Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
File:                     4TxHTdRFcajO9AZpTgStasYbJWY.mft (raw, json)
Hash identifier:          KkNIsvRm925UwfpGNo83mT/bXtnVt5xYy5SYXL91FR4=
Subject key identifier:   CF:34:96:04:93:94:A2:36:FF:54:ED:6C:64:84:A1:09:53:70:16:B5
Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66
Certificate issuer:       /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
Manifest number:          01C9
Signing time:             Wed 25 Mar 2026 03:02:43 +0000
Manifest this update:     Wed 25 Mar 2026 03:02:43 +0000
Manifest next update:     Wed 01 Apr 2026 03:02:43 +0000
Files and hashes:         1: 4TxHTdRFcajO9AZpTgStasYbJWY.crl (hash: rCnA9vRMUXlh0Dcn7OTUwmPnEpYWAA7Gn8TFqdk2wFE=)
                          2: 658CF9F2721411EEAC707910C4F9AE02.roa (hash: jssMorMYPejymYdqTmmiSswslmE/j0Z7hQzYCFBsJhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl
                          rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
        Validity
            Not Before: Mar 25 03:02:43 2026 GMT
            Not After : Apr  1 03:02:43 2026 GMT
        Subject: CN=69c35053-882d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d5:79:75:0a:a4:11:14:50:3e:cc:68:49:a4:
                    d5:30:42:2b:0d:f1:1a:3d:6e:5f:57:d2:4b:d7:ef:
                    47:c6:38:49:72:27:09:d9:62:af:43:67:30:77:3e:
                    49:d8:d1:58:ae:fc:75:9b:e7:1f:be:be:29:c7:4d:
                    9a:b8:db:48:12:25:ec:d0:7c:56:d9:f8:03:e7:d0:
                    67:f7:e7:5f:0e:b3:e7:38:2b:cf:76:c0:4f:67:e8:
                    d6:56:34:88:49:98:8f:a9:d9:23:fd:9c:ef:d5:b7:
                    b6:9b:38:07:22:dc:8a:93:4f:3a:76:13:57:5b:6f:
                    a6:fa:cb:e7:1d:54:4f:a1:2e:b0:35:86:d7:56:11:
                    31:3f:4d:48:b0:7b:c0:35:db:09:09:70:40:f0:d8:
                    f1:07:54:7f:76:00:2d:11:2a:95:a5:0d:ac:44:09:
                    12:04:d9:11:cc:32:df:63:01:5c:04:2f:1f:74:9c:
                    0f:f2:1e:c8:87:ef:12:5b:a6:7a:03:57:4f:65:78:
                    ca:37:cf:ea:8c:b5:90:84:3e:2b:b0:3e:39:51:b3:
                    1a:dd:a1:2b:b4:a7:d9:b8:3b:11:bc:b7:df:f3:78:
                    8c:3b:9c:2d:cd:8e:01:87:29:65:2d:1d:aa:08:6f:
                    c5:71:f4:eb:c8:e1:a2:c8:6c:69:e0:d1:a9:b6:64:
                    8f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:34:96:04:93:94:A2:36:FF:54:ED:6C:64:84:A1:09:53:70:16:B5
            X509v3 Authority Key Identifier:
                keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:81:6c:2e:25:92:e0:69:6e:23:53:57:e2:13:7a:c6:7d:6f:
         9a:70:39:88:f0:b1:0d:f7:8c:b1:6a:06:5b:44:e0:28:c5:05:
         e9:65:be:92:73:eb:49:df:f6:56:17:75:1a:16:75:9d:1f:c2:
         2c:38:5b:d1:74:58:3b:f5:58:02:ca:9c:a4:41:a2:c7:fe:51:
         b3:74:ed:3b:84:0c:b5:d8:18:90:01:1f:06:3f:c1:3f:0e:30:
         64:87:65:6d:1c:61:af:1e:64:e4:df:68:f1:9c:de:81:dd:9e:
         ae:fa:7f:03:f8:f1:1c:df:23:93:b2:bb:67:02:1d:a6:59:bc:
         2f:2c:b7:36:23:e1:35:43:04:a4:b2:f6:20:f3:f0:ad:7a:d9:
         09:d1:4b:2d:de:0e:b5:02:08:62:50:14:52:7a:ed:1e:48:a1:
         2a:ff:0d:ca:df:46:74:69:5f:fe:74:e9:c0:fc:79:08:85:b2:
         60:5e:6f:48:c5:81:56:10:3d:7c:54:87:cf:8b:b8:ad:55:7a:
         31:6a:61:48:85:c1:5c:23:a0:a5:04:6f:e5:2e:f1:81:aa:41:
         c7:56:40:fe:99:b6:df:de:81:e6:4a:a9:14:c4:5d:f8:66:88:
         1c:d9:20:95:29:d4:f0:bf:a0:ea:84:37:5d:64:c7:7c:30:48:
         4f:0d:c7:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQzMTMxMTAvBgNVBAUTKEUxM0M0NzRERDQ0NTcxQThDRUY0MDY2OTRFMDRBRDZB
QzYxQjI1NjYwHhcNMjYwMzI1MDMwMjQzWhcNMjYwNDAxMDMwMjQzWjAYMRYwFAYD
VQQDEw02OWMzNTA1My04ODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk9V5dQqkERRQPsxoSaTVMEIrDfEaPW5fV9JL1+9HxjhJcicJ2WKvQ2cwdz5J
2NFYrvx1m+cfvr4px02auNtIEiXs0HxW2fgD59Bn9+dfDrPnOCvPdsBPZ+jWVjSI
SZiPqdkj/Zzv1be2mzgHItyKk086dhNXW2+m+svnHVRPoS6wNYbXVhExP01IsHvA
NdsJCXBA8NjxB1R/dgAtESqVpQ2sRAkSBNkRzDLfYwFcBC8fdJwP8h7Ih+8SW6Z6
A1dPZXjKN8/qjLWQhD4rsD45UbMa3aErtKfZuDsRvLff83iMO5wtzY4BhyllLR2q
CG/FcfTryOGiyGxp4NGptmSPVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM80lgST
lKI2/1TtbGSEoQlTcBa1MB8GA1UdIwQYMBaAFOE8R03URXGozvQGaU4ErWrGGyVm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDMxMy8wRjIwNzk3NjZF
RjUxMUVFODREQTY5ODJDNEY5QUUwMi80VHhIVGRSRmNhak85QVpwVGdTdGFzWWJK
V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRUeEhUZFJGY2FqTzlBWnBUZ1N0YXNZYkpXWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDMxMy8wRjIwNzk3NjZFRjUxMUVFODREQTY5ODJDNEY5QUUwMi80VHhIVGRSRmNh
ak85QVpwVGdTdGFzWWJKV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYYFsLiWS4GluI1NX4hN6xn1vmnA5iPCxDfeMsWoGW0TgKMUF6WW+knPrSd/2
Vhd1GhZ1nR/CLDhb0XRYO/VYAsqcpEGix/5Rs3TtO4QMtdgYkAEfBj/BPw4wZIdl
bRxhrx5k5N9o8Zzegd2ervp/A/jxHN8jk7K7ZwIdplm8Lyy3NiPhNUMEpLL2IPPw
rXrZCdFLLd4OtQIIYlAUUnrtHkihKv8Nyt9GdGlf/nTpwPx5CIWyYF5vSMWBVhA9
fFSHz4u4rVV6MWphSIXBXCOgpQRv5S7xgapBx1ZA/pm2396B5kqpFMRd+GaIHNkg
lSnU8L+g6oQ3XWTHfDBITw3Hhw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:50:05 2026 by rpki-client