Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
File:                     y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json)
Hash identifier:          36otYlWcb8FgM3AGg/VwGDVaayhTgx6OoNCAeiQJorI=
Subject key identifier:   08:20:6D:55:3D:DD:65:C3:9E:95:E6:7C:14:74:BB:45:15:8D:31:2C
Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
Certificate issuer:       /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
Manifest number:          013B
Signing time:             Wed 25 Mar 2026 04:37:32 +0000
Manifest this update:     Wed 25 Mar 2026 04:37:32 +0000
Manifest next update:     Wed 01 Apr 2026 04:37:32 +0000
Files and hashes:         1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: YY/OPIBxQyjK1yUyCWmOIkeXm49Pen1IlGoFijAFHN4=)
                          2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: N0mjQ3paWd02SrbPugyLiWD2jfFiR2KxN4PTpCiYbDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
        Validity
            Not Before: Mar 25 04:37:32 2026 GMT
            Not After : Apr  1 04:37:32 2026 GMT
        Subject: CN=69c3668c-7a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f8:33:25:2b:2c:ae:7b:78:6f:09:8c:74:ab:
                    ee:1b:fa:c7:7f:19:3d:12:e5:e6:23:3f:00:b9:be:
                    2f:94:ce:60:8f:d9:1b:3a:2d:c3:9e:34:d7:67:f8:
                    ea:d8:1e:6d:da:08:37:51:77:4a:81:3e:38:99:1b:
                    93:e7:a3:32:47:71:67:28:28:2d:b8:94:35:37:26:
                    32:aa:50:a8:fe:bf:cd:08:af:ed:6e:8c:5f:e1:de:
                    81:78:60:84:c5:10:3e:cb:e9:e4:2a:84:8f:34:ba:
                    2f:89:b0:02:9a:9a:d8:d4:ec:b6:4f:98:44:ab:88:
                    e0:cf:ef:59:8d:78:56:9f:15:56:14:18:8c:5b:84:
                    2d:7e:85:40:07:2a:76:b7:e4:d5:9e:38:6c:c5:7c:
                    02:3a:63:77:c3:b2:9b:86:ba:88:73:ff:7c:02:d9:
                    e8:f2:74:61:e6:03:68:fa:df:5a:67:1a:5f:20:80:
                    95:fe:89:d6:7d:61:2f:df:b8:2a:e6:3f:f9:4a:ee:
                    9a:5d:bd:c3:8c:d7:7b:51:5a:f6:b5:4f:5a:9b:28:
                    bd:f4:46:76:47:c2:91:e9:1a:90:19:1e:9c:b1:83:
                    c4:a6:0a:90:c4:f4:b6:51:b5:55:d3:fe:d2:c8:0d:
                    4b:a3:11:17:b2:dc:00:24:9a:6a:f1:8c:85:89:85:
                    3e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:20:6D:55:3D:DD:65:C3:9E:95:E6:7C:14:74:BB:45:15:8D:31:2C
            X509v3 Authority Key Identifier:
                keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fe:22:0b:b5:e8:3a:52:a3:5b:10:6a:3d:dd:12:b8:1d:c1:
         2e:32:80:66:f9:18:ca:2b:e8:7a:ce:0b:18:f7:0c:16:fd:0e:
         65:fa:a1:cd:fa:58:e4:50:85:b6:da:c0:1e:e4:0e:f3:b2:fe:
         53:74:f8:9f:88:00:81:9e:b1:b6:59:ac:a2:ce:7a:35:82:f9:
         c1:b6:d9:9b:bc:ec:ec:de:1a:72:7b:1b:9f:39:c3:9a:22:cc:
         93:06:12:42:8d:49:59:0d:e9:e7:a7:0a:90:7e:a4:f5:a4:e7:
         5c:6d:48:9c:ec:eb:c4:40:86:76:3e:62:4f:b9:be:16:ac:d1:
         46:2e:bd:aa:1d:bd:41:04:98:58:e3:91:cf:eb:8c:fc:af:c2:
         58:a3:a7:f4:68:8e:ae:81:03:8a:2c:2c:4f:fe:f7:62:0e:51:
         58:e6:01:23:9c:5c:d3:3a:19:2f:ec:47:51:8d:20:dc:68:20:
         56:0a:61:56:df:80:e9:c6:7c:0b:86:f0:de:9a:01:e7:91:bb:
         c6:68:d2:4c:e6:e3:b3:b4:18:10:a5:64:0d:d8:b1:3f:fe:88:
         36:45:22:95:74:7b:99:8c:59:e8:6b:69:fd:63:b1:07:0f:00:
         57:65:16:66:18:82:7b:71:01:d3:6c:ff:7f:a2:bf:80:2c:c6:
         a7:17:78:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDRjUxMTAvBgNVBAUTKENCQkJCQjI0QjIyQjQzNUQxQ0E0OTNBOUQ2M0RDQTc3
OUJFMDc5NkEwHhcNMjYwMzI1MDQzNzMyWhcNMjYwNDAxMDQzNzMyWjAYMRYwFAYD
VQQDEw02OWMzNjY4Yy03YTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8vgzJSssrnt4bwmMdKvuG/rHfxk9EuXmIz8Aub4vlM5gj9kbOi3DnjTXZ/jq
2B5t2gg3UXdKgT44mRuT56MyR3FnKCgtuJQ1NyYyqlCo/r/NCK/tboxf4d6BeGCE
xRA+y+nkKoSPNLovibACmprY1Oy2T5hEq4jgz+9ZjXhWnxVWFBiMW4QtfoVAByp2
t+TVnjhsxXwCOmN3w7KbhrqIc/98Atno8nRh5gNo+t9aZxpfIICV/onWfWEv37gq
5j/5Su6aXb3DjNd7UVr2tU9amyi99EZ2R8KR6RqQGR6csYPEpgqQxPS2UbVV0/7S
yA1LoxEXstwAJJpq8YyFiYU+TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAggbVU9
3WXDnpXmfBR0u0UVjTEsMB8GA1UdIwQYMBaAFMu7uySyK0NdHKSTqdY9yneb4Hlq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS81MzhDMTk2MDQ5
MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclExMGNwSk9wMWozS2Q1dmdl
V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VXby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MENGNS81MzhDMTk2MDQ5MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi95N3U3SkxJclEx
MGNwSk9wMWozS2Q1dmdlV28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkf4iC7XoOlKjWxBqPd0SuB3BLjKAZvkYyivoes4LGPcMFv0OZfqhzfpY5FCF
ttrAHuQO87L+U3T4n4gAgZ6xtlmsos56NYL5wbbZm7zs7N4acnsbnznDmiLMkwYS
Qo1JWQ3p56cKkH6k9aTnXG1InOzrxECGdj5iT7m+FqzRRi69qh29QQSYWOORz+uM
/K/CWKOn9GiOroEDiiwsT/73Yg5RWOYBI5xc0zoZL+xHUY0g3GggVgphVt+A6cZ8
C4bw3poB55G7xmjSTObjs7QYEKVkDdixP/6INkUilXR7mYxZ6Gtp/WOxBw8AV2UW
ZhiCe3EB02z/f6K/gCzGpxd4Vg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:39:27 2026 by rpki-client