Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
File:                     -_-IremTZomzJBRb_mO3TVeqrAs.mft (raw, json)
Hash identifier:          FPJ12rQYiJlrXuLXmRiDzWnvyGClF3APN0H88AASEqE=
Subject key identifier:   48:FF:08:15:07:F0:AC:E8:96:E0:F4:95:D2:8C:65:0F:2C:2D:8D:E0
Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B
Certificate issuer:       /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
Manifest number:          011D
Signing time:             Wed 25 Mar 2026 05:05:02 +0000
Manifest this update:     Wed 25 Mar 2026 05:05:02 +0000
Manifest next update:     Wed 01 Apr 2026 05:05:02 +0000
Files and hashes:         1: -_-IremTZomzJBRb_mO3TVeqrAs.crl (hash: NzVLLYuyL59acbvLZgTCNgnVbyg2BgaLrQ/KBhTQDUQ=)
                          2: C276060084F011EF9D52F573C4F9AE02.roa (hash: bXHiUY7HCBEaQA+nusZ6DmYQdogq8krgBrFJi6+mw0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl
                          rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F525, serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
        Validity
            Not Before: Mar 25 05:05:02 2026 GMT
            Not After : Apr  1 05:05:02 2026 GMT
        Subject: CN=69c36cfe-fd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:10:96:f1:2c:20:34:98:3d:f0:cd:20:34:c6:
                    79:c5:b9:44:c4:e8:49:cf:d2:bb:43:d1:d4:92:4a:
                    85:05:3e:54:5f:d8:de:d4:b3:6b:e4:84:9e:2d:24:
                    47:74:e2:15:58:33:cd:56:6b:01:34:5f:d8:92:4a:
                    29:40:99:2b:9c:ec:e1:e3:84:66:2b:c8:f4:a3:f7:
                    b8:b3:84:a9:37:94:95:71:20:c0:b1:7b:cc:34:3c:
                    14:e1:5b:a9:75:70:0c:50:15:58:35:47:d5:60:3a:
                    a6:c3:a1:52:9e:05:83:64:a6:4e:0d:6c:c9:15:67:
                    80:0e:9b:b3:44:6b:85:a6:19:43:8c:ad:74:25:3a:
                    26:70:29:86:33:c3:ff:b6:ba:c8:45:79:1b:ad:e5:
                    f8:a0:f9:86:cc:8f:fc:17:b3:8e:4d:62:3e:70:ce:
                    56:00:c4:ee:0a:52:30:cb:b3:26:99:11:f4:20:3b:
                    77:e7:e2:8e:d4:9c:96:ad:30:7a:19:30:40:55:0d:
                    28:99:1f:0f:6e:9d:b1:06:1f:82:6d:e2:a9:4c:4b:
                    c8:82:1d:46:ce:5b:01:c8:50:7b:44:3c:b3:a6:48:
                    f2:66:c0:1d:a0:d5:39:e0:5c:4f:73:9c:30:c5:c6:
                    7f:a9:eb:c3:21:c5:8f:eb:2b:02:89:05:ed:53:fb:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FF:08:15:07:F0:AC:E8:96:E0:F4:95:D2:8C:65:0F:2C:2D:8D:E0
            X509v3 Authority Key Identifier:
                keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d9:bb:8e:1e:b8:6c:ad:d6:c3:de:fc:90:7d:ce:93:c0:d0:
         08:ae:0f:6a:20:09:93:57:1f:3e:84:34:5f:28:d3:0c:ae:a4:
         eb:7b:8d:61:88:af:4d:09:0e:46:73:a1:78:86:90:6d:3f:e2:
         ad:d8:cc:b0:82:f4:a7:f4:e2:c5:b4:b2:ef:19:cb:5c:02:4f:
         24:60:25:b9:ab:53:3c:38:c5:d6:dd:41:65:fd:e7:4d:c6:05:
         26:74:41:d6:d9:11:63:be:9b:b1:95:0a:45:ae:95:24:ce:94:
         54:3f:80:08:f7:0a:83:a8:bc:5f:26:93:a2:0a:eb:d7:68:dc:
         b9:48:17:b8:80:43:87:14:ae:fd:a6:46:04:7d:02:84:9b:7b:
         c5:db:aa:3d:65:d0:28:eb:18:da:9d:6a:a8:7b:19:e5:22:62:
         10:0b:7d:c9:1c:d8:b7:b3:22:9a:4e:f8:fd:4d:5e:d0:53:cd:
         4f:4d:78:eb:6c:d8:f2:9d:cc:46:86:1f:ac:ec:93:fa:03:8b:
         a7:34:df:3e:3a:05:89:be:2e:5e:d8:77:68:a8:42:3f:35:85:
         6c:3b:c5:60:9d:d8:4c:90:69:36:69:b4:48:bc:56:33:d4:c5:
         39:16:eb:c9:b6:82:c2:7c:da:52:42:96:56:be:7d:e3:ec:eb:
         59:67:14:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY1MjUxMTAvBgNVBAUTKEZCRkY4OEFERTk5MzY2ODlCMzI0MTQ1QkZFNjNCNzRE
NTdBQUFDMEIwHhcNMjYwMzI1MDUwNTAyWhcNMjYwNDAxMDUwNTAyWjAYMRYwFAYD
VQQDEw02OWMzNmNmZS1mZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAghCW8SwgNJg98M0gNMZ5xblExOhJz9K7Q9HUkkqFBT5UX9je1LNr5ISeLSRH
dOIVWDPNVmsBNF/YkkopQJkrnOzh44RmK8j0o/e4s4SpN5SVcSDAsXvMNDwU4Vup
dXAMUBVYNUfVYDqmw6FSngWDZKZODWzJFWeADpuzRGuFphlDjK10JTomcCmGM8P/
trrIRXkbreX4oPmGzI/8F7OOTWI+cM5WAMTuClIwy7MmmRH0IDt35+KO1JyWrTB6
GTBAVQ0omR8Pbp2xBh+CbeKpTEvIgh1GzlsByFB7RDyzpkjyZsAdoNU54FxPc5ww
xcZ/qevDIcWP6ysCiQXtU/tTrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEj/CBUH
8KzoluD0ldKMZQ8sLY3gMB8GA1UdIwQYMBaAFPv/iK3pk2aJsyQUW/5jt01XqqwL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUyNS9FQTAyMzQxQzg0
RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpvbXpKQlJiX21PM1RWZXFy
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1fLUlyZW1UWm9tekpCUmJfbU8zVFZlcXJBcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjUyNS9FQTAyMzQxQzg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi8tXy1JcmVtVFpv
bXpKQlJiX21PM1RWZXFyQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj9m7jh64bK3Ww978kH3Ok8DQCK4PaiAJk1cfPoQ0XyjTDK6k63uNYYivTQkO
RnOheIaQbT/irdjMsIL0p/TixbSy7xnLXAJPJGAluatTPDjF1t1BZf3nTcYFJnRB
1tkRY76bsZUKRa6VJM6UVD+ACPcKg6i8XyaTogrr12jcuUgXuIBDhxSu/aZGBH0C
hJt7xduqPWXQKOsY2p1qqHsZ5SJiEAt9yRzYt7Mimk74/U1e0FPNT01462zY8p3M
RoYfrOyT+gOLpzTfPjoFib4uXth3aKhCPzWFbDvFYJ3YTJBpNmm0SLxWM9TFORbr
ybaCwnzaUkKWVr594+zrWWcUqw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:52 2026 by rpki-client