Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
File:                     R0Blek4vuGe_tE2_bLi8HdGywg4.mft (raw, json)
Hash identifier:          mi0/mzhOPMIge20uM3/8yymk1RRKL0jCYXUWlGbEuDg=
Subject key identifier:   57:D8:C7:5C:C6:69:18:E4:C4:C2:36:6B:DC:EE:7D:67:87:88:AC:1D
Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
Certificate issuer:       /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
Certificate serial:       031A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
Manifest number:          0312
Signing time:             Wed 25 Mar 2026 00:49:31 +0000
Manifest this update:     Wed 25 Mar 2026 00:49:30 +0000
Manifest next update:     Wed 01 Apr 2026 00:49:30 +0000
Files and hashes:         1: R0Blek4vuGe_tE2_bLi8HdGywg4.crl (hash: cYx3HrCtlyCcVwmSSefdk5eUZurfYPsM7DLly0upd0w=)
                          2: 7AD326AC663911EDA919A02AC4F9AE02.roa (hash: QgXgIU4iewVv/gvtM7nRh4tylfGnpHiAGu1ZYVRzjpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl
                          rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
        Validity
            Not Before: Mar 25 00:49:30 2026 GMT
            Not After : Apr  1 00:49:30 2026 GMT
        Subject: CN=69c3311b-883e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:d3:87:ef:89:1a:59:e4:b3:dc:b7:24:cc:
                    8a:43:82:1e:90:98:4f:26:92:a5:7f:be:9d:12:0f:
                    6c:b1:70:3d:f5:8a:4a:f9:3b:bc:7d:c5:b4:7c:1e:
                    b8:5e:1f:0d:91:c0:68:be:a7:b9:f8:c3:ef:91:90:
                    5b:b8:8f:08:3a:6a:8d:9f:4c:23:9d:e7:b1:be:88:
                    0e:74:96:99:d0:20:e7:0a:4e:bd:f4:9d:1d:2c:25:
                    93:c5:62:e6:f5:32:96:82:7b:ee:9c:49:9f:b5:af:
                    10:29:1a:01:ce:51:4e:c2:3a:db:fc:58:63:42:e6:
                    5b:5d:d0:e2:09:36:e4:b5:5e:01:2c:3a:da:fc:b1:
                    6d:6b:82:01:03:a6:7e:03:15:63:ed:e3:a5:e2:a7:
                    62:da:56:fe:77:d2:f6:df:00:49:c8:5c:4c:cb:f9:
                    1f:66:c6:a3:e1:47:28:97:1d:b5:41:d8:20:09:cd:
                    1f:ba:81:cc:b4:8a:60:a3:41:fa:0f:ae:f5:f8:67:
                    05:70:c6:8c:6a:a0:58:6e:c1:dc:19:0a:b5:e9:3f:
                    8b:15:16:31:46:d8:fe:4d:4b:9b:2b:9b:8b:df:d5:
                    35:bf:85:5f:7e:39:29:b8:0f:5a:d1:f5:e9:8d:f0:
                    71:50:06:e3:07:80:b5:c7:d2:b9:db:8d:7b:da:37:
                    e4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D8:C7:5C:C6:69:18:E4:C4:C2:36:6B:DC:EE:7D:67:87:88:AC:1D
            X509v3 Authority Key Identifier:
                keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ed:4b:61:1b:f3:58:ff:2d:67:b9:b1:96:ce:c0:ce:13:52:
         fd:28:0b:1b:fe:25:b2:29:64:40:55:0f:3a:ff:44:d2:0e:0f:
         60:04:f2:e3:f1:6b:08:36:82:50:37:77:65:02:53:ff:8d:83:
         b2:f2:ba:6a:91:e2:95:f2:b0:c2:3d:75:66:f2:ea:31:2b:5f:
         a8:7e:a3:73:1d:5e:40:e3:ea:df:a5:b6:d2:c4:ab:47:be:1f:
         85:96:fd:39:d8:63:4a:43:08:36:86:2a:3c:f9:94:54:e6:8c:
         76:fc:d5:41:eb:92:4c:b4:01:f1:9e:f8:c5:1a:e7:bd:9a:1b:
         e8:7c:94:a2:b8:31:be:0c:77:9e:84:92:82:a5:bd:7e:8a:ad:
         24:eb:53:83:0e:61:17:0d:3e:7d:88:9d:eb:b1:7f:7d:31:b9:
         f6:5d:36:90:f5:6b:c1:91:12:f8:ea:75:24:d2:6d:d4:3a:0c:
         5d:a6:f7:08:2e:55:ca:2b:de:53:96:2b:2b:14:98:36:cd:c2:
         58:5a:d1:18:a4:ce:59:44:7d:e7:e1:28:1f:b9:a3:fd:ab:3d:
         1d:65:95:21:37:2a:a4:3f:b4:75:67:70:00:42:8a:80:50:39:
         83:c4:7f:ab:fc:6c:c5:08:6d:69:94:df:cf:c2:35:bb:9d:3c:
         6e:2e:d6:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE3MzMxMTAvBgNVBAUTKDQ3NDA2NTdBNEUyRkI4NjdCRkI0NERCRjZDQjhCQzFE
RDFCMkMyMEUwHhcNMjYwMzI1MDA0OTMwWhcNMjYwNDAxMDA0OTMwWjAYMRYwFAYD
VQQDEw02OWMzMzExYi04ODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzLrTh++JGlnks9y3JMyKQ4IekJhPJpKlf76dEg9ssXA99YpK+Tu8fcW0fB64
Xh8NkcBovqe5+MPvkZBbuI8IOmqNn0wjneexvogOdJaZ0CDnCk699J0dLCWTxWLm
9TKWgnvunEmfta8QKRoBzlFOwjrb/FhjQuZbXdDiCTbktV4BLDra/LFta4IBA6Z+
AxVj7eOl4qdi2lb+d9L23wBJyFxMy/kfZsaj4Ucolx21QdggCc0fuoHMtIpgo0H6
D671+GcFcMaMaqBYbsHcGQq16T+LFRYxRtj+TUubK5uL39U1v4VffjkpuA9a0fXp
jfBxUAbjB4C1x9K524172jfkHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFfYx1zG
aRjkxMI2a9zufWeHiKwdMB8GA1UdIwQYMBaAFEdAZXpOL7hnv7RNv2y4vB3RssIO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTczMy8zMzM4NzJBMjBE
NzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0dnVHZV90RTJfYkxpOEhkR3l3
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1IwQmxlazR2dUdlX3RFMl9iTGk4SGRHeXdnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTczMy8zMzM4NzJBMjBENzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0dnVH
ZV90RTJfYkxpOEhkR3l3ZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfO1LYRvzWP8tZ7mxls7AzhNS/SgLG/4lsilkQFUPOv9E0g4PYATy4/FrCDaC
UDd3ZQJT/42DsvK6apHilfKwwj11ZvLqMStfqH6jcx1eQOPq36W20sSrR74fhZb9
OdhjSkMINoYqPPmUVOaMdvzVQeuSTLQB8Z74xRrnvZob6HyUorgxvgx3noSSgqW9
foqtJOtTgw5hFw0+fYid67F/fTG59l02kPVrwZES+Op1JNJt1DoMXab3CC5Vyive
U5YrKxSYNs3CWFrRGKTOWUR95+EoH7mj/as9HWWVITcqpD+0dWdwAEKKgFA5g8R/
q/xsxQhtaZTfz8I1u508bi7Wug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:23 2026 by rpki-client