Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
File:                     C71wWJDyeOHVk-mKdPA0cPeU_lw.mft (raw, json)
Hash identifier:          WRVymVx22Eizu8E2u0oGnwu4om775OzsYEUauCyXUUk=
Subject key identifier:   2E:E4:1A:86:D2:68:52:45:6D:2D:83:3B:4B:D8:B2:A0:08:D3:0A:70
Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C
Certificate issuer:       /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C
Certificate serial:       0B50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
Manifest number:          0B40
Signing time:             Tue 24 Mar 2026 19:04:47 +0000
Manifest this update:     Tue 24 Mar 2026 19:04:46 +0000
Manifest next update:     Tue 31 Mar 2026 19:04:46 +0000
Files and hashes:         1: C71wWJDyeOHVk-mKdPA0cPeU_lw.crl (hash: 5tg1hq8CQJFUmVJpLufwnMwCXuW2VGuSglW56MHAhpo=)
                          2: FF723568A0F311EBA4E4D83CC4F9AE02.roa (hash: SKkZ/Ak/jtfzgFLt/Fyo82eB7aX3RvyLcyTDoF3Pz7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl
                          rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2896 (0xb50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5E1F, serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C
        Validity
            Not Before: Mar 24 19:04:46 2026 GMT
            Not After : Mar 31 19:04:46 2026 GMT
        Subject: CN=69c2e04f-6995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:9f:e6:4d:ff:cd:a2:40:eb:11:c1:8f:57:
                    70:fd:64:27:d2:ca:75:a4:32:b7:cb:e8:97:37:2e:
                    fd:f8:d3:36:a7:6c:35:64:fa:77:67:1d:b3:ef:e6:
                    9e:19:23:c6:cf:fd:db:f8:7f:82:42:26:d6:08:51:
                    e5:2b:c0:11:c9:c1:5b:7d:db:18:62:2d:84:41:e1:
                    c3:4f:58:c1:75:f1:63:24:0f:08:b0:fc:08:67:af:
                    c3:e3:6d:c4:f2:42:bf:18:37:32:b9:95:84:e8:24:
                    25:49:93:32:80:8f:c2:ed:b3:12:6a:71:9f:33:fc:
                    00:99:57:af:61:d3:ce:0e:86:d5:46:68:17:7f:af:
                    61:aa:6f:e1:8b:ec:43:ae:f9:dd:45:53:19:f4:aa:
                    69:26:88:2d:db:91:1e:5d:3b:f7:d5:71:6b:a1:38:
                    e8:26:48:9c:41:ed:3f:27:41:bc:ed:66:ea:16:57:
                    bc:30:b3:a5:17:f2:19:95:47:6e:a4:0e:3b:d7:dc:
                    65:dd:30:93:3a:40:26:6b:6d:e8:b1:ac:6d:a6:a1:
                    a6:1f:65:86:cd:2c:5d:fa:87:b7:32:c3:00:28:9b:
                    cb:e6:40:44:e0:4b:63:ba:56:5a:2f:29:41:49:83:
                    24:76:00:3b:a2:07:9f:64:07:d0:f3:c7:24:dd:c7:
                    3b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E4:1A:86:D2:68:52:45:6D:2D:83:3B:4B:D8:B2:A0:08:D3:0A:70
            X509v3 Authority Key Identifier:
                keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7d:70:f8:42:2f:e2:5e:1d:2f:9e:9e:67:0c:c7:45:e9:2a:
         39:f3:3f:0d:b7:2c:b6:64:06:15:d4:ea:3b:20:3f:7f:58:46:
         0a:7e:7a:8a:62:c5:94:f3:cf:ae:02:c1:b4:43:9a:d3:ae:48:
         5a:4b:8e:9a:0d:42:e1:de:51:0c:9d:83:7f:4a:e0:da:26:cc:
         84:15:fc:92:37:cc:21:81:7f:2c:64:fd:8f:a3:b8:05:fe:e6:
         85:ad:9b:5f:f8:d1:f3:e5:5d:da:0c:cb:e5:82:3e:64:3a:12:
         a6:4c:4e:d4:6f:d6:71:4a:5f:d8:d7:6f:31:d4:f8:c7:6d:23:
         01:1d:1f:cf:4d:16:08:92:7a:c9:07:54:02:b9:66:76:6e:1d:
         b5:e7:d3:11:a4:28:02:12:45:fd:7a:66:97:c2:d1:d6:51:1f:
         5f:ec:26:c8:91:b6:44:92:0a:35:b6:76:5d:9e:27:68:c6:42:
         e5:d6:bf:85:c9:a3:b1:2d:84:85:71:bf:06:10:26:02:5e:77:
         ac:4e:c6:72:62:d8:20:2e:33:35:97:28:91:c5:3b:de:d4:22:
         a4:12:9a:ed:c4:3f:5a:f8:e4:2c:5b:d7:3f:18:f2:31:3c:79:
         8e:a4:0b:ed:68:7b:dd:53:19:66:fd:97:00:5e:aa:5d:d0:50:
         d1:79:cc:d9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVFMUYxMTAvBgNVBAUTKDBCQkQ3MDU4OTBGMjc4RTFENTkzRTk4QTc0RjAzNDcw
Rjc5NEZFNUMwHhcNMjYwMzI0MTkwNDQ2WhcNMjYwMzMxMTkwNDQ2WjAYMRYwFAYD
VQQDEw02OWMyZTA0Zi02OTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuJmf5k3/zaJA6xHBj1dw/WQn0sp1pDK3y+iXNy79+NM2p2w1ZPp3Zx2z7+ae
GSPGz/3b+H+CQibWCFHlK8ARycFbfdsYYi2EQeHDT1jBdfFjJA8IsPwIZ6/D423E
8kK/GDcyuZWE6CQlSZMygI/C7bMSanGfM/wAmVevYdPODobVRmgXf69hqm/hi+xD
rvndRVMZ9KppJogt25EeXTv31XFroTjoJkicQe0/J0G87WbqFle8MLOlF/IZlUdu
pA4719xl3TCTOkAma23osaxtpqGmH2WGzSxd+oe3MsMAKJvL5kBE4EtjulZaLylB
SYMkdgA7ogefZAfQ88ck3cc7ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7kGobS
aFJFbS2DO0vYsqAI0wpwMB8GA1UdIwQYMBaAFAu9cFiQ8njh1ZPpinTwNHD3lP5c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUUxRi8wMUY3RDZDQTU4
NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVPSFZrLW1LZFBBMGNQZVVf
bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M3MXdXSkR5ZU9IVmstbUtkUEEwY1BlVV9sdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUUxRi8wMUY3RDZDQTU4NjIxMUVBODE0RDg0NTlDNEY5QUUwMi9DNzF3V0pEeWVP
SFZrLW1LZFBBMGNQZVVfbHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOX1w+EIv4l4dL56eZwzHRekqOfM/DbcstmQGFdTqOyA/f1hGCn56imLFlPPP
rgLBtEOa065IWkuOmg1C4d5RDJ2Df0rg2ibMhBX8kjfMIYF/LGT9j6O4Bf7mha2b
X/jR8+Vd2gzL5YI+ZDoSpkxO1G/WcUpf2NdvMdT4x20jAR0fz00WCJJ6yQdUArlm
dm4dtefTEaQoAhJF/Xpml8LR1lEfX+wmyJG2RJIKNbZ2XZ4naMZC5da/hcmjsS2E
hXG/BhAmAl53rE7GcmLYIC4zNZcokcU73tQipBKa7cQ/WvjkLFvXPxjyMTx5jqQL
7Wh73VMZZv2XAF6qXdBQ0XnM2Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:25 2026 by rpki-client