Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
File:                     dFPYgTvI73KQsRAjI1iJTHfE2zc.mft (raw, json)
Hash identifier:          0FoCSbZaHLSHpY6lGy/E64+4YCygkogkHm4RAQISPBo=
Subject key identifier:   64:D5:49:14:11:C6:64:BB:D4:5A:FF:67:1D:A8:C9:E2:63:B4:EC:6D
Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
Certificate issuer:       /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
Manifest number:          73
Signing time:             Wed 25 Mar 2026 07:01:48 +0000
Manifest this update:     Wed 25 Mar 2026 07:01:48 +0000
Manifest next update:     Wed 01 Apr 2026 07:01:48 +0000
Files and hashes:         1: dFPYgTvI73KQsRAjI1iJTHfE2zc.crl (hash: rHc9A4tUPsXpolUU8qVgJGC9tD3hih1H6j4XbSZxItw=)
                          2: BAC878D0799511F098E98265C4F9AE02.roa (hash: JxVeh5Wcyk9ehIe8rUu++w1AOb/XCsqY0oC40z9B14A=)
                          3: BB3F5AAE799511F098E98265C4F9AE02.roa (hash: 7+6x+nkCOZ5eJCqABcReNt2hBYcHFj9EJZ35TbWhwnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
                          rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
        Validity
            Not Before: Mar 25 07:01:48 2026 GMT
            Not After : Apr  1 07:01:48 2026 GMT
        Subject: CN=69c3885c-fba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6e:61:39:c5:7e:70:ba:2e:37:76:e0:f7:70:
                    51:08:fd:d4:4d:29:6d:af:3b:0f:35:cc:c0:72:1c:
                    06:73:7b:2d:1c:d8:e1:3a:3a:96:f5:cd:70:11:ca:
                    ae:8c:04:e6:c9:52:2b:50:bd:85:d7:a3:a8:52:4a:
                    5c:2f:d6:1e:b8:a8:7e:e6:ff:37:80:01:98:be:2a:
                    f6:66:95:1c:d4:cf:2f:6d:8d:64:c0:59:e0:a6:3f:
                    6e:8d:71:25:5a:6d:6f:32:ce:88:73:e1:d8:46:d4:
                    1e:7b:8c:2a:3d:9e:7a:db:b7:d9:84:51:23:7a:61:
                    3c:91:de:85:d7:e1:83:c3:2d:34:6d:a9:df:b2:6f:
                    f8:20:6b:50:70:57:d3:ce:fe:3b:e2:9e:4a:7c:54:
                    6e:6f:b2:2c:72:ca:c3:30:fb:e0:86:30:27:88:22:
                    9b:f1:98:6a:12:15:88:2a:e5:9a:3e:b8:05:3a:ec:
                    03:51:13:a2:2a:f2:a7:a2:d8:1f:b1:5f:73:ff:cc:
                    56:c2:c6:af:f0:55:38:12:fe:8d:90:c9:2e:1b:94:
                    3a:be:d7:56:fc:0a:92:ed:c3:b6:72:8a:e7:4d:84:
                    7b:fa:38:76:49:ee:d6:ae:5a:dc:b2:06:07:6f:c7:
                    79:f3:49:80:73:fa:9f:f3:fc:64:6c:79:78:5a:78:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D5:49:14:11:C6:64:BB:D4:5A:FF:67:1D:A8:C9:E2:63:B4:EC:6D
            X509v3 Authority Key Identifier:
                keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0b:c6:6a:f7:de:5d:e2:ac:ae:04:8f:f7:80:d2:72:3b:cb:
         b8:5b:bd:fd:d4:7a:1f:7e:43:87:c1:26:2f:05:13:ba:c7:d8:
         5b:58:d5:7a:43:b9:9e:0b:20:10:ff:9c:ce:8b:fe:11:ab:a4:
         57:1b:52:9a:eb:82:3b:ab:19:2b:43:49:1c:04:c7:67:6d:76:
         2d:b0:47:b1:17:8c:88:6e:1c:7c:e7:8f:31:f4:2b:f4:cc:cf:
         89:d4:4d:2d:51:44:f4:5a:4d:f4:bd:e2:61:30:5a:ee:14:a4:
         14:5d:11:4b:e2:61:28:6c:6a:60:95:b8:19:73:fa:c8:95:b3:
         12:89:ca:7d:02:ed:4f:7e:58:ef:d4:b6:52:43:f3:2a:65:11:
         de:47:dc:4e:c5:04:7b:21:47:03:70:5c:43:12:0f:a3:a1:d5:
         ca:ee:9b:0b:51:0e:88:14:d8:e4:37:ef:f5:76:1e:f9:45:c3:
         cc:41:42:a0:4e:b1:09:e4:4a:ab:8e:f6:ad:28:4c:8c:a7:1d:
         1f:19:1e:ef:57:0e:b6:05:d6:69:70:a9:87:ad:94:36:04:d1:
         1f:91:ab:f2:c5:85:68:a0:40:59:11:36:ad:bb:e6:2c:48:6d:
         bb:0b:e2:06:86:b9:9d:30:cc:0f:c1:d7:27:b8:8c:92:d6:d3:
         e6:c6:2a:b7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
QzY0RjExMC8GA1UEBRMoNzQ1M0Q4ODEzQkM4RUY3MjkwQjExMDIzMjM1ODg5NEM3
N0M0REIzNzAeFw0yNjAzMjUwNzAxNDhaFw0yNjA0MDEwNzAxNDhaMBgxFjAUBgNV
BAMTDTY5YzM4ODVjLWZiYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDibmE5xX5wui43duD3cFEI/dRNKW2vOw81zMByHAZzey0c2OE6Opb1zXARyq6M
BObJUitQvYXXo6hSSlwv1h64qH7m/zeAAZi+KvZmlRzUzy9tjWTAWeCmP26NcSVa
bW8yzohz4dhG1B57jCo9nnrbt9mEUSN6YTyR3oXX4YPDLTRtqd+yb/gga1BwV9PO
/jvinkp8VG5vsixyysMw++CGMCeIIpvxmGoSFYgq5Zo+uAU67ANRE6Iq8qei2B+x
X3P/zFbCxq/wVTgS/o2QyS4blDq+11b8CpLtw7ZyiudNhHv6OHZJ7tauWtyyBgdv
x3nzSYBz+p/z/GRseXhaeB+RAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZNVJFBHG
ZLvUWv9nHajJ4mO07G0wHwYDVR0jBBgwFoAUdFPYgTvI73KQsRAjI1iJTHfE2zcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDNjRGLzM2MENBMTdBNzk5
NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNLUXNSQWpJMWlKVEhmRTJ6
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZEZQWWdUdkk3M0tRc1JBakkxaUpUSGZFMnpjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD
NjRGLzM2MENBMTdBNzk5NTExRjBCRUNGMkQ0MEM0RjlBRTAyL2RGUFlnVHZJNzNL
UXNSQWpJMWlKVEhmRTJ6Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQANC8Zq995d4qyuBI/3gNJyO8u4W7391HoffkOHwSYvBRO6x9hbWNV6Q7meCyAQ
/5zOi/4Rq6RXG1Ka64I7qxkrQ0kcBMdnbXYtsEexF4yIbhx8548x9Cv0zM+J1E0t
UUT0Wk30veJhMFruFKQUXRFL4mEobGpglbgZc/rIlbMSicp9Au1Pfljv1LZSQ/Mq
ZRHeR9xOxQR7IUcDcFxDEg+jodXK7psLUQ6IFNjkN+/1dh75RcPMQUKgTrEJ5Eqr
jvatKEyMpx0fGR7vVw62BdZpcKmHrZQ2BNEfkavyxYVooEBZETatu+YsSG27C+IG
hrmdMMwPwdcnuIyS1tPmxiq3
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:10:03 2026 by rpki-client