Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
File:                     CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json)
Hash identifier:          KCinSVPTFhw+KWOZGNTbj9vsD7pD/24d4pUpGBSQiuE=
Subject key identifier:   B7:60:0D:4C:24:CA:99:2D:A1:3C:E1:2A:C7:14:F1:86:A4:2E:8B:C1
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Certificate issuer:       /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
Manifest number:          0260
Signing time:             Wed 25 Mar 2026 01:36:59 +0000
Manifest this update:     Wed 25 Mar 2026 01:36:59 +0000
Manifest next update:     Wed 01 Apr 2026 01:36:59 +0000
Files and hashes:         1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: v5LbdLgbq31i3axVFrk5joIOjoXFcNKn3+owheWkMOQ=)
                          2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: iZ4HCtJL7rID/wZnZvAzs70hw+YNw3/gczs7CGb7Bb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
        Validity
            Not Before: Mar 25 01:36:59 2026 GMT
            Not After : Apr  1 01:36:59 2026 GMT
        Subject: CN=69c33c3b-c55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4b:80:47:a4:55:84:2d:2a:f4:84:9d:6d:39:
                    c6:99:8f:98:c7:3c:04:d3:57:6b:57:15:7c:07:78:
                    7c:92:51:47:a8:09:5b:88:1f:0a:dc:02:6c:d9:c4:
                    ce:42:86:1b:21:78:e1:3b:d3:c2:cf:1c:01:4f:59:
                    21:e8:9b:29:20:36:2f:fe:34:2e:dd:d8:32:78:43:
                    bc:ae:45:18:7a:92:95:d8:7a:17:ea:c5:aa:f3:7b:
                    f1:62:7b:0d:9b:41:7a:ff:14:ef:29:1f:55:04:21:
                    c7:9d:9a:58:fc:3b:de:65:95:a3:af:f3:a8:36:8f:
                    51:5e:c4:a8:87:bd:90:26:c5:43:c4:97:a9:ac:db:
                    b7:e1:48:12:19:7e:97:d7:4a:41:3f:bd:c1:b8:1f:
                    c3:0b:35:f6:5d:c0:7f:84:2e:08:75:53:06:15:25:
                    44:12:6d:86:01:2d:9e:c9:ad:61:46:63:ab:1f:cc:
                    f1:e3:08:21:53:0e:92:4d:e2:bd:f8:ed:2e:f3:b4:
                    7a:c2:2c:8d:e4:84:84:7c:b2:30:23:3a:3d:0f:50:
                    6c:7f:22:6a:f4:4d:c9:31:69:cf:6b:b6:6f:9c:eb:
                    7a:58:7d:8e:97:76:29:68:1e:f6:a2:1e:95:26:f6:
                    26:ff:d4:6a:e7:67:e9:a3:65:87:6c:14:e4:8a:06:
                    f6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:60:0D:4C:24:CA:99:2D:A1:3C:E1:2A:C7:14:F1:86:A4:2E:8B:C1
            X509v3 Authority Key Identifier:
                keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:78:6e:54:8c:b9:cf:db:6f:ee:dc:a6:23:b1:c9:3e:39:48:
         f7:ed:4f:14:4a:7e:7a:b6:5b:61:a8:08:8e:b7:9b:5f:6e:5b:
         ef:c6:27:7c:38:2d:d9:81:c0:3a:1d:9d:70:d0:56:70:fe:5f:
         7b:c6:b4:ce:b2:26:90:cd:47:5c:62:65:3c:3a:56:57:f9:3c:
         fd:d8:f6:a7:1b:ff:c8:25:45:b3:f7:5c:0f:57:bf:43:a3:c8:
         d2:aa:78:b5:3d:8e:ef:b9:0a:20:9c:96:30:05:00:b5:82:89:
         59:75:48:78:45:e9:64:e2:2f:a4:48:b5:a4:64:c3:9b:d0:11:
         00:27:9c:13:49:a7:69:ac:bd:d5:67:bd:99:87:8d:ee:32:ef:
         4d:3f:51:69:dd:e5:ff:04:9e:1b:2c:39:6d:59:d1:ca:6c:b1:
         ae:91:6e:a4:70:eb:6f:f2:80:46:29:cc:07:31:30:0f:2a:d1:
         46:41:f7:af:d8:5d:41:af:d5:ad:8f:8a:8c:9f:95:c1:f1:56:
         aa:e0:f6:24:cb:74:c3:f2:8c:09:bc:6a:2e:a9:1e:90:91:1e:
         a0:fd:5f:0b:5c:c6:37:28:55:18:86:4f:ae:f5:80:ee:79:7a:
         fd:04:db:5d:03:58:f1:95:8f:41:4f:d2:39:4c:dd:79:cc:60:
         81:74:1e:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVCMkUxMTAvBgNVBAUTKDA5OUM4MTVGQ0E2ODJBNkUyODYwNEZFOTYyRkQxMDcx
NTgyN0U5NUQwHhcNMjYwMzI1MDEzNjU5WhcNMjYwNDAxMDEzNjU5WjAYMRYwFAYD
VQQDEw02OWMzM2MzYi1jNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8UuAR6RVhC0q9ISdbTnGmY+YxzwE01drVxV8B3h8klFHqAlbiB8K3AJs2cTO
QoYbIXjhO9PCzxwBT1kh6JspIDYv/jQu3dgyeEO8rkUYepKV2HoX6sWq83vxYnsN
m0F6/xTvKR9VBCHHnZpY/DveZZWjr/OoNo9RXsSoh72QJsVDxJeprNu34UgSGX6X
10pBP73BuB/DCzX2XcB/hC4IdVMGFSVEEm2GAS2eya1hRmOrH8zx4wghUw6STeK9
+O0u87R6wiyN5ISEfLIwIzo9D1BsfyJq9E3JMWnPa7ZvnOt6WH2Ol3YpaB72oh6V
JvYm/9Rq52fpo2WHbBTkigb2GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdgDUwk
ypktoTzhKscU8YakLovBMB8GA1UdIwQYMBaAFAmcgV/KaCpuKGBP6WL9EHFYJ+ld
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIyRS82RkM4QkZERThD
MjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0ttNG9ZRV9wWXYwUWNWZ242
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NaeUJYOHBvS200b1lFX3BZdjBRY1ZnbjZWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUIyRS82RkM4QkZERThDMjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0tt
NG9ZRV9wWXYwUWNWZ242VjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWHhuVIy5z9tv7tymI7HJPjlI9+1PFEp+erZbYagIjrebX25b78YnfDgt2YHA
Oh2dcNBWcP5fe8a0zrImkM1HXGJlPDpWV/k8/dj2pxv/yCVFs/dcD1e/Q6PI0qp4
tT2O77kKIJyWMAUAtYKJWXVIeEXpZOIvpEi1pGTDm9ARACecE0mnaay91We9mYeN
7jLvTT9Rad3l/wSeGyw5bVnRymyxrpFupHDrb/KARinMBzEwDyrRRkH3r9hdQa/V
rY+KjJ+VwfFWquD2JMt0w/KMCbxqLqkekJEeoP1fC1zGNyhVGIZPrvWA7nl6/QTb
XQNY8ZWPQU/SOUzdecxggXQeDA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:26 2026 by rpki-client