Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
File:                     0hsNWsWvkZAPUK2WADMT5R7WChA.mft (raw, json)
Hash identifier:          o82dMZyqCrxEFQxrNlfup36NOIh/GeE6AaH9Nb4dFCw=
Subject key identifier:   02:E1:24:B5:F2:5C:2A:B8:68:51:90:17:B4:C1:F5:A4:F7:E3:71:95
Authority key identifier: D2:1B:0D:5A:C5:AF:91:90:0F:50:AD:96:00:33:13:E5:1E:D6:0A:10
Certificate issuer:       /CN=A91A0E9D/serialNumber=D21B0D5AC5AF91900F50AD96003313E51ED60A10
Certificate serial:       0124
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
Manifest number:          0114
Signing time:             Fri 27 Mar 2026 05:32:58 +0000
Manifest this update:     Fri 27 Mar 2026 05:32:58 +0000
Manifest next update:     Fri 03 Apr 2026 05:32:58 +0000
Files and hashes:         1: 0hsNWsWvkZAPUK2WADMT5R7WChA.crl (hash: mPpxEFgq6DH2pHOhba+LXrWTtVHEvJqIUNZrUxUAjxo=)
                          2: 3996C94896D211EF924C486FC4F9AE02.roa (hash: RSWSsqKVGFqnc5MjQ5V0wfdqY1cc/uC9LzB1g38vtcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.crl
                          rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 05:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0E9D, serialNumber=D21B0D5AC5AF91900F50AD96003313E51ED60A10
        Validity
            Not Before: Mar 27 05:32:58 2026 GMT
            Not After : Apr  3 05:32:58 2026 GMT
        Subject: CN=69c6168a-8991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:99:64:ff:ab:d5:89:c8:95:a6:45:8d:d0:
                    24:9d:e7:ef:75:73:04:09:6a:f7:21:04:bc:8f:12:
                    d3:11:1c:b3:36:64:b1:ed:e7:0b:b3:d0:6d:05:5d:
                    eb:a6:63:f9:da:d4:6e:ec:d9:a3:32:4c:5e:be:c6:
                    7f:4e:10:f6:2d:15:d1:05:af:a9:fc:6d:b8:b7:9d:
                    a2:eb:87:92:41:af:3c:03:32:53:2d:83:6a:c2:81:
                    d0:72:2b:a0:6f:90:8c:0c:8a:d8:03:5b:2e:eb:cb:
                    36:56:40:09:13:51:19:04:ad:ba:03:19:e8:cb:04:
                    6c:33:0b:c5:96:de:af:aa:f4:a6:96:45:59:22:93:
                    61:16:f1:ba:c1:e5:0b:0b:55:2e:fc:6d:5b:7e:56:
                    37:72:fa:8b:3c:1a:0e:b0:ce:b3:95:c7:7e:c2:91:
                    ea:5e:57:47:e9:6a:55:11:e7:62:b9:9e:1a:55:c3:
                    89:f0:99:1c:90:3a:e2:88:27:ef:5e:da:f4:20:6f:
                    77:39:1f:cd:38:40:fe:80:6f:09:df:4e:18:09:8a:
                    9c:bd:e2:29:72:fc:6a:62:a5:27:90:d7:6f:ee:c3:
                    06:81:0b:db:f0:a2:0f:c5:0c:27:4e:7e:51:dd:fd:
                    61:c1:26:3c:80:70:81:c4:7f:09:32:c8:5f:99:74:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E1:24:B5:F2:5C:2A:B8:68:51:90:17:B4:C1:F5:A4:F7:E3:71:95
            X509v3 Authority Key Identifier:
                keyid:D2:1B:0D:5A:C5:AF:91:90:0F:50:AD:96:00:33:13:E5:1E:D6:0A:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hsNWsWvkZAPUK2WADMT5R7WChA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0E9D/9569ADB495DB11EFA4E2FB45C4F9AE02/0hsNWsWvkZAPUK2WADMT5R7WChA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2e:15:f9:c8:dc:e7:af:4b:13:8b:23:22:49:4d:85:a0:8f:
         84:42:c0:d3:58:dc:23:21:ae:f6:b4:3a:59:8c:71:03:ff:cf:
         3e:d7:38:07:3d:1d:67:e7:19:25:5c:35:b5:a6:98:4a:a2:45:
         70:bd:ff:e9:0d:03:75:ba:b5:df:69:b5:9b:cd:42:82:83:c8:
         07:1f:64:fb:d9:63:1b:7b:bf:67:a3:f7:40:94:cf:e3:60:15:
         27:03:7a:81:eb:28:1b:fa:32:52:e0:b2:99:d9:75:4a:c9:56:
         24:eb:1a:d5:f3:2b:19:ee:06:c3:ab:ee:69:82:07:de:24:7c:
         4a:4c:a8:b4:7b:80:35:6d:73:1e:87:bb:8f:26:ad:7c:42:e6:
         c9:88:c7:5c:7f:31:73:d3:74:02:3e:5c:b2:d4:b7:e1:35:0e:
         9c:56:78:6d:8e:f9:86:ce:8e:66:4d:a6:fa:14:9e:c1:85:2f:
         43:26:8e:4b:2d:7a:b5:1c:df:1c:4d:f4:74:7c:cc:64:80:27:
         09:76:89:79:ec:dc:bb:e4:4a:a2:08:44:02:e6:8c:04:0b:d3:
         93:3f:61:3d:8f:d5:e1:35:5f:f5:21:2c:13:87:e4:f6:98:24:
         b1:b8:ba:5d:85:67:e9:1f:8e:e1:73:b2:17:43:bd:d9:1a:41:
         f6:ba:bb:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBFOUQxMTAvBgNVBAUTKEQyMUIwRDVBQzVBRjkxOTAwRjUwQUQ5NjAwMzMxM0U1
MUVENjBBMTAwHhcNMjYwMzI3MDUzMjU4WhcNMjYwNDAzMDUzMjU4WjAYMRYwFAYD
VQQDEw02OWM2MTY4YS04OTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu2KZZP+r1YnIlaZFjdAknefvdXMECWr3IQS8jxLTERyzNmSx7ecLs9BtBV3r
pmP52tRu7NmjMkxevsZ/ThD2LRXRBa+p/G24t52i64eSQa88AzJTLYNqwoHQciug
b5CMDIrYA1su68s2VkAJE1EZBK26AxnoywRsMwvFlt6vqvSmlkVZIpNhFvG6weUL
C1Uu/G1bflY3cvqLPBoOsM6zlcd+wpHqXldH6WpVEediuZ4aVcOJ8JkckDriiCfv
Xtr0IG93OR/NOED+gG8J304YCYqcveIpcvxqYqUnkNdv7sMGgQvb8KIPxQwnTn5R
3f1hwSY8gHCBxH8JMshfmXSQZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALhJLXy
XCq4aFGQF7TB9aT343GVMB8GA1UdIwQYMBaAFNIbDVrFr5GQD1CtlgAzE+Ue1goQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEU5RC85NTY5QURCNDk1
REIxMUVGQTRFMkZCNDVDNEY5QUUwMi8waHNOV3NXdmtaQVBVSzJXQURNVDVSN1dD
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBoc05Xc1d2a1pBUFVLMldBRE1UNVI3V0NoQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEU5RC85NTY5QURCNDk1REIxMUVGQTRFMkZCNDVDNEY5QUUwMi8waHNOV3NXdmta
QVBVSzJXQURNVDVSN1dDaEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGy4V+cjc569LE4sjIklNhaCPhELA01jcIyGu9rQ6WYxxA//PPtc4Bz0dZ+cZ
JVw1taaYSqJFcL3/6Q0Ddbq132m1m81CgoPIBx9k+9ljG3u/Z6P3QJTP42AVJwN6
gesoG/oyUuCymdl1SslWJOsa1fMrGe4Gw6vuaYIH3iR8SkyotHuANW1zHoe7jyat
fELmyYjHXH8xc9N0Aj5cstS34TUOnFZ4bY75hs6OZk2m+hSewYUvQyaOSy16tRzf
HE30dHzMZIAnCXaJeezcu+RKoghEAuaMBAvTkz9hPY/V4TVf9SEsE4fk9pgksbi6
XYVn6R+O4XOyF0O92RpB9rq77w==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:38 2026 by rpki-client