Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
File:                     f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json)
Hash identifier:          eLZGiRA14Qci65NcnA7vkqnKhmbt95R2KMJaCw+NpGg=
Subject key identifier:   92:04:ED:A6:A0:4A:92:7F:24:00:4A:55:B6:0A:96:A1:E2:7D:1C:DF
Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Certificate issuer:       /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
Manifest number:          F8
Signing time:             Wed 25 Mar 2026 05:33:50 +0000
Manifest this update:     Wed 25 Mar 2026 05:33:49 +0000
Manifest next update:     Wed 01 Apr 2026 05:33:49 +0000
Files and hashes:         1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: yaGKCmAgLqv+YZ+D9lN7mj0yEBc1FZd2OHRWM0XJK8E=)
                          2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: 8H2e0J6ttQKl0SPd9mkDBdGO8YngFPILlTNxbAVIA68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
        Validity
            Not Before: Mar 25 05:33:49 2026 GMT
            Not After : Apr  1 05:33:49 2026 GMT
        Subject: CN=69c373be-3bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:e2:00:f1:06:55:6e:be:38:ea:ab:91:1e:
                    6f:78:02:00:56:30:d6:cf:75:87:83:25:34:54:17:
                    28:9b:8d:c2:35:28:ba:f9:fc:b3:50:12:6a:01:9a:
                    17:9b:e2:66:f3:2c:3d:d9:f6:0a:0f:34:29:22:bc:
                    aa:5d:85:39:09:b7:1d:86:ea:07:9f:3f:92:b3:d0:
                    ba:d9:34:13:68:31:9b:fb:a7:9c:16:1f:d0:68:4a:
                    f6:6f:2a:b2:b2:36:8a:e5:be:fc:d2:2b:14:53:f0:
                    b5:6e:13:89:bc:40:8c:5d:a1:82:29:96:4f:db:15:
                    39:a1:c4:f6:1f:04:6a:f0:71:23:4d:9c:3a:4e:d8:
                    23:77:5b:2e:82:a2:7e:e7:65:13:8c:9c:86:8f:a7:
                    1b:ae:e1:15:d9:39:97:9c:c0:4a:bf:32:ff:af:1c:
                    ad:7c:87:13:e2:83:8f:dc:1b:81:03:40:a0:7e:13:
                    3a:05:2b:65:38:07:7a:ac:71:e5:35:e3:3b:b7:5a:
                    35:d8:cf:6c:ba:0e:06:d3:9e:03:a9:c4:87:b0:68:
                    8b:a5:df:d8:27:d4:29:a5:09:db:ae:06:72:53:f7:
                    47:7b:ca:3c:7e:31:e5:1f:b8:20:99:ac:79:cc:02:
                    6b:fb:29:f1:95:cf:1e:fa:ea:9a:39:6f:24:d6:bf:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:04:ED:A6:A0:4A:92:7F:24:00:4A:55:B6:0A:96:A1:E2:7D:1C:DF
            X509v3 Authority Key Identifier:
                keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d2:73:a7:cf:ff:d2:d8:e9:87:d4:fa:05:ae:27:68:84:de:
         25:af:c1:9d:35:9a:f5:e3:83:73:a6:f4:3e:3a:63:a4:e2:df:
         3d:63:1c:01:6f:84:2e:db:be:eb:8c:2e:b2:19:7b:75:0a:6b:
         72:e4:b5:d6:3f:3a:51:d7:6d:07:ae:03:ae:05:d0:ba:c1:62:
         94:e3:7a:f2:a2:08:20:75:39:29:10:e5:d0:77:d7:95:5a:bc:
         36:be:c1:85:36:c9:bd:39:b4:22:1c:58:f0:6f:02:4a:d6:96:
         f3:44:48:11:4c:c0:b1:c3:c9:65:39:3a:5a:1e:cc:c7:ea:d5:
         92:75:6f:1b:79:3a:dc:53:ca:78:43:f9:5d:77:1b:5d:2f:0f:
         a9:90:25:8c:2e:79:9d:40:49:fc:b8:bf:e9:4f:99:f3:78:15:
         50:ec:85:63:86:e4:be:60:63:7d:1a:3f:08:8b:2c:36:f5:19:
         02:dc:b3:b5:a0:5a:1e:82:b1:3d:12:a0:7b:68:67:1b:1d:2c:
         04:d7:c3:6b:78:e7:af:4b:e1:b4:f9:2a:06:10:bd:48:ad:8b:
         95:79:70:76:23:95:bc:af:00:6b:9c:b1:40:34:0f:cd:8a:97:
         02:51:8c:29:a6:00:7e:cc:c1:74:a1:cb:0e:04:14:af:13:a4:
         00:87:db:91
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJBNDcxMTAvBgNVBAUTKDdGNzc1OTIwNDJFM0M4N0JFNTZFRUQ4MUQ5Q0NCMEU5
NzQwMkNERDcwHhcNMjYwMzI1MDUzMzQ5WhcNMjYwNDAxMDUzMzQ5WjAYMRYwFAYD
VQQDEw02OWMzNzNiZS0zYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu5viAPEGVW6+OOqrkR5veAIAVjDWz3WHgyU0VBcom43CNSi6+fyzUBJqAZoX
m+Jm8yw92fYKDzQpIryqXYU5CbcdhuoHnz+Ss9C62TQTaDGb+6ecFh/QaEr2byqy
sjaK5b780isUU/C1bhOJvECMXaGCKZZP2xU5ocT2HwRq8HEjTZw6Ttgjd1sugqJ+
52UTjJyGj6cbruEV2TmXnMBKvzL/rxytfIcT4oOP3BuBA0CgfhM6BStlOAd6rHHl
NeM7t1o12M9sug4G054DqcSHsGiLpd/YJ9QppQnbrgZyU/dHe8o8fjHlH7ggmax5
zAJr+ynxlc8e+uqaOW8k1r+Q8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJIE7aag
SpJ/JABKVbYKlqHifRzfMB8GA1UdIwQYMBaAFH93WSBC48h75W7tgdnMsOl0As3X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE0Ny8xNTkwN0MyMkI4
MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlIdmxidTJCMmN5dzZYUUN6
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2YzZFpJRUxqeUh2bGJ1MkIyY3l3NlhRQ3pkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkE0Ny8xNTkwN0MyMkI4MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlI
dmxidTJCMmN5dzZYUUN6ZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkNJzp8//0tjph9T6Ba4naITeJa/BnTWa9eODc6b0PjpjpOLfPWMcAW+ELtu+
64wushl7dQprcuS11j86UddtB64DrgXQusFilON68qIIIHU5KRDl0HfXlVq8Nr7B
hTbJvTm0IhxY8G8CStaW80RIEUzAscPJZTk6Wh7Mx+rVknVvG3k63FPKeEP5XXcb
XS8PqZAljC55nUBJ/Li/6U+Z83gVUOyFY4bkvmBjfRo/CIssNvUZAtyztaBaHoKx
PRKge2hnGx0sBNfDa3jnr0vhtPkqBhC9SK2LlXlwdiOVvK8Aa5yxQDQPzYqXAlGM
KaYAfszBdKHLDgQUrxOkAIfbkQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:14 2026 by rpki-client