUMaH4GMJHpcpuqT
dZDd3BgnBylGY1js52WGr56BbA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:28 2026 by rpki-client