Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
File:                     pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json)
Hash identifier:          8hsAJZX5lUmdwfvMhGSC7KbhY1QLdYquW2UWhvOyn0M=
Subject key identifier:   F2:9D:0F:4E:32:7A:6D:61:B6:45:75:57:48:36:7E:77:23:0F:AA:FF
Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13
Certificate issuer:       /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
Manifest number:          010E
Signing time:             Wed 25 Mar 2026 05:12:03 +0000
Manifest this update:     Wed 25 Mar 2026 05:12:02 +0000
Manifest next update:     Wed 01 Apr 2026 05:12:02 +0000
Files and hashes:         1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: PIZWZbdGpXXa5nJP9HbHXKCZr+5sXhuggwICrl35OkM=)
                          2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: WPfdAXefVfZ1Z8B0KAdDL3U8aL68A120XQbVokS39W4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl
                          rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113
        Validity
            Not Before: Mar 25 05:12:02 2026 GMT
            Not After : Apr  1 05:12:02 2026 GMT
        Subject: CN=69c36ea3-0221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:71:7e:a2:d6:f8:ff:a3:58:8f:72:1d:0b:17:
                    f0:8a:de:ad:94:28:66:5d:4a:a0:93:07:b9:a8:0a:
                    c0:77:ce:b9:0a:9a:86:7c:5f:31:9e:92:0d:fa:64:
                    64:6a:9f:16:9a:bf:d1:a6:d7:bb:bb:ec:c7:22:27:
                    6b:f2:c0:00:0b:55:51:33:4e:3c:e6:d9:86:48:bc:
                    70:3c:2e:e0:f9:60:36:ab:27:f8:82:60:52:75:2d:
                    e6:c8:2c:c5:ec:2a:1a:73:71:f5:b7:03:32:cd:45:
                    2a:95:ee:c5:17:13:dc:c8:0f:94:a1:59:61:13:9a:
                    5e:f4:3d:8b:a0:ce:50:c2:58:6d:ae:49:5d:35:33:
                    5b:3b:d3:59:c7:9a:a6:db:84:ea:52:fe:05:ea:b2:
                    6a:11:2a:55:50:d0:21:74:e2:83:9b:76:db:a2:01:
                    98:a6:ca:89:d8:0d:93:c0:cf:94:35:d2:29:0a:08:
                    d7:b1:ae:08:8d:c4:b0:3a:a4:34:9e:ad:76:7b:b4:
                    ef:19:fa:f8:86:c1:3f:4c:b8:d4:34:62:c3:5b:a8:
                    70:37:8b:75:53:a4:6c:41:cb:a0:8c:11:37:e2:4d:
                    65:00:6f:24:37:06:1f:f2:3c:de:57:46:d8:47:88:
                    33:40:34:3a:31:e4:89:56:d4:13:74:1a:a8:59:8e:
                    17:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9D:0F:4E:32:7A:6D:61:B6:45:75:57:48:36:7E:77:23:0F:AA:FF
            X509v3 Authority Key Identifier:
                keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:9e:80:81:7f:cf:db:53:7e:44:01:38:6c:b7:22:69:7e:63:
         f6:a3:e1:93:e0:cd:b5:b4:91:6c:72:fc:df:83:60:d3:de:20:
         cd:02:84:54:f6:0f:51:4a:e1:ac:8b:37:98:f5:81:a4:33:f1:
         f3:bd:f1:0a:34:92:26:cf:32:9c:eb:b8:2c:50:e6:10:89:db:
         08:20:ba:a2:22:8d:1b:06:ec:f8:80:dd:8a:6b:45:fa:b6:ae:
         c6:39:cf:e7:28:79:25:58:7b:e8:6a:42:72:da:e9:ff:58:41:
         95:72:c8:81:11:fe:3f:2f:2f:ca:d3:60:a7:91:bb:59:94:52:
         ff:aa:11:da:76:78:c2:a8:89:c1:55:6e:10:b2:78:2e:3f:01:
         3a:62:07:af:eb:f3:e1:8f:b0:7a:08:45:9a:b8:b6:d0:1f:4b:
         7c:f5:c9:a4:48:c6:ab:18:9d:23:04:b3:b4:62:eb:60:62:b9:
         64:d2:b3:1b:e3:66:8d:17:c9:7f:18:6f:26:22:ce:2b:5e:45:
         3b:ba:4e:97:ee:76:eb:01:80:4c:f5:ae:c6:6b:ba:d4:7c:fd:
         c3:f0:f2:64:6c:19:d5:c5:c8:24:1d:ce:6d:ce:80:24:30:80:
         02:11:cc:e5:97:3a:44:bd:4d:f6:82:96:fc:e0:17:76:9e:40:
         34:88:56:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc3MjQxMTAvBgNVBAUTKEE1MUNGQjhBMjgzOERDMjNGMjg3NjQ0QTQ3MzVFRkMx
M0Q4QzMxMTMwHhcNMjYwMzI1MDUxMjAyWhcNMjYwNDAxMDUxMjAyWjAYMRYwFAYD
VQQDEw02OWMzNmVhMy0wMjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzHF+otb4/6NYj3IdCxfwit6tlChmXUqgkwe5qArAd865CpqGfF8xnpIN+mRk
ap8Wmr/Rpte7u+zHIidr8sAAC1VRM0485tmGSLxwPC7g+WA2qyf4gmBSdS3myCzF
7Coac3H1twMyzUUqle7FFxPcyA+UoVlhE5pe9D2LoM5QwlhtrkldNTNbO9NZx5qm
24TqUv4F6rJqESpVUNAhdOKDm3bbogGYpsqJ2A2TwM+UNdIpCgjXsa4IjcSwOqQ0
nq12e7TvGfr4hsE/TLjUNGLDW6hwN4t1U6RsQcugjBE34k1lAG8kNwYf8jzeV0bY
R4gzQDQ6MeSJVtQTdBqoWY4XtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPKdD04y
em1htkV1V0g2fncjD6r/MB8GA1UdIwQYMBaAFKUc+4ooONwj8odkSkc178E9jDET
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzcyNC81NkM2NzA3Njkw
NEQxMUVGQTExMDM4NjRDNEY5QUUwMi9wUno3aWlnNDNDUHloMlJLUnpYdndUMk1N
Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BSejdpaWc0M0NQeWgyUktSelh2d1QyTU1STS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzcyNC81NkM2NzA3NjkwNEQxMUVGQTExMDM4NjRDNEY5QUUwMi9wUno3aWlnNDND
UHloMlJLUnpYdndUMk1NUk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1p6AgX/P21N+RAE4bLciaX5j9qPhk+DNtbSRbHL834Ng094gzQKEVPYPUUrh
rIs3mPWBpDPx873xCjSSJs8ynOu4LFDmEInbCCC6oiKNGwbs+IDdimtF+rauxjnP
5yh5JVh76GpCctrp/1hBlXLIgRH+Py8vytNgp5G7WZRS/6oR2nZ4wqiJwVVuELJ4
Lj8BOmIHr+vz4Y+weghFmri20B9LfPXJpEjGqxidIwSztGLrYGK5ZNKzG+NmjRfJ
fxhvJiLOK15FO7pOl+526wGATPWuxmu61Hz9w/DyZGwZ1cXIJB3Obc6AJDCAAhHM
5Zc6RL1N9oKW/OAXdp5ANIhWJg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:26:21 2026 by rpki-client