Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
File:                     pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft (raw, json)
Hash identifier:          r3GT4Yzjp1zQFJz8aEBvxyYZyYf546Xqe+mzhDpSvas=
Subject key identifier:   E9:0D:85:4C:3B:EA:03:BE:7E:62:F1:2B:BE:6D:6A:96:BA:4D:AF:55
Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD
Certificate issuer:       /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
Manifest number:          CC
Signing time:             Wed 25 Mar 2026 06:04:13 +0000
Manifest this update:     Wed 25 Mar 2026 06:04:12 +0000
Manifest next update:     Wed 01 Apr 2026 06:04:12 +0000
Files and hashes:         1: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl (hash: xBOhNV3MMvsyWP4P7qAwRq6beQnhtgxeoI4qU1fNwH8=)
                          2: B3E4D03621B111F089CE216DC4F9AE02.roa (hash: VaEKIuiVVa+34T0EyOyaQnSXrGSJwgYFoH12QYWKH4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl
                          rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
        Validity
            Not Before: Mar 25 06:04:12 2026 GMT
            Not After : Apr  1 06:04:12 2026 GMT
        Subject: CN=69c37add-146c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:43:56:4b:b1:a7:8f:3e:b2:d7:08:63:68:
                    5b:9c:86:4b:fc:68:89:57:c7:40:1f:f3:f3:c3:09:
                    af:a3:6a:ec:79:86:a6:33:23:7b:f1:bf:75:ef:5a:
                    4d:fd:5c:bd:09:33:ff:73:2b:5d:00:c9:a8:ad:b0:
                    20:e2:cb:91:0f:c7:f5:25:24:24:a5:94:0f:48:53:
                    b8:53:36:6d:19:34:62:03:2e:f9:32:11:f6:10:3a:
                    c0:55:7d:5d:4e:b9:9a:26:09:7c:f8:14:8c:7b:25:
                    5d:5d:16:20:ea:3b:00:7b:ec:ef:4c:b8:b7:ec:98:
                    ab:3f:d7:8a:f1:42:ec:a5:dc:b3:3b:4e:56:fb:29:
                    45:9e:37:f1:86:54:cd:1d:e3:5c:b1:4c:50:b2:b8:
                    b5:19:27:c6:e5:88:f8:d5:dd:e5:d9:3f:45:69:f7:
                    b6:eb:ca:28:a0:a3:be:ab:e2:08:7b:f7:47:1e:3a:
                    c8:5f:ed:62:b9:29:d9:7c:45:9c:7a:d7:84:f5:2a:
                    ff:99:35:32:90:5d:ab:9c:34:b2:b9:02:c5:12:03:
                    d5:5e:65:c5:c3:de:bb:bd:e7:99:67:b3:ff:bb:18:
                    9f:45:f3:f8:6a:ff:fa:5b:07:ad:e2:92:d7:83:32:
                    a6:0b:c7:96:ed:6c:14:2f:51:a5:1b:57:cf:4c:9c:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0D:85:4C:3B:EA:03:BE:7E:62:F1:2B:BE:6D:6A:96:BA:4D:AF:55
            X509v3 Authority Key Identifier:
                keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:cd:2f:f4:e4:be:1d:4d:26:83:97:93:44:66:0b:58:b4:83:
         19:38:ce:74:90:a9:3f:9b:10:20:75:a2:31:24:60:cd:6d:78:
         76:d4:86:8e:e2:b4:4c:d9:4a:33:3f:2d:18:22:ad:11:ed:bf:
         25:bf:d2:42:f4:77:95:34:d3:00:ff:02:1f:39:e9:91:60:5e:
         5b:5a:07:ee:64:5a:57:5b:a7:1e:bb:6e:89:6f:f4:93:d7:0e:
         5f:7c:6e:93:3e:14:cd:c0:69:93:14:59:c0:32:31:da:be:58:
         97:8a:d4:f9:d9:11:66:e4:ee:ed:4c:f2:ba:94:b9:c4:ab:bd:
         e5:ee:bb:b2:2c:83:69:87:3a:08:dd:9d:ad:88:99:9c:d7:83:
         3c:64:06:04:5c:6f:dd:5e:74:c5:05:a2:c0:59:a7:e9:c1:6d:
         c7:88:a5:d7:17:bd:6b:f8:ca:55:a0:a5:b1:18:21:78:d6:b5:
         95:3d:65:ee:81:f0:f5:b2:3a:95:ff:50:64:28:2d:4c:ab:b4:
         d3:16:70:b3:50:3e:6c:63:4d:ff:55:45:7b:17:93:a5:1a:6b:
         de:03:0f:3a:48:c6:dc:da:45:da:a8:92:67:2b:29:f8:5a:6a:
         15:cc:97:bf:95:4f:b9:58:c6:67:46:fd:8e:72:b9:02:21:e0:
         29:c3:e1:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk5NUUxMTAvBgNVBAUTKEE1RUJERjk4MzkxOUM2MEY2MjJGMzRFRjhGQzUyMUU3
MjQ4OUQxQ0QwHhcNMjYwMzI1MDYwNDEyWhcNMjYwNDAxMDYwNDEyWjAYMRYwFAYD
VQQDEw02OWMzN2FkZC0xNDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwO9DVkuxp48+stcIY2hbnIZL/GiJV8dAH/Pzwwmvo2rseYamMyN78b9171pN
/Vy9CTP/cytdAMmorbAg4suRD8f1JSQkpZQPSFO4UzZtGTRiAy75MhH2EDrAVX1d
TrmaJgl8+BSMeyVdXRYg6jsAe+zvTLi37JirP9eK8ULspdyzO05W+ylFnjfxhlTN
HeNcsUxQsri1GSfG5Yj41d3l2T9Fafe268oooKO+q+IIe/dHHjrIX+1iuSnZfEWc
eteE9Sr/mTUykF2rnDSyuQLFEgPVXmXFw967veeZZ7P/uxifRfP4av/6Wwet4pLX
gzKmC8eW7WwUL1GlG1fPTJxl/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkNhUw7
6gO+fmLxK75tapa6Ta9VMB8GA1UdIwQYMBaAFKXr35g5GcYPYi8074/FIeckidHN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTk1RS8zN0JCNUY4MkZB
NjIxMUVGOTU1NTVDMEVDNEY5QUUwMi9wZXZmbURrWnhnOWlMelR2ajhVaDV5U0ow
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BldmZtRGtaeGc5aUx6VHZqOFVoNXlTSjBjMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTk1RS8zN0JCNUY4MkZBNjIxMUVGOTU1NTVDMEVDNEY5QUUwMi9wZXZmbURrWnhn
OWlMelR2ajhVaDV5U0owYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuc0v9OS+HU0mg5eTRGYLWLSDGTjOdJCpP5sQIHWiMSRgzW14dtSGjuK0TNlK
Mz8tGCKtEe2/Jb/SQvR3lTTTAP8CHznpkWBeW1oH7mRaV1unHrtuiW/0k9cOX3xu
kz4UzcBpkxRZwDIx2r5Yl4rU+dkRZuTu7UzyupS5xKu95e67siyDaYc6CN2drYiZ
nNeDPGQGBFxv3V50xQWiwFmn6cFtx4il1xe9a/jKVaClsRgheNa1lT1l7oHw9bI6
lf9QZCgtTKu00xZws1A+bGNN/1VFexeTpRpr3gMPOkjG3NpF2qiSZysp+FpqFcyX
v5VPuVjGZ0b9jnK5AiHgKcPh0w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:18 2026 by rpki-client