Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
File:                     V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft (raw, json)
Hash identifier:          kKh2Ne8H0I9SgNU5bLioQo4VI2ytC49ZoeJ1M9OKCsM=
Subject key identifier:   A9:AE:DF:E8:62:EC:00:F7:5B:F9:03:DB:F9:76:5B:33:21:C3:EA:58
Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
Certificate issuer:       /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33
Certificate serial:       045A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
Manifest number:          0451
Signing time:             Thu 26 Mar 2026 23:59:05 +0000
Manifest this update:     Thu 26 Mar 2026 23:59:04 +0000
Manifest next update:     Thu 02 Apr 2026 23:59:04 +0000
Files and hashes:         1: V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl (hash: GZXCJYiAHTrk9IqFM8fzprLFlmQNSLeP4R9Fv2f7zI0=)
                          2: 821CAFEE923811EC955B7A3AC4F9AE02.roa (hash: 7Q962uKeCDScxGLfboca26CEHkA+KIKMzjIbZ7WOurs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A3F, serialNumber=576C5447C09B597107B770C101C89327F105BD33
        Validity
            Not Before: Mar 26 23:59:04 2026 GMT
            Not After : Apr  2 23:59:04 2026 GMT
        Subject: CN=69c5c849-ca42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:4f:73:4f:85:1e:9b:43:98:39:08:7b:2a:97:
                    2f:25:df:f2:2c:84:17:32:e0:70:10:4c:b9:f6:64:
                    3d:e1:c6:fc:8b:18:b5:f3:a6:a1:65:46:33:b5:8f:
                    14:e8:c1:66:60:96:76:f5:5e:eb:4f:eb:67:a7:a0:
                    54:4d:7a:28:f3:b1:1d:bf:18:f9:0d:26:08:f0:bc:
                    e6:01:1c:b4:18:5a:d7:21:8c:63:51:0e:72:64:b4:
                    cf:4b:f5:07:db:df:1b:aa:53:75:ab:7d:31:6b:57:
                    af:5f:06:92:cf:bb:94:9e:88:3b:e9:25:47:5d:74:
                    b8:00:a7:e0:ad:cd:fe:1d:14:62:f0:b2:62:a7:2b:
                    1d:60:06:ed:4b:f9:e4:5c:b6:4c:77:71:2f:78:73:
                    93:fb:81:31:b6:3b:f9:f7:99:f2:3a:71:d8:38:8d:
                    8d:e4:a9:63:b5:ba:62:74:cd:35:68:b9:ff:30:c3:
                    5c:f6:92:fd:94:74:1f:71:fd:a4:e0:23:f2:87:c9:
                    3a:fc:a9:52:6b:76:75:e6:4a:9f:17:13:97:6f:9f:
                    f2:e5:96:5c:cc:2b:b5:1a:ac:7c:c3:be:f2:d1:c4:
                    84:5d:6a:e7:41:35:30:0a:14:af:5d:a7:29:f4:20:
                    d2:ca:35:e3:f4:a5:e8:99:fc:7f:5e:a4:29:28:ea:
                    ef:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AE:DF:E8:62:EC:00:F7:5B:F9:03:DB:F9:76:5B:33:21:C3:EA:58
            X509v3 Authority Key Identifier:
                keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:aa:b9:53:ef:6c:54:ca:1e:90:27:65:bc:5b:aa:71:d1:b8:
         60:c8:f5:74:69:23:e2:22:e5:43:e7:fb:ea:3f:a5:6f:29:ba:
         22:c8:d5:42:ce:9a:90:f5:b3:f1:20:1e:cb:35:75:85:1e:de:
         b0:16:90:2b:dd:40:6b:8c:c3:5d:e2:ea:bc:43:83:8a:a1:60:
         b9:4b:84:41:fa:de:69:60:b8:b5:29:e0:d3:96:96:87:e0:39:
         1c:1e:13:06:a6:e1:fe:bd:0d:2b:ee:09:b5:9b:77:22:09:87:
         48:e2:e3:77:d0:2a:55:b9:1e:9b:48:05:2c:bd:ab:13:34:95:
         d3:ae:2e:0b:e7:67:0c:ba:8a:84:aa:97:3d:41:0d:a7:35:70:
         cf:91:9f:c2:d7:cc:1c:5c:65:59:c8:93:cf:31:a7:ee:b4:cc:
         99:ed:cb:14:76:fd:fc:c2:2d:d2:a8:a0:e9:dd:27:6e:06:32:
         d6:e2:74:e6:18:34:b4:b2:ad:fa:a8:5c:07:d7:c2:7d:81:ee:
         df:46:a5:75:74:99:f1:a7:a8:8f:4f:df:3f:8f:13:27:da:8c:
         a5:ce:25:b5:b2:a5:5f:87:39:ab:26:1d:44:fb:19:06:ac:f0:
         28:39:ec:9a:c9:c5:ff:c0:ef:8b:60:2c:be:21:42:b7:a9:da:
         be:a1:24:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdBM0YxMTAvBgNVBAUTKDU3NkM1NDQ3QzA5QjU5NzEwN0I3NzBDMTAxQzg5MzI3
RjEwNUJEMzMwHhcNMjYwMzI2MjM1OTA0WhcNMjYwNDAyMjM1OTA0WjAYMRYwFAYD
VQQDEw02OWM1Yzg0OS1jYTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+09zT4Uem0OYOQh7KpcvJd/yLIQXMuBwEEy59mQ94cb8ixi186ahZUYztY8U
6MFmYJZ29V7rT+tnp6BUTXoo87Edvxj5DSYI8LzmARy0GFrXIYxjUQ5yZLTPS/UH
298bqlN1q30xa1evXwaSz7uUnog76SVHXXS4AKfgrc3+HRRi8LJipysdYAbtS/nk
XLZMd3EveHOT+4Extjv595nyOnHYOI2N5KljtbpidM01aLn/MMNc9pL9lHQfcf2k
4CPyh8k6/KlSa3Z15kqfFxOXb5/y5ZZczCu1Gqx8w77y0cSEXWrnQTUwChSvXacp
9CDSyjXj9KXomfx/XqQpKOrvhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmu3+hi
7AD3W/kD2/l2WzMhw+pYMB8GA1UdIwQYMBaAFFdsVEfAm1lxB7dwwQHIkyfxBb0z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EzRi82NEMzMzk0ODky
MzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldYRUh0M0RCQWNpVEpfRUZ2
VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1YyeFVSOENiV1hFSHQzREJBY2lUSl9FRnZUTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0EzRi82NEMzMzk0ODkyMzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldY
RUh0M0RCQWNpVEpfRUZ2VE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPqq5U+9sVMoekCdlvFuqcdG4YMj1dGkj4iLlQ+f76j+lbym6IsjVQs6akPWz
8SAeyzV1hR7esBaQK91Aa4zDXeLqvEODiqFguUuEQfreaWC4tSng05aWh+A5HB4T
Bqbh/r0NK+4JtZt3IgmHSOLjd9AqVbkem0gFLL2rEzSV064uC+dnDLqKhKqXPUEN
pzVwz5GfwtfMHFxlWciTzzGn7rTMme3LFHb9/MIt0qig6d0nbgYy1uJ05hg0tLKt
+qhcB9fCfYHu30aldXSZ8aeoj0/fP48TJ9qMpc4ltbKlX4c5qyYdRPsZBqzwKDns
msnF/8Dvi2AsviFCt6navqEkaw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:19:38 2026 by rpki-client