Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
File:                     elR0EjxUiBfiXzSEzCa2CwZBvWk.mft (raw, json)
Hash identifier:          JMEhF93NUC/is+bwoRge0fDnULHhxIlZaQU2ZMpAQdc=
Subject key identifier:   CF:C8:98:DC:2D:6A:3B:66:7A:36:E5:31:E1:56:28:7E:D7:6B:28:C3
Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69
Certificate issuer:       /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69
Certificate serial:       081A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
Manifest number:          0805
Signing time:             Tue 24 Mar 2026 20:59:25 +0000
Manifest this update:     Tue 24 Mar 2026 20:59:25 +0000
Manifest next update:     Tue 31 Mar 2026 20:59:25 +0000
Files and hashes:         1: elR0EjxUiBfiXzSEzCa2CwZBvWk.crl (hash: UFAU4iAGyVlMWqeF889aAsj/Khxil+eIPZtIxbX0hB4=)
                          2: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (hash: xYotCNT5gCNIUjui/L3r9m3hvbE/2pZfHJK9qEIIwa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl
                          rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2074 (0x81a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6F87, serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69
        Validity
            Not Before: Mar 24 20:59:25 2026 GMT
            Not After : Mar 31 20:59:25 2026 GMT
        Subject: CN=69c2fb2d-d733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:7e:33:a2:ab:55:49:5a:5c:6a:c3:94:4b:
                    58:a0:df:03:72:6d:93:ea:fe:0b:42:f6:42:0d:17:
                    bb:eb:89:b8:65:7c:ed:7f:08:66:bd:25:04:34:50:
                    fd:6c:4c:5e:58:a1:20:48:c2:c2:5b:99:77:27:3a:
                    98:a2:23:eb:55:6f:68:7d:1c:b8:fa:39:fc:33:3b:
                    4f:9c:5e:38:32:76:a5:62:6b:12:31:71:35:8f:51:
                    65:2a:b9:2b:9c:e1:bd:20:47:8a:e1:c7:fb:52:ea:
                    8f:a2:dd:5b:0a:b0:16:ea:8d:7b:b4:ce:3a:59:4b:
                    82:c5:26:ba:3f:50:b2:97:39:c8:76:64:a8:a9:91:
                    32:7c:43:5c:29:a1:25:16:fb:44:14:9e:6e:32:d6:
                    01:81:f1:0f:48:e6:d5:79:ee:a4:ad:d4:c5:32:87:
                    0b:66:80:fe:f1:39:55:83:cd:2e:ba:ae:86:c8:cb:
                    81:db:86:47:41:97:58:9c:9c:16:c9:c9:73:b8:40:
                    67:56:f3:bb:7c:4d:7c:57:d9:5a:c8:63:2a:2d:dd:
                    2e:89:f6:92:c8:ce:02:24:1a:5d:34:b2:aa:65:83:
                    84:2f:e2:98:e4:5e:53:fd:33:28:f2:ed:40:a6:3b:
                    9b:45:c1:9a:97:08:bc:89:62:08:96:96:b1:5e:d3:
                    6b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C8:98:DC:2D:6A:3B:66:7A:36:E5:31:E1:56:28:7E:D7:6B:28:C3
            X509v3 Authority Key Identifier:
                keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:23:17:0e:6c:97:4a:40:20:ba:05:71:5a:38:6f:67:42:a4:
         45:48:38:e0:a7:4f:c2:65:c5:f1:85:b8:cb:16:43:70:ee:04:
         a4:7b:d4:ab:3b:e5:1c:2c:34:22:04:37:af:df:97:75:ca:1c:
         ed:c1:16:ee:fa:d0:13:34:47:a6:f6:4a:a1:b7:25:c5:be:8f:
         7d:17:b0:92:0a:74:49:31:fa:fb:6b:90:b4:ae:a6:87:a6:f9:
         3d:e3:e6:53:98:61:18:16:c4:d3:5b:f7:38:87:43:6e:6e:e2:
         a2:1a:2f:a2:26:92:37:dd:67:d6:93:a5:6d:32:97:6d:3f:3d:
         20:b3:84:d7:59:36:5c:31:3d:c4:eb:fb:95:a2:06:0b:db:9f:
         71:3e:4b:22:73:bb:bc:f6:85:88:ee:8e:79:34:85:07:bc:0d:
         d7:4c:3e:c0:aa:be:17:e0:9a:f3:aa:98:ce:5a:77:44:23:12:
         89:2c:de:6e:29:bc:dc:b6:3f:8b:82:d5:06:e7:54:2d:3b:5e:
         be:e6:fe:5d:fe:21:85:d2:c2:3e:66:39:cf:59:8c:e5:e3:44:
         eb:0d:d9:ce:bb:d4:7d:52:08:4e:55:74:c1:9c:c8:f1:b4:70:
         ad:0a:54:e1:be:9b:d6:4b:59:96:34:9a:15:40:d2:56:4b:cf:
         f3:48:4a:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZGODcxMTAvBgNVBAUTKDdBNTQ3NDEyM0M1NDg4MTdFMjVGMzQ4NENDMjZCNjBC
MDY0MUJENjkwHhcNMjYwMzI0MjA1OTI1WhcNMjYwMzMxMjA1OTI1WjAYMRYwFAYD
VQQDEw02OWMyZmIyZC1kNzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwhd+M6KrVUlaXGrDlEtYoN8Dcm2T6v4LQvZCDRe764m4ZXztfwhmvSUENFD9
bExeWKEgSMLCW5l3JzqYoiPrVW9ofRy4+jn8MztPnF44MnalYmsSMXE1j1FlKrkr
nOG9IEeK4cf7UuqPot1bCrAW6o17tM46WUuCxSa6P1CylznIdmSoqZEyfENcKaEl
FvtEFJ5uMtYBgfEPSObVee6krdTFMocLZoD+8TlVg80uuq6GyMuB24ZHQZdYnJwW
yclzuEBnVvO7fE18V9layGMqLd0uifaSyM4CJBpdNLKqZYOEL+KY5F5T/TMo8u1A
pjubRcGalwi8iWIIlpaxXtNrzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/ImNwt
ajtmejblMeFWKH7XayjDMB8GA1UdIwQYMBaAFHpUdBI8VIgX4l80hMwmtgsGQb1p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY4Ny9CMUNENzFGMDI2
ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlCZmlYelNFekNhMkN3WkJ2
V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VsUjBFanhVaUJmaVh6U0V6Q2EyQ3daQnZXay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkY4Ny9CMUNENzFGMDI2ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlC
ZmlYelNFekNhMkN3WkJ2V2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUSMXDmyXSkAgugVxWjhvZ0KkRUg44KdPwmXF8YW4yxZDcO4EpHvUqzvlHCw0
IgQ3r9+Xdcoc7cEW7vrQEzRHpvZKobclxb6PfRewkgp0STH6+2uQtK6mh6b5PePm
U5hhGBbE01v3OIdDbm7iohovoiaSN91n1pOlbTKXbT89ILOE11k2XDE9xOv7laIG
C9ufcT5LInO7vPaFiO6OeTSFB7wN10w+wKq+F+Ca86qYzlp3RCMSiSzebim83LY/
i4LVBudULTtevub+Xf4hhdLCPmY5z1mM5eNE6w3ZzrvUfVIITlV0wZzI8bRwrQpU
4b6b1ktZljSaFUDSVkvP80hK5g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:48 2026 by rpki-client