Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
File:                     dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json)
Hash identifier:          tfkvpF+SVuOQFaE8ZQBNXaDz54rLeQ93WKguGJJRDtE=
Subject key identifier:   21:D8:CE:76:71:A2:A2:38:CC:73:18:3A:41:AB:2E:BD:34:F8:96:2E
Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
Certificate issuer:       /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
Manifest number:          0218
Signing time:             Wed 25 Mar 2026 02:12:47 +0000
Manifest this update:     Wed 25 Mar 2026 02:12:46 +0000
Manifest next update:     Wed 01 Apr 2026 02:12:46 +0000
Files and hashes:         1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: HbBS5w289pOGGy7QzCYs0E59sbPA4YH597dptCPrBlc=)
                          2: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: 5THegraPgMqqp6VrhQyR4hOqJ9d+jYAhvqCx1inYwhs=)
                          3: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: 93lqVQhsdgkNqe+QLKSt6rzwX0cHhLHTkYfLV3iVFU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
        Validity
            Not Before: Mar 25 02:12:46 2026 GMT
            Not After : Apr  1 02:12:46 2026 GMT
        Subject: CN=69c3449e-529a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:1d:e5:8f:65:75:1f:5f:8f:16:78:1b:45:
                    e2:4c:2b:10:2b:fe:8a:fc:f3:e0:18:79:76:fc:84:
                    f4:fe:ed:9e:c6:c8:23:42:19:f2:6c:75:f7:a4:2b:
                    b3:87:8c:c7:92:bf:81:96:dc:59:ba:38:57:b2:70:
                    bd:3e:27:eb:ee:25:85:7e:53:8a:96:16:58:5b:c0:
                    2d:a4:8e:ad:b7:41:e4:48:90:8a:eb:95:c8:e0:ad:
                    1f:c2:53:9a:91:f2:25:11:94:2c:1f:e0:87:c4:10:
                    e0:68:e7:b7:c4:28:14:69:d3:ac:2d:91:2c:09:0b:
                    cc:22:6c:d4:fc:91:3e:f2:41:d2:0b:1d:9a:d1:dd:
                    cc:f6:ed:73:b9:1c:f9:1d:f9:08:76:8e:55:eb:4d:
                    f2:17:2c:c7:59:46:82:42:b0:06:5a:ee:e6:5b:52:
                    f6:01:9b:1b:f3:ff:d2:90:05:7b:2a:3c:a0:b5:25:
                    87:8f:6a:d6:86:f4:69:2f:6d:4b:3c:57:ca:8c:a5:
                    6f:2d:ce:a2:40:b3:cb:29:be:e2:ce:d2:5d:87:dc:
                    be:a1:f2:33:ea:9b:2e:52:5d:81:6a:88:94:21:eb:
                    c9:2b:7f:77:a6:07:9f:a3:fc:8f:bd:c2:63:6d:b9:
                    b3:23:3e:30:c8:26:24:2d:0e:49:26:c1:36:91:77:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D8:CE:76:71:A2:A2:38:CC:73:18:3A:41:AB:2E:BD:34:F8:96:2E
            X509v3 Authority Key Identifier:
                keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:93:3e:9a:a5:52:7c:6f:57:3e:b3:28:27:4a:75:e4:f6:d7:
         a3:1e:f0:05:4e:7f:65:a4:38:c9:63:7b:c4:ef:36:6e:84:5c:
         89:ea:b7:0c:b7:4b:5e:7c:ba:a7:bc:ff:d5:d0:70:c2:d2:73:
         38:d3:67:89:74:c2:9f:64:ff:0c:60:8f:c8:7f:26:33:25:d8:
         b8:a8:9c:c0:da:52:7f:35:78:3c:ae:46:33:ce:52:5f:2a:f5:
         ab:f8:52:b3:03:02:62:f0:11:46:01:48:ce:c2:ed:8b:2b:ec:
         17:9a:e5:d7:68:b3:8b:d1:33:fa:e0:bb:88:33:9f:ef:ef:e8:
         5b:ba:71:93:c9:f3:f7:47:36:6f:1b:0d:b9:c6:4d:8c:c6:3e:
         d5:82:73:41:b1:ad:c5:9b:c6:c7:76:a1:88:30:85:6e:30:17:
         cf:35:ac:ca:19:77:0f:12:7a:49:5e:a9:08:d3:43:40:f1:6c:
         ad:8c:0f:e9:fb:77:32:25:f1:78:0c:6b:53:8c:9e:ae:63:68:
         6f:2c:54:02:53:5b:26:01:69:d8:2e:83:4f:73:82:59:fd:55:
         ed:d9:f7:cf:43:44:d9:6d:7a:47:5b:ee:85:a5:39:c1:92:2a:
         71:21:86:f3:d3:c9:66:90:ef:8a:3d:ee:60:a1:a8:58:6e:56:
         1a:03:0e:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE
REM0MzhGOTQwHhcNMjYwMzI1MDIxMjQ2WhcNMjYwNDAxMDIxMjQ2WjAYMRYwFAYD
VQQDEw02OWMzNDQ5ZS01MjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm9gd5Y9ldR9fjxZ4G0XiTCsQK/6K/PPgGHl2/IT0/u2exsgjQhnybHX3pCuz
h4zHkr+BltxZujhXsnC9Pifr7iWFflOKlhZYW8AtpI6tt0HkSJCK65XI4K0fwlOa
kfIlEZQsH+CHxBDgaOe3xCgUadOsLZEsCQvMImzU/JE+8kHSCx2a0d3M9u1zuRz5
HfkIdo5V603yFyzHWUaCQrAGWu7mW1L2AZsb8//SkAV7KjygtSWHj2rWhvRpL21L
PFfKjKVvLc6iQLPLKb7iztJdh9y+ofIz6psuUl2BaoiUIevJK393pgefo/yPvcJj
bbmzIz4wyCYkLQ5JJsE2kXfaxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHYznZx
oqI4zHMYOkGrLr00+JYuMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy
RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq
NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT
ckc1dzNONl8xVWZkeERqNVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhpM+mqVSfG9XPrMoJ0p15PbXox7wBU5/ZaQ4yWN7xO82boRcieq3DLdLXny6
p7z/1dBwwtJzONNniXTCn2T/DGCPyH8mMyXYuKicwNpSfzV4PK5GM85SXyr1q/hS
swMCYvARRgFIzsLtiyvsF5rl12izi9Ez+uC7iDOf7+/oW7pxk8nz90c2bxsNucZN
jMY+1YJzQbGtxZvGx3ahiDCFbjAXzzWsyhl3DxJ6SV6pCNNDQPFsrYwP6ft3MiXx
eAxrU4yermNobyxUAlNbJgFp2C6DT3OCWf1V7dn3z0NE2W16R1vuhaU5wZIqcSGG
89PJZpDvij3uYKGoWG5WGgMOnQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:20 2026 by rpki-client