Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
File:                     fXiohwseVXPWM8mnsAQKLuQF2VE.mft (raw, json)
Hash identifier:          UKUvYBNP6jIHhrMgKWv8czYig8gZqQVKBqDBzyE19yQ=
Subject key identifier:   F2:6E:8E:1F:42:6E:B8:F8:2B:C9:12:06:75:7D:F2:47:E0:C0:36:39
Authority key identifier: 7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51
Certificate issuer:       /CN=A91C162D/serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
Certificate serial:       0816
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
Manifest number:          0804
Signing time:             Tue 24 Mar 2026 20:53:58 +0000
Manifest this update:     Tue 24 Mar 2026 20:53:57 +0000
Manifest next update:     Tue 31 Mar 2026 20:53:57 +0000
Files and hashes:         1: fXiohwseVXPWM8mnsAQKLuQF2VE.crl (hash: OuhsrcqrkCfY5CCsyMWYIW0DYizUMshdk19h07F2ocU=)
                          2: 460D934A1C1611EB8BD35065C4F9AE02.roa (hash: ztH/rPflIbsMb75wLSR1J5uWjOy6EQTAIN54Eb15iU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl
                          rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C162D, serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
        Validity
            Not Before: Mar 24 20:53:57 2026 GMT
            Not After : Mar 31 20:53:57 2026 GMT
        Subject: CN=69c2f9e5-1d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:b4:3b:5a:cf:8c:ed:8a:5c:68:3b:d8:b0:
                    f5:dc:79:1c:bf:76:a0:ba:d3:e3:59:18:10:d3:74:
                    79:4f:68:4b:d5:29:01:8d:7b:1d:ef:21:c8:69:84:
                    fd:4f:5f:5a:eb:38:e3:28:ad:7d:c8:54:73:6d:59:
                    41:2f:1b:54:33:44:a6:41:d1:1f:32:c6:77:78:93:
                    eb:9c:70:e9:43:66:69:a0:2b:0d:1c:c3:0e:4a:03:
                    0c:d0:8d:be:7b:ee:c4:44:8f:19:8f:08:4f:ee:59:
                    f5:48:9a:73:0e:6f:7e:1b:6b:69:25:06:e8:cd:1c:
                    d5:11:ab:86:68:c0:5f:0b:9a:e2:de:d5:7f:a4:d4:
                    9c:4f:28:d2:5a:5b:af:b4:94:5f:68:7e:a8:f7:63:
                    4a:9e:fd:d2:2b:36:8d:43:f7:60:2c:35:81:f9:50:
                    47:c8:cb:c9:76:b8:f5:da:ac:00:fb:bc:01:fa:ad:
                    79:d1:61:f0:46:8b:1b:83:e0:a3:70:3d:40:cc:7a:
                    6f:5a:01:1f:e2:98:d2:34:77:83:e9:c5:e4:98:bf:
                    6d:de:2f:cc:05:28:81:c8:d4:e0:18:2f:dc:cb:58:
                    e8:f1:82:cc:80:43:f3:1b:fd:3b:b6:4a:ac:48:76:
                    38:04:e9:92:b9:09:69:53:39:db:50:58:76:5a:b5:
                    81:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6E:8E:1F:42:6E:B8:F8:2B:C9:12:06:75:7D:F2:47:E0:C0:36:39
            X509v3 Authority Key Identifier:
                keyid:7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fb:1c:0c:06:e1:14:4f:c1:d0:2d:1f:54:34:37:e0:25:ce:
         25:7c:f1:d7:ca:e1:bd:1c:7c:0a:dc:25:ab:b2:9d:fc:de:08:
         e4:aa:80:91:24:bf:b3:56:98:9d:b1:20:ed:3a:c0:e5:f6:d5:
         a6:b3:85:9c:14:12:2f:1a:8a:93:06:90:02:38:e6:dc:1b:bb:
         21:e9:76:b6:6d:52:a4:db:7f:fe:f7:a2:f3:b5:63:9d:8a:78:
         ef:40:7c:99:7d:17:69:05:8a:fb:ca:1b:d3:a0:a7:81:b4:1c:
         20:7b:52:3c:86:9d:26:d5:5b:eb:24:62:2a:2e:3b:32:6d:68:
         ee:a6:93:30:9d:c1:d5:3d:4d:ef:73:ae:b1:8f:dc:d3:d6:1d:
         f7:22:39:cb:ff:1f:af:25:54:e2:de:01:e6:19:63:e1:bb:06:
         9c:2b:a7:33:18:ce:e6:22:18:1c:37:d5:7e:1f:5a:ec:d1:1c:
         15:c3:9b:34:4a:3a:ab:74:95:cb:5d:55:ff:84:2c:ed:52:91:
         e1:0a:62:2a:0f:81:15:cc:11:86:ad:91:03:71:bc:5c:c7:95:
         ba:54:08:e3:8f:61:19:1b:8e:2b:79:70:12:de:8f:41:44:0b:
         14:fd:26:96:ce:8a:8e:8b:c8:37:84:25:a1:ce:a1:42:f1:cb:
         db:25:c9:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2MkQxMTAvBgNVBAUTKDdENzhBODg3MEIxRTU1NzNENjMzQzlBN0IwMDQwQTJF
RTQwNUQ5NTEwHhcNMjYwMzI0MjA1MzU3WhcNMjYwMzMxMjA1MzU3WjAYMRYwFAYD
VQQDEw02OWMyZjllNS0xZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjyi0O1rPjO2KXGg72LD13Hkcv3agutPjWRgQ03R5T2hL1SkBjXsd7yHIaYT9
T19a6zjjKK19yFRzbVlBLxtUM0SmQdEfMsZ3eJPrnHDpQ2ZpoCsNHMMOSgMM0I2+
e+7ERI8ZjwhP7ln1SJpzDm9+G2tpJQbozRzVEauGaMBfC5ri3tV/pNScTyjSWluv
tJRfaH6o92NKnv3SKzaNQ/dgLDWB+VBHyMvJdrj12qwA+7wB+q150WHwRosbg+Cj
cD1AzHpvWgEf4pjSNHeD6cXkmL9t3i/MBSiByNTgGC/cy1jo8YLMgEPzG/07tkqs
SHY4BOmSuQlpUznbUFh2WrWBsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPJujh9C
brj4K8kSBnV98kfgwDY5MB8GA1UdIwQYMBaAFH14qIcLHlVz1jPJp7AECi7kBdlR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyRC82QTBDRkU5MDFD
MTQxMUVCODJDMDlBNjJDNEY5QUUwMi9mWGlvaHdzZVZYUFdNOG1uc0FRS0x1UUYy
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZYaW9od3NlVlhQV004bW5zQVFLTHVRRjJWRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTYyRC82QTBDRkU5MDFDMTQxMUVCODJDMDlBNjJDNEY5QUUwMi9mWGlvaHdzZVZY
UFdNOG1uc0FRS0x1UUYyVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD/scDAbhFE/B0C0fVDQ34CXOJXzx18rhvRx8Ctwlq7Kd/N4I5KqAkSS/s1aY
nbEg7TrA5fbVprOFnBQSLxqKkwaQAjjm3Bu7Iel2tm1SpNt//vei87VjnYp470B8
mX0XaQWK+8ob06CngbQcIHtSPIadJtVb6yRiKi47Mm1o7qaTMJ3B1T1N73OusY/c
09Yd9yI5y/8fryVU4t4B5hlj4bsGnCunMxjO5iIYHDfVfh9a7NEcFcObNEo6q3SV
y11V/4Qs7VKR4QpiKg+BFcwRhq2RA3G8XMeVulQI449hGRuOK3lwEt6PQUQLFP0m
ls6KjovIN4Qloc6hQvHL2yXJ0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:05 2026 by rpki-client