Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
File:                     2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json)
Hash identifier:          CAAFDGJu2Rtm4SvPLH6DpBx9uxq9gB8CLdIlKZtjjAM=
Subject key identifier:   7F:D3:FB:9D:86:19:80:D6:4A:FA:A6:FE:B2:0E:78:63:4E:1C:EC:78
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Certificate issuer:       /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial:       01FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
Manifest number:          01E6
Signing time:             Wed 25 Mar 2026 02:53:34 +0000
Manifest this update:     Wed 25 Mar 2026 02:53:34 +0000
Manifest next update:     Wed 01 Apr 2026 02:53:34 +0000
Files and hashes:         1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: hiHGAKa+Bz74T95I8F0hJisTOC5yHdwIZ7D+FfWzz24=)
                          2: C1FEA2F0154E11F19AE5B8A5313D8C67.roa (hash: cgOd9gJGT0Mu3EgoMhtTnhZe/DtNsKvS05s/KcGa/qY=)
                          3: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: ad6aaRvQBIRwUadg53cIGK3wdCZz0dymJ6fgvrLDsYU=)
                          4: A5C854D2154E11F194E301A5313D8C67.roa (hash: Sh69RjuVo5isx3bFpRX54pmtFrJuRKlGXyX1OLOXytg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
                          rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
        Validity
            Not Before: Mar 25 02:53:34 2026 GMT
            Not After : Apr  1 02:53:34 2026 GMT
        Subject: CN=69c34e2e-26f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:04:c4:05:36:9f:e0:ce:4f:3a:dd:9b:08:
                    77:96:94:ab:cb:fa:e0:1b:de:2f:02:44:58:bc:c7:
                    99:1c:0a:b7:b7:2a:78:23:ae:40:16:ba:6c:05:74:
                    0d:fa:cf:4e:98:99:fa:45:1c:17:ce:33:92:c4:c6:
                    ea:f6:48:d3:c0:11:1e:7c:0c:6b:5f:1c:de:bb:45:
                    90:12:52:7d:ee:69:9b:da:5c:4a:f0:26:a6:d5:df:
                    26:a5:8f:b7:7d:11:1c:27:d9:73:22:ec:5a:3e:07:
                    34:56:73:15:70:68:98:6a:96:64:87:85:ba:fa:86:
                    93:ef:6f:47:d7:41:08:2b:bc:0d:90:98:28:3f:7b:
                    0a:be:f2:d6:46:59:d1:e0:99:0c:ca:e2:6b:af:e3:
                    68:03:0d:de:b8:23:eb:22:dc:29:3b:e5:2e:8c:26:
                    9a:5e:eb:a2:81:4d:39:93:76:5d:50:cc:af:f2:8d:
                    26:99:6e:d1:ce:92:26:f6:f1:3f:aa:61:cc:42:70:
                    d2:80:41:3d:69:4a:c2:c7:16:44:38:3e:5a:f6:b0:
                    7c:43:67:ef:42:eb:b2:30:ee:e7:7b:0f:3c:31:5b:
                    db:1f:eb:9a:13:9b:da:0c:11:78:ae:d5:c4:55:ca:
                    7f:6c:51:ff:ca:8d:b6:dc:43:85:c1:98:6b:a6:d1:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D3:FB:9D:86:19:80:D6:4A:FA:A6:FE:B2:0E:78:63:4E:1C:EC:78
            X509v3 Authority Key Identifier:
                keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c8:d8:8c:bf:ae:7d:c1:04:8f:bb:5d:35:70:88:7b:38:be:
         16:07:7f:4d:5e:5f:4a:61:25:44:17:99:e2:66:be:a3:64:a9:
         ef:2b:b2:21:9c:a9:ca:6f:18:b7:bd:f7:1f:61:ec:71:79:63:
         e2:78:63:f4:4c:ea:b3:2a:cb:6e:ce:af:29:53:b6:12:b6:fe:
         0a:a8:be:16:d9:f9:ce:80:7b:80:29:16:af:05:68:30:d0:5b:
         bc:09:95:f6:67:3e:5b:80:84:17:3e:89:f6:7a:cc:a6:9e:76:
         66:4c:0b:d3:13:7f:a3:c8:d3:aa:d9:8a:6c:9f:8d:a0:c9:78:
         3a:9a:4c:22:2e:a2:f7:99:8a:39:81:f1:e3:4f:71:fe:85:51:
         cf:53:ec:62:08:bd:f0:19:20:49:72:01:28:cc:4a:9a:c6:64:
         82:70:d6:cb:06:bf:12:54:2f:5f:b6:99:45:ad:48:4c:b0:66:
         de:9d:27:f3:7b:b1:50:5f:1b:7f:83:51:e4:94:18:25:4a:ef:
         c7:7f:9b:7a:60:31:52:7a:9b:ab:3a:03:c6:a5:ec:48:f1:5e:
         95:8d:c3:24:bd:7e:38:2a:79:cb:60:a7:3d:fb:73:e8:eb:6e:
         63:8a:e4:99:bd:3f:c3:65:7e:a8:7f:c5:9c:95:e5:a6:76:46:
         09:92:a9:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA3NTMxMTAvBgNVBAUTKERBRDc4Q0FDMzZEMTQzRjE3NEFCRTExMkQ0OTVFRDVB
MDZFQ0E3NDAwHhcNMjYwMzI1MDI1MzM0WhcNMjYwNDAxMDI1MzM0WjAYMRYwFAYD
VQQDEw02OWMzNGUyZS0yNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsbkExAU2n+DOTzrdmwh3lpSry/rgG94vAkRYvMeZHAq3typ4I65AFrpsBXQN
+s9OmJn6RRwXzjOSxMbq9kjTwBEefAxrXxzeu0WQElJ97mmb2lxK8Cam1d8mpY+3
fREcJ9lzIuxaPgc0VnMVcGiYapZkh4W6+oaT729H10EIK7wNkJgoP3sKvvLWRlnR
4JkMyuJrr+NoAw3euCPrItwpO+UujCaaXuuigU05k3ZdUMyv8o0mmW7RzpIm9vE/
qmHMQnDSgEE9aUrCxxZEOD5a9rB8Q2fvQuuyMO7new88MVvbH+uaE5vaDBF4rtXE
Vcp/bFH/yo223EOFwZhrptGw4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/T+52G
GYDWSvqm/rIOeGNOHOx4MB8GA1UdIwQYMBaAFNrXjKw20UPxdKvhEtSV7VoG7KdA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDc1My84RUYyNEExMjVC
NkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFfRjBxLUVTMUpYdFdnYnNw
MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ0ZU1yRGJSUV9GMHEtRVMxSlh0V2dic3AwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDc1My84RUYyNEExMjVCNkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFf
RjBxLUVTMUpYdFdnYnNwMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMMjYjL+ufcEEj7tdNXCIezi+Fgd/TV5fSmElRBeZ4ma+o2Sp7yuyIZypym8Y
t733H2HscXlj4nhj9EzqsyrLbs6vKVO2Erb+Cqi+Ftn5zoB7gCkWrwVoMNBbvAmV
9mc+W4CEFz6J9nrMpp52ZkwL0xN/o8jTqtmKbJ+NoMl4OppMIi6i95mKOYHx409x
/oVRz1PsYgi98BkgSXIBKMxKmsZkgnDWywa/ElQvX7aZRa1ITLBm3p0n83uxUF8b
f4NR5JQYJUrvx3+bemAxUnqbqzoDxqXsSPFelY3DJL1+OCp5y2CnPftz6OtuY4rk
mb0/w2V+qH/FnJXlpnZGCZKp2g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:22 2026 by rpki-client