Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
File:                     Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json)
Hash identifier:          iu4LmPsrcpE1frs1oPAbiUoKP/qaMsgIbT7UyL93dbM=
Subject key identifier:   97:C0:21:4B:71:77:0F:2E:6C:1E:A2:A9:00:ED:8C:06:48:04:84:06
Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF
Certificate issuer:       /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
Manifest number:          01D4
Signing time:             Wed 25 Mar 2026 02:57:05 +0000
Manifest this update:     Wed 25 Mar 2026 02:57:05 +0000
Manifest next update:     Wed 01 Apr 2026 02:57:05 +0000
Files and hashes:         1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: f16wJ1lcouhDivZEqJ3QXc/ULuHYOunkvxUXoR1NlB0=)
                          2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: XpOJLqrrUhEc7ebQkkMofYS8+Tg7b9rkq4W6zmxVycM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl
                          rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
        Validity
            Not Before: Mar 25 02:57:05 2026 GMT
            Not After : Apr  1 02:57:05 2026 GMT
        Subject: CN=69c34f01-d3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:59:44:d2:78:c7:5d:d7:e5:0e:73:d8:43:
                    89:43:a9:a6:f7:0d:c0:1d:5a:77:78:76:d2:ca:f4:
                    25:22:b5:c4:d7:2f:65:e7:65:e5:67:5f:11:34:8f:
                    90:2b:10:93:a1:ad:bf:69:b4:a3:dd:d2:a0:fb:a4:
                    81:f8:84:1f:9e:5b:9a:6d:7a:47:57:34:c1:28:1f:
                    9a:21:d2:92:6e:b2:d4:1a:8c:13:7f:1d:40:3e:01:
                    6b:64:4b:b7:6e:96:e7:24:f2:66:9d:13:68:bb:08:
                    c3:54:55:a8:68:9c:26:ae:72:06:82:ce:6f:cc:02:
                    be:31:c8:56:67:33:a3:68:ea:59:e6:c4:f8:5b:df:
                    a2:3b:a6:be:91:64:c0:ee:f1:2d:b4:bf:4f:0c:91:
                    0c:1e:ce:e2:bf:d1:d3:7e:c1:14:27:f8:9b:7b:b4:
                    5f:5d:3b:60:68:8c:11:52:69:2d:3f:af:ad:7c:8b:
                    16:56:96:5f:b5:f9:66:41:ea:c2:36:5e:ba:64:1e:
                    d9:f4:5b:59:34:51:8e:02:92:3a:83:2c:37:b3:36:
                    52:63:b3:3f:b8:29:db:88:c2:b6:f5:fc:71:bf:2d:
                    c6:cb:1e:72:7a:aa:07:8b:e0:c4:5c:d5:c3:86:dd:
                    71:68:25:8c:6d:cc:36:ab:7e:a9:db:07:58:85:70:
                    c8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C0:21:4B:71:77:0F:2E:6C:1E:A2:A9:00:ED:8C:06:48:04:84:06
            X509v3 Authority Key Identifier:
                keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7c:f1:b8:cd:11:2c:d5:62:27:1a:86:d5:ba:23:49:64:1f:
         0a:28:cf:be:3b:5a:bd:37:de:20:3c:da:82:54:0a:42:19:4a:
         8c:ff:80:0d:40:aa:02:3e:30:ee:29:98:d3:cc:bb:d5:84:b6:
         17:dd:d4:fd:b4:22:73:58:1e:5b:15:92:e5:a5:d2:26:08:41:
         7d:b3:3a:64:0b:4d:08:36:d7:ad:d3:d3:e3:e3:83:96:85:51:
         1b:4d:69:d8:61:65:ac:a5:53:9c:5a:d5:30:8f:9f:f0:35:09:
         81:98:29:6e:0b:a7:1a:d9:7e:29:35:de:ff:6d:f0:44:37:28:
         cc:14:6f:5a:fa:c4:d0:ef:61:67:fb:f9:2a:44:15:47:09:ee:
         fc:af:45:a8:b6:f2:a8:e2:bf:bb:34:ed:82:f7:31:b5:f6:6d:
         66:b7:45:d0:69:af:b9:1a:c0:0e:8f:ec:8b:5b:11:25:41:02:
         9b:68:fe:e5:5d:24:27:44:d1:6c:ba:ea:d2:32:eb:39:fc:59:
         ff:e4:88:83:1f:b9:66:54:ba:aa:87:aa:4b:73:f4:61:15:a7:
         0a:0e:bb:4d:66:0b:84:df:3d:2c:da:bf:a3:0a:2f:c3:95:58:
         4f:69:d8:dd:e7:ef:d2:d0:17:e3:53:37:c0:3a:2a:7e:f7:53:
         40:0e:af:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ3QzQxMTAvBgNVBAUTKDQ5REI2MUZGMDNDNTUxNjc5NUNGNzg1MDlFQTM3QTA2
MEY0NTQ3QkYwHhcNMjYwMzI1MDI1NzA1WhcNMjYwNDAxMDI1NzA1WjAYMRYwFAYD
VQQDEw02OWMzNGYwMS1kM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBVZRNJ4x13X5Q5z2EOJQ6mm9w3AHVp3eHbSyvQlIrXE1y9l52XlZ18RNI+Q
KxCToa2/abSj3dKg+6SB+IQfnluabXpHVzTBKB+aIdKSbrLUGowTfx1APgFrZEu3
bpbnJPJmnRNouwjDVFWoaJwmrnIGgs5vzAK+MchWZzOjaOpZ5sT4W9+iO6a+kWTA
7vEttL9PDJEMHs7iv9HTfsEUJ/ibe7RfXTtgaIwRUmktP6+tfIsWVpZftflmQerC
Nl66ZB7Z9FtZNFGOApI6gyw3szZSY7M/uCnbiMK29fxxvy3Gyx5yeqoHi+DEXNXD
ht1xaCWMbcw2q36p2wdYhXDIqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJfAIUtx
dw8ubB6iqQDtjAZIBIQGMB8GA1UdIwQYMBaAFEnbYf8DxVFnlc94UJ6jegYPRUe/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDdDNC81OTVCRTgyQzYz
NUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVXZVZ6M2hRbnFONkJnOUZS
NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NkdGhfd1BGVVdlVnozaFFucU42Qmc5RlI3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDdDNC81OTVCRTgyQzYzNUIxMUVFODg0Q0FENEZDNEY5QUUwMi9TZHRoX3dQRlVX
ZVZ6M2hRbnFONkJnOUZSNzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGHzxuM0RLNViJxqG1bojSWQfCijPvjtavTfeIDzaglQKQhlKjP+ADUCqAj4w
7imY08y71YS2F93U/bQic1geWxWS5aXSJghBfbM6ZAtNCDbXrdPT4+ODloVRG01p
2GFlrKVTnFrVMI+f8DUJgZgpbgunGtl+KTXe/23wRDcozBRvWvrE0O9hZ/v5KkQV
Rwnu/K9FqLbyqOK/uzTtgvcxtfZtZrdF0GmvuRrADo/si1sRJUECm2j+5V0kJ0TR
bLrq0jLrOfxZ/+SIgx+5ZlS6qoeqS3P0YRWnCg67TWYLhN89LNq/owovw5VYT2nY
3efv0tAX41M3wDoqfvdTQA6vww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:41 2026 by rpki-client