Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
File:                     XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json)
Hash identifier:          Gtm5Aix+8sQxP4fXQMk5iiv2AijjEFzmX8Oh3A53ciw=
Subject key identifier:   39:86:99:BB:38:D7:69:00:26:2E:EB:A4:02:B8:E5:2A:A3:DB:02:97
Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF
Certificate issuer:       /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
Manifest number:          017F
Signing time:             Wed 25 Mar 2026 03:51:38 +0000
Manifest this update:     Wed 25 Mar 2026 03:51:38 +0000
Manifest next update:     Wed 01 Apr 2026 03:51:38 +0000
Files and hashes:         1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: UNNWlIW1EkB3mZGDEz4J1tVl7foC4vc+ecrUia8QK9k=)
                          2: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: ddXLbsnNUJaK9PsrG7ysG03ljzK1G3ktx48YRWrpG8U=)
                          3: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: EZoQFirW5esN1VtBDXZEiHNnC8g7jkK9EPytiN1M6xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl
                          rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF
        Validity
            Not Before: Mar 25 03:51:38 2026 GMT
            Not After : Apr  1 03:51:38 2026 GMT
        Subject: CN=69c35bca-9f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ce:9d:cb:aa:28:bc:bc:5a:7e:74:5a:65:b3:
                    60:8b:34:96:9b:ac:48:15:8c:31:94:95:e3:d2:ad:
                    82:de:6f:98:4a:10:4f:64:c2:3c:dd:ca:7a:65:89:
                    a2:7d:4f:eb:ea:7f:5d:f5:d8:8a:a2:e8:0a:4b:08:
                    be:6b:aa:f0:30:7a:a4:eb:50:d7:99:dd:a4:c5:ea:
                    79:1b:c9:48:2b:fa:19:8e:30:53:40:61:68:1d:f4:
                    40:1e:3a:46:49:78:d5:39:e0:16:38:54:b2:32:af:
                    e8:94:4d:02:ac:2b:aa:6b:99:87:c9:02:88:f6:c0:
                    95:8f:fe:86:1b:b3:a9:31:7a:90:06:73:b1:d0:69:
                    f9:94:e7:c1:90:bc:a0:70:27:c0:15:64:dd:28:49:
                    c7:6d:67:f3:8a:b6:ac:ab:7b:90:a5:b5:1b:82:4f:
                    67:c0:4d:58:a9:32:f7:6b:b7:a6:07:01:5e:74:2b:
                    2a:c2:40:57:67:20:5a:9b:ac:98:0a:d8:0c:bd:d4:
                    ca:d8:36:93:5d:df:6c:44:50:a4:0f:2a:37:45:46:
                    cb:f8:fd:c6:c3:26:67:38:e5:76:fd:32:38:73:eb:
                    1d:23:36:e6:f3:72:b2:5f:fe:e1:73:23:57:77:58:
                    d6:c1:a6:34:7d:e9:57:3f:fa:9e:da:65:82:16:62:
                    18:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:86:99:BB:38:D7:69:00:26:2E:EB:A4:02:B8:E5:2A:A3:DB:02:97
            X509v3 Authority Key Identifier:
                keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:75:dd:84:6c:72:bd:b9:22:91:c0:7c:61:76:c9:69:a2:e1:
         db:10:8d:2b:ec:b2:8d:d6:31:10:32:15:6c:0d:3b:be:db:2b:
         a5:90:27:06:90:23:a3:77:bc:83:6f:91:6d:8d:0b:5d:ad:55:
         0e:d0:c4:9c:42:46:75:0b:36:eb:a8:22:71:4a:bf:fa:5a:4d:
         a5:e8:34:93:cf:74:f4:db:bd:80:4d:5a:d8:0a:c0:22:70:12:
         eb:9f:25:88:95:1b:19:1a:ab:95:41:6b:5e:97:a4:05:8b:d2:
         12:14:c4:0b:fd:ee:49:f4:4d:a2:a2:12:ec:63:3e:05:85:3d:
         c4:63:b7:15:dd:51:f0:4a:af:8a:8d:d8:75:2b:57:22:59:97:
         bc:93:1b:6e:a1:9c:53:d0:f6:9d:d9:ec:79:5a:49:41:04:b1:
         9e:9b:0e:77:75:6c:c4:59:2c:91:10:71:f7:c4:8d:9b:fd:45:
         b2:07:f6:66:8b:aa:55:52:3e:3b:66:87:1e:ed:8e:b6:07:6a:
         df:26:70:3f:a8:55:ab:48:e5:e0:80:dd:3a:37:68:ae:a2:34:
         58:5a:d3:7b:63:cb:62:8d:0d:3f:2a:7d:94:0c:0d:32:67:f8:
         72:94:4a:77:63:92:df:b0:99:a1:1e:7c:d1:7e:35:cb:f4:24:
         cb:6f:f9:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy
OTFDNDdCQUYwHhcNMjYwMzI1MDM1MTM4WhcNMjYwNDAxMDM1MTM4WjAYMRYwFAYD
VQQDEw02OWMzNWJjYS05Zjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz86dy6oovLxafnRaZbNgizSWm6xIFYwxlJXj0q2C3m+YShBPZMI83cp6ZYmi
fU/r6n9d9diKougKSwi+a6rwMHqk61DXmd2kxep5G8lIK/oZjjBTQGFoHfRAHjpG
SXjVOeAWOFSyMq/olE0CrCuqa5mHyQKI9sCVj/6GG7OpMXqQBnOx0Gn5lOfBkLyg
cCfAFWTdKEnHbWfzirasq3uQpbUbgk9nwE1YqTL3a7emBwFedCsqwkBXZyBam6yY
CtgMvdTK2DaTXd9sRFCkDyo3RUbL+P3GwyZnOOV2/TI4c+sdIzbm83KyX/7hcyNX
d1jWwaY0felXP/qe2mWCFmIYMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmGmbs4
12kAJi7rpAK45Sqj2wKXMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx
MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdw
UTUwcnJ1Vzl3RU1wSEVlNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEXXdhGxyvbkikcB8YXbJaaLh2xCNK+yyjdYxEDIVbA07vtsrpZAnBpAjo3e8
g2+RbY0LXa1VDtDEnEJGdQs266gicUq/+lpNpeg0k8909Nu9gE1a2ArAInAS658l
iJUbGRqrlUFrXpekBYvSEhTEC/3uSfRNoqIS7GM+BYU9xGO3Fd1R8Eqvio3YdStX
IlmXvJMbbqGcU9D2ndnseVpJQQSxnpsOd3VsxFkskRBx98SNm/1Fsgf2ZouqVVI+
O2aHHu2Otgdq3yZwP6hVq0jl4IDdOjdorqI0WFrTe2PLYo0NPyp9lAwNMmf4cpRK
d2OS37CZoR580X41y/Qky2/5wA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:10 2026 by rpki-client