Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
File:                     AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json)
Hash identifier:          wl+dCCz+3rPcBQ5us7NgcYoy39AP8fpVlYGof3hlE5c=
Subject key identifier:   60:F1:41:85:E1:46:61:E6:22:F6:9B:AC:F7:A6:36:00:C9:EC:F1:52
Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
Certificate issuer:       /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Certificate serial:       0296
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
Manifest number:          027A
Signing time:             Wed 25 Mar 2026 01:30:19 +0000
Manifest this update:     Wed 25 Mar 2026 01:30:18 +0000
Manifest next update:     Wed 01 Apr 2026 01:30:18 +0000
Files and hashes:         1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: H+8y/Adideh89TOBJ3bJwpN3+1mlMylMGfwAdnEZbFU=)
                          2: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: CpnchC9OahhdANlSfhFvVdfnSg3biYPUOpoScQBe9aw=)
                          3: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: 6uwKNJvEHKpPiCqmXc5jxVWJ0Ysu4SZXJVBzZPWGq0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
                          rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
        Validity
            Not Before: Mar 25 01:30:18 2026 GMT
            Not After : Apr  1 01:30:18 2026 GMT
        Subject: CN=69c33aaa-605e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:74:1c:8f:66:7f:a0:dd:2d:bc:dc:6b:68:cf:
                    a5:79:8f:df:bb:67:d0:47:87:0b:83:09:03:91:49:
                    cf:ba:fd:ba:41:8d:d9:6d:93:ee:4a:87:68:b1:a1:
                    3a:a9:d1:53:a7:79:70:60:73:2d:84:f8:f1:3a:97:
                    43:0b:11:79:35:08:e6:f6:f5:9f:14:7d:f1:06:8c:
                    7c:bb:26:60:4a:69:6b:44:02:42:18:98:bc:b0:a1:
                    4f:d7:00:24:0c:0b:5c:de:95:e6:70:ee:76:3b:16:
                    23:d8:e9:27:b0:73:a0:90:60:9c:83:a7:47:ef:a6:
                    66:7a:f7:6a:c6:d5:57:3b:18:2c:a1:ef:83:dd:1e:
                    e4:bb:43:e8:44:2e:a7:01:7d:92:3a:c8:5c:18:fb:
                    f2:41:b9:ac:31:09:1e:52:fd:ca:bf:15:9c:80:18:
                    88:6d:5b:a9:46:ed:8e:da:54:17:98:26:1a:ff:e3:
                    35:f1:fd:04:dd:36:fe:56:0e:e7:7d:02:26:58:7b:
                    45:d1:f8:13:bb:46:80:31:e6:5d:37:bb:e4:65:a4:
                    61:76:8f:64:07:44:90:9b:85:b2:19:13:1f:24:1e:
                    9d:d1:9d:79:e7:db:80:f0:08:81:89:72:e4:7b:3f:
                    bb:51:7d:6d:66:22:c5:3b:67:d5:76:64:0f:91:79:
                    2c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F1:41:85:E1:46:61:E6:22:F6:9B:AC:F7:A6:36:00:C9:EC:F1:52
            X509v3 Authority Key Identifier:
                keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2c:a0:05:09:75:5e:c4:a0:11:d2:46:1a:af:a3:c6:82:fc:
         a6:af:da:69:e2:54:03:c3:73:19:22:ef:cf:06:05:d7:92:58:
         35:25:40:85:c8:36:f3:73:5a:f3:2f:ee:9a:7f:5e:1b:d3:cc:
         7f:3d:34:79:46:ea:81:87:b0:d4:ec:3b:2d:17:26:cb:e1:48:
         64:03:c1:af:fb:ce:36:4f:88:21:46:de:84:4d:54:0b:96:76:
         56:0b:d7:1d:f7:b3:3b:e1:3d:9b:31:28:3f:63:40:26:57:a1:
         5f:eb:e6:d3:e3:b7:09:f1:53:3a:d3:73:41:6a:ec:5c:f6:78:
         e8:36:15:f0:52:29:61:98:6d:aa:45:1a:fd:08:c4:a0:e8:4d:
         07:7f:9c:13:38:61:5b:28:00:6d:c1:6f:cc:36:bd:3e:db:1b:
         5b:8c:83:ef:a2:75:9c:bb:55:80:e9:65:2f:a6:4d:3f:ed:44:
         2b:45:61:d9:a1:b4:3e:bc:1a:20:dc:f9:7a:ea:0c:2a:60:f8:
         f7:d5:7e:ba:f3:09:48:9f:6a:da:e4:88:ac:14:90:63:cb:d0:
         40:1a:3b:9f:36:c5:df:65:08:38:25:a7:76:b6:4a:a7:82:1c:
         e9:e1:11:e5:4f:bf:a9:ec:a5:05:6a:de:9f:e8:0f:f4:c0:fe:
         cc:71:e0:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4
QkQ2QUQ4MUYwHhcNMjYwMzI1MDEzMDE4WhcNMjYwNDAxMDEzMDE4WjAYMRYwFAYD
VQQDEw02OWMzM2FhYS02MDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1HQcj2Z/oN0tvNxraM+leY/fu2fQR4cLgwkDkUnPuv26QY3ZbZPuSodosaE6
qdFTp3lwYHMthPjxOpdDCxF5NQjm9vWfFH3xBox8uyZgSmlrRAJCGJi8sKFP1wAk
DAtc3pXmcO52OxYj2OknsHOgkGCcg6dH76ZmevdqxtVXOxgsoe+D3R7ku0PoRC6n
AX2SOshcGPvyQbmsMQkeUv3KvxWcgBiIbVupRu2O2lQXmCYa/+M18f0E3Tb+Vg7n
fQImWHtF0fgTu0aAMeZdN7vkZaRhdo9kB0SQm4WyGRMfJB6d0Z1559uA8AiBiXLk
ez+7UX1tZiLFO2fVdmQPkXks9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGDxQYXh
RmHmIvabrPemNgDJ7PFSMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3
RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx
b2gxZzR0d3lxYmlMMXEyQjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfSygBQl1XsSgEdJGGq+jxoL8pq/aaeJUA8NzGSLvzwYF15JYNSVAhcg283Na
8y/umn9eG9PMfz00eUbqgYew1Ow7LRcmy+FIZAPBr/vONk+IIUbehE1UC5Z2VgvX
HfezO+E9mzEoP2NAJlehX+vm0+O3CfFTOtNzQWrsXPZ46DYV8FIpYZhtqkUa/QjE
oOhNB3+cEzhhWygAbcFvzDa9PtsbW4yD76J1nLtVgOllL6ZNP+1EK0Vh2aG0Prwa
INz5euoMKmD499V+uvMJSJ9q2uSIrBSQY8vQQBo7nzbF32UIOCWndrZKp4Ic6eER
5U+/qeylBWren+gP9MD+zHHgZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:57 2026 by rpki-client