Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
File:                     80xSFZH7LNAtxnvdctzyiwekL_Y.mft (raw, json)
Hash identifier:          XHo+byW894Y3HES4J+A3E6c2gnUwgRMWG/8eKNipyLw=
Subject key identifier:   A5:A4:1A:58:DA:AB:AC:CD:63:E8:76:8B:7A:7E:5D:AD:FF:41:8C:9C
Authority key identifier: F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6
Certificate issuer:       /CN=A91B8CE1/serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
Manifest number:          74
Signing time:             Wed 25 Mar 2026 07:01:16 +0000
Manifest this update:     Wed 25 Mar 2026 07:01:15 +0000
Manifest next update:     Wed 01 Apr 2026 07:01:15 +0000
Files and hashes:         1: 80xSFZH7LNAtxnvdctzyiwekL_Y.crl (hash: EhVJq2mEYlBaTgtrMUq7pTydRTru8MtAIfbaz5HstxQ=)
                          2: 5C2EA0E477D111F0940AFF7AC4F9AE02.roa (hash: 7VkR0jxdN8QIzGOfhHVazXSronFqNfxz53QUAITrcL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8CE1, serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6
        Validity
            Not Before: Mar 25 07:01:15 2026 GMT
            Not After : Apr  1 07:01:15 2026 GMT
        Subject: CN=69c3883b-d7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:76:5f:b0:c8:3a:1c:ec:6d:b4:fe:40:86:2a:
                    0c:ee:56:3a:14:b7:1d:61:eb:fa:78:90:51:c0:c5:
                    91:94:12:25:af:b7:22:dc:10:79:41:9e:cd:c2:0e:
                    26:5c:55:67:f2:d3:de:f0:e9:96:fa:28:5b:e4:35:
                    46:51:92:86:01:7a:2e:c3:f1:6a:26:03:5c:8b:11:
                    a2:30:ae:6d:a1:f2:9b:32:4d:17:aa:e9:89:e2:d0:
                    18:b0:c8:6d:c0:90:74:75:c7:89:0b:90:d6:fc:4b:
                    52:35:91:3b:97:22:e6:c7:43:b8:f6:24:aa:f2:24:
                    f0:1a:48:b4:6d:0d:ad:14:c1:8e:1f:5e:61:9f:87:
                    1e:02:6e:0f:d4:66:4c:9e:31:22:97:d1:c3:6d:c6:
                    6a:e6:49:34:d6:cf:4f:18:7c:d8:a0:22:85:0f:b2:
                    bb:2a:7f:30:38:dc:6e:d0:87:9d:33:00:83:a7:09:
                    67:8b:d5:f0:78:c5:68:48:bd:d7:ed:35:b7:44:21:
                    97:94:a5:2b:ee:22:01:55:70:9f:a6:76:e6:71:d0:
                    60:5a:b9:6a:35:e3:d5:31:b6:d5:0c:70:64:b7:8a:
                    f7:fc:32:22:d7:3a:5d:24:a1:06:c1:9c:a7:41:06:
                    1c:30:08:c9:a7:d1:43:a9:86:b0:2d:9e:c0:3c:8f:
                    d1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A4:1A:58:DA:AB:AC:CD:63:E8:76:8B:7A:7E:5D:AD:FF:41:8C:9C
            X509v3 Authority Key Identifier:
                keyid:F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9d:29:99:64:6b:3d:79:1b:84:6d:f0:f8:a9:a1:ed:21:20:
         d3:1d:8f:28:c1:0d:96:41:e8:17:3d:c8:d7:38:03:70:14:f5:
         1a:5d:0e:1b:e3:47:1f:01:69:3f:c7:c5:e2:39:31:bd:5f:89:
         55:03:c3:b8:61:11:ae:65:c8:3d:63:94:d9:3f:c9:8b:4e:6c:
         fb:c9:3c:d0:1b:11:1c:88:b2:f3:05:cd:56:1d:2e:dc:61:cf:
         71:7f:26:c6:fe:72:0e:02:66:bf:15:8d:65:26:3d:86:5d:90:
         16:69:4a:1c:01:04:e3:25:e3:83:3b:63:11:0a:e4:00:1b:d9:
         1b:23:7a:1f:d9:42:c5:bd:38:3d:56:4f:84:74:89:75:fe:c5:
         57:87:79:af:94:6e:91:16:53:25:b4:46:3f:48:47:93:96:ea:
         a5:7f:02:5a:d7:2d:50:6f:47:c1:25:b8:fe:de:a5:e4:f8:63:
         16:2c:e9:c6:94:02:14:c8:d1:83:27:7a:80:9d:50:28:75:4f:
         4a:64:06:f2:4b:1f:61:57:9e:bd:da:db:86:37:8e:3e:0a:5c:
         dd:e3:b8:40:a6:1a:6f:b8:57:6f:98:01:93:9d:1c:eb:90:a6:
         e9:9e:62:82:f4:7d:8d:79:37:78:6c:03:9e:70:e1:df:dd:35:
         4a:df:2f:89
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
OENFMTExMC8GA1UEBRMoRjM0QzUyMTU5MUZCMkNEMDJEQzY3QkRENzJEQ0YyOEIw
N0E0MkZGNjAeFw0yNjAzMjUwNzAxMTVaFw0yNjA0MDEwNzAxMTVaMBgxFjAUBgNV
BAMTDTY5YzM4ODNiLWQ3ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8dl+wyDoc7G20/kCGKgzuVjoUtx1h6/p4kFHAxZGUEiWvtyLcEHlBns3CDiZc
VWfy097w6Zb6KFvkNUZRkoYBei7D8WomA1yLEaIwrm2h8psyTReq6Yni0BiwyG3A
kHR1x4kLkNb8S1I1kTuXIubHQ7j2JKryJPAaSLRtDa0UwY4fXmGfhx4Cbg/UZkye
MSKX0cNtxmrmSTTWz08YfNigIoUPsrsqfzA43G7Qh50zAIOnCWeL1fB4xWhIvdft
NbdEIZeUpSvuIgFVcJ+mduZx0GBauWo149UxttUMcGS3ivf8MiLXOl0koQbBnKdB
BhwwCMmn0UOphrAtnsA8j9HfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpaQaWNqr
rM1j6HaLen5drf9BjJwwHwYDVR0jBBgwFoAU80xSFZH7LNAtxnvdctzyiwekL/Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4Q0UxLzY3OTBCRTVDNzdD
RTExRjBCNTU3NDA0Q0M0RjlBRTAyLzgweFNGWkg3TE5BdHhudmRjdHp5aXdla0xf
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvODB4U0ZaSDdMTkF0eG52ZGN0enlpd2VrTF9ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
Q0UxLzY3OTBCRTVDNzdDRTExRjBCNTU3NDA0Q0M0RjlBRTAyLzgweFNGWkg3TE5B
dHhudmRjdHp5aXdla0xfWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAmnSmZZGs9eRuEbfD4qaHtISDTHY8owQ2WQegXPcjXOANwFPUaXQ4b40cfAWk/
x8XiOTG9X4lVA8O4YRGuZcg9Y5TZP8mLTmz7yTzQGxEciLLzBc1WHS7cYc9xfybG
/nIOAma/FY1lJj2GXZAWaUocAQTjJeODO2MRCuQAG9kbI3of2ULFvTg9Vk+EdIl1
/sVXh3mvlG6RFlMltEY/SEeTluqlfwJa1y1Qb0fBJbj+3qXk+GMWLOnGlAIUyNGD
J3qAnVAodU9KZAbySx9hV5692tuGN44+Clzd47hAphpvuFdvmAGTnRzrkKbpnmKC
9H2NeTd4bAOecOHf3TVK3y+J
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:22:56 2026 by rpki-client