Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
File:                     2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json)
Hash identifier:          4wJe2zoreOjfaMd9DDpyUCn5nxrLvvsGmuxfFGkmRFc=
Subject key identifier:   8A:E1:A1:65:22:C4:50:26:F8:33:56:F4:13:6C:9A:EC:FF:95:39:95
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
Manifest number:          01C6
Signing time:             Wed 25 Mar 2026 03:05:57 +0000
Manifest this update:     Wed 25 Mar 2026 03:05:56 +0000
Manifest next update:     Wed 01 Apr 2026 03:05:56 +0000
Files and hashes:         1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: witEhoY386ndEv3U+khGtYWFTer0sCV95nD/YxotBNA=)
                          2: E5502F78772411EE8659D21FC4F9AE02.roa (hash: LQ6qZyL+mv+RVrZvKDEt4oQDvgbU7ovrjn7THSFdODM=)
                          3: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: rdUY5o4flNxATzMbPqo0gzo0RDU24xXXFTR8UNUkUPg=)
                          4: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: Id9EizAfl9nJVp3oMA6sc8l7BIkn5L64mAeYKrGnlQ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: Mar 25 03:05:56 2026 GMT
            Not After : Apr  1 03:05:56 2026 GMT
        Subject: CN=69c35115-7cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bd:c0:92:2f:7d:8b:a3:8d:bd:52:83:84:28:
                    bb:22:f9:2e:92:de:0d:93:84:fd:25:eb:77:f3:50:
                    b8:5d:4f:3b:ab:37:d2:af:0e:e3:db:1e:85:f9:35:
                    d5:27:e1:b2:9f:7e:02:63:b4:b1:32:3d:f3:a0:b0:
                    58:37:8b:49:e8:57:16:b2:03:89:33:00:76:58:14:
                    c0:93:4d:ba:3d:2a:56:e8:79:01:2d:57:6c:c1:aa:
                    87:7c:e6:65:da:92:2c:89:c4:50:df:81:d4:8f:fc:
                    d1:73:95:93:8d:a7:c5:13:84:1d:72:60:0d:d2:e7:
                    49:79:3c:08:bd:04:8a:dc:ac:fd:1f:b1:54:68:7e:
                    1f:53:3d:8c:38:6c:fc:9f:b0:4f:07:39:f9:ca:77:
                    49:b9:08:f1:ad:57:bf:6e:68:62:22:64:3c:ef:1e:
                    67:3f:de:76:5f:ab:3e:cc:65:fb:3b:f2:6c:85:33:
                    e8:1e:98:f9:4d:71:ec:d5:85:29:c1:90:93:ba:7b:
                    c8:64:e6:78:58:8b:65:a0:be:6e:25:60:13:34:57:
                    78:39:5e:dc:18:fc:97:bd:d1:53:2a:34:ba:40:06:
                    56:3f:f4:ab:9d:e5:be:e2:26:34:e0:47:58:0e:2c:
                    ae:30:12:1e:fd:c1:35:eb:b1:31:cf:7c:66:2e:23:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E1:A1:65:22:C4:50:26:F8:33:56:F4:13:6C:9A:EC:FF:95:39:95
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b6:0b:60:58:c9:9e:0a:7e:2d:77:a6:6a:29:7f:ad:3d:84:
         7b:3a:8a:fa:90:3c:1b:a5:46:f8:40:67:69:a5:df:2f:60:36:
         0a:89:c6:93:e3:91:6b:02:22:06:0d:85:82:1d:78:e9:d4:ad:
         11:dc:c7:be:03:23:b8:d5:f5:98:27:73:15:dc:8d:fe:7f:20:
         f7:97:72:20:14:b0:7e:d6:10:e7:75:ee:7c:f2:a1:ec:e6:b3:
         bd:65:73:a3:75:b3:1d:d4:a1:ef:1c:c0:54:52:ca:53:3e:24:
         cc:fb:6f:92:e8:10:5f:14:28:e3:1a:88:e6:ff:c7:df:33:ed:
         11:4c:21:dc:0c:a8:a8:ae:e6:bf:e7:d0:87:2e:e5:ad:45:9c:
         b7:fc:e5:a0:35:3d:ea:1e:47:c0:c3:fc:29:eb:ab:bc:c2:b6:
         08:81:52:ee:a6:a5:89:9d:95:a4:85:85:9c:e8:90:31:c1:a0:
         1e:c2:3a:67:9f:5a:97:50:f5:cc:e0:84:42:ee:cb:74:6c:09:
         4e:5e:16:15:68:89:ae:59:5a:1a:a4:1d:85:5f:db:20:07:24:
         98:31:ee:10:41:eb:c9:61:63:84:b2:2d:12:70:3e:05:0c:46:
         b5:77:23:a2:55:7d:de:6d:d1:ba:24:cf:0a:65:ba:ec:8d:67:
         27:88:48:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC
QjZGMUVCRjEwHhcNMjYwMzI1MDMwNTU2WhcNMjYwNDAxMDMwNTU2WjAYMRYwFAYD
VQQDEw02OWMzNTExNS03Y2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA073Aki99i6ONvVKDhCi7Ivkukt4Nk4T9Jet381C4XU87qzfSrw7j2x6F+TXV
J+Gyn34CY7SxMj3zoLBYN4tJ6FcWsgOJMwB2WBTAk026PSpW6HkBLVdswaqHfOZl
2pIsicRQ34HUj/zRc5WTjafFE4QdcmAN0udJeTwIvQSK3Kz9H7FUaH4fUz2MOGz8
n7BPBzn5yndJuQjxrVe/bmhiImQ87x5nP952X6s+zGX7O/JshTPoHpj5TXHs1YUp
wZCTunvIZOZ4WItloL5uJWATNFd4OV7cGPyXvdFTKjS6QAZWP/SrneW+4iY04EdY
DiyuMBIe/cE167Exz3xmLiNcwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIrhoWUi
xFAm+DNW9BNsmuz/lTmVMB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3
MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTU2QS8yNkZBMTgxODc3MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5m
UzltRG1oVEk0X3U3Yng2X0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXLYLYFjJngp+LXemail/rT2EezqK+pA8G6VG+EBnaaXfL2A2ConGk+ORawIi
Bg2Fgh146dStEdzHvgMjuNX1mCdzFdyN/n8g95dyIBSwftYQ53XufPKh7OazvWVz
o3WzHdSh7xzAVFLKUz4kzPtvkugQXxQo4xqI5v/H3zPtEUwh3AyoqK7mv+fQhy7l
rUWct/zloDU96h5HwMP8KeurvMK2CIFS7qaliZ2VpIWFnOiQMcGgHsI6Z59al1D1
zOCEQu7LdGwJTl4WFWiJrllaGqQdhV/bIAckmDHuEEHryWFjhLItEnA+BQxGtXcj
olV93m3RuiTPCmW67I1nJ4hIMQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:09:21 2026 by rpki-client