Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
File:                     yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft (raw, json)
Hash identifier:          hD7EvtJICG+/ompqAsz0brfHaJ/dx3lUBmcQ8F2/mtA=
Subject key identifier:   E4:F5:18:E7:40:41:FA:DB:CD:FE:06:04:E6:B7:2F:B8:A0:E1:94:60
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Certificate issuer:       /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
Manifest number:          3D
Signing time:             Wed 25 Mar 2026 07:47:51 +0000
Manifest this update:     Wed 25 Mar 2026 07:47:51 +0000
Manifest next update:     Wed 01 Apr 2026 07:47:51 +0000
Files and hashes:         1: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl (hash: 4fx0Ud5j0HQ1QGOkdexVuSIyFW+fBqQEHtOSHKLlduk=)
                          2: 26CABD66DB4011F0B92C4C778FD3641D.roa (hash: 77vlGPsTBdhPDBopo52mzOrA60Cg+50amZ8+PMCNaP0=)
                          3: 32A734F4DB3411F095EFF1788DD3641D.roa (hash: ZJFUNJfKnHjBTAeh2a4+XncnrcDN+/EtwP1+QA3vw0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
                          rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
        Validity
            Not Before: Mar 25 07:47:51 2026 GMT
            Not After : Apr  1 07:47:51 2026 GMT
        Subject: CN=69c39327-7b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:7b:f2:0c:b5:44:2e:0a:ce:ee:c4:2f:c8:43:
                    18:d7:3e:1b:1a:a0:ac:ac:f6:9c:00:2d:60:61:c4:
                    a3:6e:de:96:29:3c:e0:73:d2:6a:cc:e3:63:56:3d:
                    5b:a8:c1:d3:60:65:a3:af:6e:2f:e8:ec:b9:dd:8c:
                    9a:e9:e0:45:01:74:25:ab:c0:2e:08:bd:a0:de:cf:
                    14:57:fc:b9:f4:ec:d2:24:12:92:4d:f7:dc:c5:e1:
                    16:4a:3d:e5:e0:d5:e4:80:b5:f1:77:2c:d0:21:ae:
                    a7:e9:cb:3c:90:c9:e4:77:67:7c:df:0e:0f:21:8b:
                    a7:9e:c4:70:da:60:e3:3b:16:ba:53:27:b0:a5:a8:
                    3e:2f:94:3d:27:9c:ec:d1:fa:7d:43:ac:ba:77:8a:
                    7f:52:fc:2b:0e:18:8b:14:cb:20:b8:7a:99:62:aa:
                    6f:bf:0b:7e:b1:d2:0b:1e:b2:e9:05:d7:a1:f5:1a:
                    c9:df:74:c9:2c:e8:b0:ce:b0:fe:99:a3:ac:22:17:
                    b4:ec:97:b5:2f:03:7b:22:ca:0c:70:7f:c0:2c:a0:
                    3b:cc:e2:b8:09:ca:e8:c4:df:2f:7b:73:91:a0:61:
                    6a:28:ec:4d:90:ab:9a:5b:d5:50:95:8f:b9:2f:b2:
                    7d:12:70:98:a5:50:68:35:99:69:bd:57:9e:f8:24:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F5:18:E7:40:41:FA:DB:CD:FE:06:04:E6:B7:2F:B8:A0:E1:94:60
            X509v3 Authority Key Identifier:
                keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:27:5f:c9:6f:c8:2d:6b:41:53:2b:a9:ef:8b:5a:03:68:ff:
         dd:49:78:80:79:61:7b:45:ff:06:17:1c:c9:57:ee:d4:b3:05:
         70:c8:2a:2a:1e:c6:de:92:99:41:17:9a:fd:2a:dc:d7:5a:15:
         e3:7c:30:06:44:74:c5:f1:b4:54:26:ab:ea:93:2d:e2:28:85:
         33:6d:63:0b:e1:d7:58:50:59:04:41:c5:7e:99:ab:8a:72:bd:
         59:a0:73:2f:13:9c:f2:3a:82:cd:59:9a:07:42:3b:e6:a9:75:
         8f:89:cb:83:ca:0d:1b:b0:05:bd:29:f6:9b:8a:68:14:60:b7:
         0e:8e:67:90:9b:d4:80:7d:4f:38:25:db:09:9d:db:60:57:0d:
         ab:d8:5f:fd:03:7e:8c:31:7f:23:12:3b:ed:9e:33:9f:e5:39:
         4f:23:b7:fa:aa:35:4a:66:63:5e:58:b4:95:e2:80:4f:1d:b4:
         cd:c1:08:0d:21:72:dc:eb:ff:4c:0c:d7:b7:9b:d9:38:53:f8:
         f6:09:06:fe:48:ce:1a:f2:e4:36:a7:55:cf:45:bb:3d:59:22:
         e6:45:94:4f:52:24:4a:08:b6:10:38:34:26:ae:90:bf:66:60:
         46:b4:30:39:a8:e6:c9:f7:7d:9e:12:a9:c5:9c:7e:6e:f6:4b:
         92:f7:59:1d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
Mjk0NjExMC8GA1UEBRMoQzhFQkMyNDVDMDRDRjNFNDZDRkVFNzgxMjM4N0NDMUQ1
QUQzOEU1RDAeFw0yNjAzMjUwNzQ3NTFaFw0yNjA0MDEwNzQ3NTFaMBgxFjAUBgNV
BAMTDTY5YzM5MzI3LTdiNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD6e/IMtUQuCs7uxC/IQxjXPhsaoKys9pwALWBhxKNu3pYpPOBz0mrM42NWPVuo
wdNgZaOvbi/o7LndjJrp4EUBdCWrwC4IvaDezxRX/Ln07NIkEpJN99zF4RZKPeXg
1eSAtfF3LNAhrqfpyzyQyeR3Z3zfDg8hi6eexHDaYOM7FrpTJ7ClqD4vlD0nnOzR
+n1DrLp3in9S/CsOGIsUyyC4epliqm+/C36x0gsesukF16H1GsnfdMks6LDOsP6Z
o6wiF7Tsl7UvA3siygxwf8AsoDvM4rgJyujE3y97c5GgYWoo7E2Qq5pb1VCVj7kv
sn0ScJilUGg1mWm9V574JJmrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5PUY50BB
+tvN/gYE5rcvuKDhlGAwHwYDVR0jBBgwFoAUyOvCRcBM8+Rs/ueBI4fMHVrTjl0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOTQ2L0FDRDRGQjVFREIz
MzExRjBBMkNFNTM2ODhDRDM2NDFEL3lPdkNSY0JNOC1Sc191ZUJJNGZNSFZyVGps
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIveU92Q1JjQk04LVJzX3VlQkk0Zk1IVnJUamwwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy
OTQ2L0FDRDRGQjVFREIzMzExRjBBMkNFNTM2ODhDRDM2NDFEL3lPdkNSY0JNOC1S
c191ZUJJNGZNSFZyVGpsMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAgJ1/Jb8gta0FTK6nvi1oDaP/dSXiAeWF7Rf8GFxzJV+7UswVwyCoqHsbekplB
F5r9KtzXWhXjfDAGRHTF8bRUJqvqky3iKIUzbWML4ddYUFkEQcV+mauKcr1ZoHMv
E5zyOoLNWZoHQjvmqXWPicuDyg0bsAW9KfabimgUYLcOjmeQm9SAfU84JdsJndtg
Vw2r2F/9A36MMX8jEjvtnjOf5TlPI7f6qjVKZmNeWLSV4oBPHbTNwQgNIXLc6/9M
DNe3m9k4U/j2CQb+SM4a8uQ2p1XPRbs9WSLmRZRPUiRKCLYQODQmrpC/ZmBGtDA5
qObJ932eEqnFnH5u9kuS91kd
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:37 2026 by rpki-client