Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
File:                     9Avota0WsYR_wNT0cI-dQUkxq6Y.mft (raw, json)
Hash identifier:          XHOWlQR5AfAnWdtZRyEsrHS6l20PotVS+1JvRPE/2DY=
Subject key identifier:   65:E7:0F:24:DD:F7:E9:41:24:61:18:B9:76:C2:28:0C:D7:BB:58:5E
Authority key identifier: F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6
Certificate issuer:       /CN=A918BCEE/serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
Certificate serial:       036B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
Manifest number:          0337
Signing time:             Wed 25 Mar 2026 00:53:06 +0000
Manifest this update:     Wed 25 Mar 2026 00:53:06 +0000
Manifest next update:     Wed 01 Apr 2026 00:53:06 +0000
Files and hashes:         1: 9Avota0WsYR_wNT0cI-dQUkxq6Y.crl (hash: ygfmgmTD2duJUulEXnhzW7a4sNxQ8mQG/xdoXNxrbhM=)
                          2: 6C92164E8E7111F095FEDD1FC4F9AE02.roa (hash: hEwvb5ytkKxxM9O8jHrWeJCH/b+Oa1+Ladz4E/XqvoQ=)
                          3: E6E564502DD811EF8471C475C4F9AE02.roa (hash: /0S5pT79PtqrACJXMc9q9aiHeZ+Hyjz4votHiSroXOY=)
                          4: 36660EAE679E11EFBAD37686C4F9AE02.roa (hash: Alo6+mbXK5hudm6qXf9m/rE0ehCEvCvCk+3HnA1lEJ4=)
                          5: 214E67EA1EF911EDAAC3AE62C4F9AE02.roa (hash: oCDiQD7WQuz6D3KtrNY0cV/jbfZz9PIvl3eIklo34Fg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl
                          rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875 (0x36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BCEE, serialNumber=F40BE8B5AD16B1847FC0D4F4708F9D414931ABA6
        Validity
            Not Before: Mar 25 00:53:06 2026 GMT
            Not After : Apr  1 00:53:06 2026 GMT
        Subject: CN=69c331f2-4029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:ed:7f:60:ea:21:ce:f7:89:a3:77:e8:94:
                    34:c2:21:3e:6f:e6:5a:f3:ee:6a:ec:39:64:1d:6f:
                    e8:0b:ca:0a:c7:1a:40:07:1f:a0:b9:2f:4b:ed:2c:
                    ed:a0:77:f4:1f:9f:03:7a:20:44:22:e4:4e:cd:bc:
                    a8:bf:ba:65:7f:e6:9b:7a:60:ad:97:32:45:67:4d:
                    24:af:ec:93:e1:2c:4d:c8:36:87:45:83:a5:80:ec:
                    b0:96:8c:0a:55:89:ac:d2:6f:21:78:67:25:0d:76:
                    10:01:a5:78:e2:03:cf:1e:e2:89:32:37:69:7a:a5:
                    c1:1d:e7:29:4e:37:02:67:a6:a3:8e:43:88:a8:01:
                    8e:b7:45:8b:14:c6:df:33:32:fa:68:0d:1e:59:71:
                    d6:20:1a:fb:13:2a:f4:d6:c1:cb:79:aa:ce:0f:ff:
                    3a:b5:84:c4:58:04:13:fd:2c:25:67:c0:1b:dc:65:
                    85:47:5b:0b:8a:db:17:1d:18:6f:d8:16:6a:66:c0:
                    9d:4e:ec:5f:0e:c6:a7:77:ae:1a:2a:01:e5:be:9b:
                    3c:c7:7f:a0:33:f6:44:f8:dc:5c:b5:6f:e2:74:74:
                    86:d0:d8:08:e9:3b:6d:46:c7:24:05:ce:f3:81:49:
                    49:e9:50:87:d5:53:7f:1e:0d:ae:c4:b9:2b:d5:82:
                    d5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E7:0F:24:DD:F7:E9:41:24:61:18:B9:76:C2:28:0C:D7:BB:58:5E
            X509v3 Authority Key Identifier:
                keyid:F4:0B:E8:B5:AD:16:B1:84:7F:C0:D4:F4:70:8F:9D:41:49:31:AB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Avota0WsYR_wNT0cI-dQUkxq6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BCEE/68C3563013FF11EDA3F33941C4F9AE02/9Avota0WsYR_wNT0cI-dQUkxq6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2a:88:3e:e3:db:fd:30:6b:46:eb:46:5d:71:c8:a9:41:51:
         71:f1:9a:b3:81:ab:3e:d0:b7:55:a7:7c:e7:ad:f8:64:55:31:
         db:38:94:d0:1f:48:6f:bc:91:f3:2d:02:34:0c:a0:8c:4d:09:
         c4:36:0e:e7:5d:8f:09:8e:4c:52:1c:c8:f8:ba:44:e8:1d:12:
         4c:16:b0:84:f5:d0:b9:06:20:67:7f:ea:79:b9:00:7d:d5:2d:
         0c:7b:62:ce:75:fc:32:fd:c0:14:d7:d7:f8:c7:76:56:e4:4c:
         bc:0b:8e:49:dc:f9:82:35:c0:27:63:d2:1b:05:ad:f8:a2:46:
         9d:b8:e0:39:b3:28:14:81:52:8e:f4:11:cc:3b:58:c6:39:d4:
         67:6c:61:9e:ed:b6:bb:9c:36:7a:4b:39:a1:3d:db:08:e3:47:
         6b:9a:43:15:c2:eb:41:2b:59:c1:4a:45:74:cf:c7:6b:07:1b:
         1e:d9:51:b9:c8:73:28:54:c8:4e:4a:f7:54:f0:4f:b2:1d:3b:
         4b:bd:d1:98:e6:c7:ab:ca:03:fb:a0:41:be:44:61:b0:b4:d0:
         36:75:07:68:b8:8d:7b:c9:86:f1:80:5b:de:bf:00:b0:9a:dc:
         28:7f:cb:f9:5e:3e:84:52:2a:26:83:99:48:50:f1:51:74:6b:
         39:6c:ad:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJDRUUxMTAvBgNVBAUTKEY0MEJFOEI1QUQxNkIxODQ3RkMwRDRGNDcwOEY5RDQx
NDkzMUFCQTYwHhcNMjYwMzI1MDA1MzA2WhcNMjYwNDAxMDA1MzA2WjAYMRYwFAYD
VQQDEw02OWMzMzFmMi00MDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArBPtf2DqIc73iaN36JQ0wiE+b+Za8+5q7DlkHW/oC8oKxxpABx+guS9L7Szt
oHf0H58DeiBEIuROzbyov7plf+abemCtlzJFZ00kr+yT4SxNyDaHRYOlgOywlowK
VYms0m8heGclDXYQAaV44gPPHuKJMjdpeqXBHecpTjcCZ6ajjkOIqAGOt0WLFMbf
MzL6aA0eWXHWIBr7Eyr01sHLearOD/86tYTEWAQT/SwlZ8Ab3GWFR1sLitsXHRhv
2BZqZsCdTuxfDsand64aKgHlvps8x3+gM/ZE+NxctW/idHSG0NgI6TttRsckBc7z
gUlJ6VCH1VN/Hg2uxLkr1YLVbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXnDyTd
9+lBJGEYuXbCKAzXu1heMB8GA1UdIwQYMBaAFPQL6LWtFrGEf8DU9HCPnUFJMaum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkNFRS82OEMzNTYzMDEz
RkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZUl93TlQwY0ktZFFVa3hx
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlBdm90YTBXc1lSX3dOVDBjSS1kUVVreHE2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkNFRS82OEMzNTYzMDEzRkYxMUVEQTNGMzM5NDFDNEY5QUUwMi85QXZvdGEwV3NZ
Ul93TlQwY0ktZFFVa3hxNlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbCqIPuPb/TBrRutGXXHIqUFRcfGas4GrPtC3Vad85634ZFUx2ziU0B9Ib7yR
8y0CNAygjE0JxDYO512PCY5MUhzI+LpE6B0STBawhPXQuQYgZ3/qebkAfdUtDHti
znX8Mv3AFNfX+Md2VuRMvAuOSdz5gjXAJ2PSGwWt+KJGnbjgObMoFIFSjvQRzDtY
xjnUZ2xhnu22u5w2eks5oT3bCONHa5pDFcLrQStZwUpFdM/HawcbHtlRuchzKFTI
Tkr3VPBPsh07S73RmObHq8oD+6BBvkRhsLTQNnUHaLiNe8mG8YBb3r8AsJrcKH/L
+V4+hFIqJoOZSFDxUXRrOWytqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:30:19 2026 by rpki-client