Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft
File:                     M77xZK7T_RPWmutR5aDM85n5QUQ.mft (raw, json)
Hash identifier:          YkHSbRfo392QQYKJRPffZu+gmnDIw/nrPyZYP5wfYgY=
Subject key identifier:   6D:0D:A3:92:74:C8:C4:0C:27:48:85:81:0E:94:F6:C6:FA:E3:3B:A9
Authority key identifier: 33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44
Certificate issuer:       /CN=A91E2E37/serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144
Certificate serial:       01A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft
Manifest number:          01A3
Signing time:             Wed 25 Mar 2026 03:26:44 +0000
Manifest this update:     Wed 25 Mar 2026 03:26:43 +0000
Manifest next update:     Wed 01 Apr 2026 03:26:43 +0000
Files and hashes:         1: M77xZK7T_RPWmutR5aDM85n5QUQ.crl (hash: wTPk4ct9yNdRiL2IbRl/ho97vBS8RTaCqFmp/DflcCA=)
                          2: B4B20B56AA3D11EEA301A133C4F9AE02.roa (hash: 5a81yUw7svYcHI2YHD7mUYLB1Q2kCR6CGAty1xHmoBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2E37, serialNumber=33BEF164AED3FD13D69AEB51E5A0CCF399F94144
        Validity
            Not Before: Mar 25 03:26:43 2026 GMT
            Not After : Apr  1 03:26:43 2026 GMT
        Subject: CN=69c355f3-f6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:24:c6:b4:22:19:e5:7f:63:b0:0f:e4:33:
                    f9:01:a7:3e:82:e3:95:3c:90:21:f1:48:49:17:15:
                    71:43:60:f1:91:4c:41:b9:c7:27:47:86:d9:10:94:
                    78:1c:28:03:ba:e8:76:76:77:a8:f5:91:fb:af:bd:
                    30:99:ca:af:35:f7:7d:69:63:f0:c3:5f:d5:b0:c8:
                    b7:c7:a1:23:40:de:00:05:75:76:e6:93:97:f7:c0:
                    98:26:c7:a0:4a:91:33:7d:f2:20:84:d5:23:ae:fc:
                    8e:1b:22:27:f5:55:25:fc:56:2e:50:81:46:38:72:
                    5d:50:18:64:81:bf:20:fa:2f:7e:b1:40:d2:29:4f:
                    b7:82:f0:35:cd:89:0e:50:3e:a6:d2:e7:7f:05:57:
                    a4:35:eb:53:5d:9b:b6:85:64:54:d1:f7:0a:d2:6c:
                    f7:42:09:e0:68:e1:36:1c:86:b4:e7:1f:ae:bd:b8:
                    b2:c0:bb:7a:bc:1f:fb:92:79:6e:81:ed:a3:f9:9f:
                    05:5c:f3:05:f9:25:79:f4:6b:52:79:39:5b:52:44:
                    57:f2:4e:93:81:50:82:4b:19:f3:38:47:96:f2:25:
                    1f:41:04:b8:50:17:5d:33:c4:81:e2:6d:72:d9:76:
                    d4:09:e1:e1:8a:b2:98:d0:33:62:87:e5:9e:98:da:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0D:A3:92:74:C8:C4:0C:27:48:85:81:0E:94:F6:C6:FA:E3:3B:A9
            X509v3 Authority Key Identifier:
                keyid:33:BE:F1:64:AE:D3:FD:13:D6:9A:EB:51:E5:A0:CC:F3:99:F9:41:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M77xZK7T_RPWmutR5aDM85n5QUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E37/4AC69388AA3D11EE9B839632C4F9AE02/M77xZK7T_RPWmutR5aDM85n5QUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1c:af:cc:24:38:4a:51:ba:81:ea:47:1e:5d:24:b1:8d:b4:
         88:11:ec:83:e0:a8:a5:9b:b3:97:c9:d6:f3:19:52:c0:a2:b1:
         1b:95:a0:27:81:67:f4:cc:84:c3:65:f7:3a:12:78:ce:6c:58:
         71:56:47:49:5c:5e:5c:c7:fe:9b:17:06:31:d6:cb:45:ab:db:
         40:bd:22:33:28:60:6b:b3:99:07:d7:19:d2:58:06:c4:65:05:
         f3:fe:8f:3d:33:96:e7:f2:4f:aa:b0:24:09:99:3d:78:00:eb:
         5a:32:44:fb:8b:ed:50:56:ef:e8:58:dc:a0:01:ee:dd:29:a3:
         b5:80:27:f7:09:77:91:0f:bb:d8:33:79:99:0f:51:59:48:83:
         28:a4:9f:f4:94:82:4e:a0:70:e7:73:f3:8d:68:66:32:5b:bd:
         75:b4:e0:c1:ff:54:42:c4:88:0c:79:ba:4d:22:ac:87:7d:86:
         dc:94:24:29:cc:b2:c3:de:19:17:36:88:a8:32:7d:38:b3:92:
         d2:ee:d6:fe:0b:46:fa:59:f7:97:78:3e:6a:e6:9c:fe:4f:c5:
         77:42:25:ce:cf:0e:cd:a8:a7:2b:1d:f7:87:1b:09:92:d6:45:
         97:13:c2:7d:9b:04:a6:6c:2b:49:85:79:7f:01:34:41:32:be:
         76:0f:94:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTJFMzcxMTAvBgNVBAUTKDMzQkVGMTY0QUVEM0ZEMTNENjlBRUI1MUU1QTBDQ0Yz
OTlGOTQxNDQwHhcNMjYwMzI1MDMyNjQzWhcNMjYwNDAxMDMyNjQzWjAYMRYwFAYD
VQQDEw02OWMzNTVmMy1mNmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArlwkxrQiGeV/Y7AP5DP5Aac+guOVPJAh8UhJFxVxQ2DxkUxBuccnR4bZEJR4
HCgDuuh2dneo9ZH7r70wmcqvNfd9aWPww1/VsMi3x6EjQN4ABXV25pOX98CYJseg
SpEzffIghNUjrvyOGyIn9VUl/FYuUIFGOHJdUBhkgb8g+i9+sUDSKU+3gvA1zYkO
UD6m0ud/BVekNetTXZu2hWRU0fcK0mz3QgngaOE2HIa05x+uvbiywLt6vB/7knlu
ge2j+Z8FXPMF+SV59GtSeTlbUkRX8k6TgVCCSxnzOEeW8iUfQQS4UBddM8SB4m1y
2XbUCeHhirKY0DNih+WemNpZhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0No5J0
yMQMJ0iFgQ6U9sb64zupMB8GA1UdIwQYMBaAFDO+8WSu0/0T1prrUeWgzPOZ+UFE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkUzNy80QUM2OTM4OEFB
M0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9SUFdtdXRSNWFETTg1bjVR
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL003N3haSzdUX1JQV211dFI1YURNODVuNVFVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MkUzNy80QUM2OTM4OEFBM0QxMUVFOUI4Mzk2MzJDNEY5QUUwMi9NNzd4Wks3VF9S
UFdtdXRSNWFETTg1bjVRVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEByvzCQ4SlG6gepHHl0ksY20iBHsg+CopZuzl8nW8xlSwKKxG5WgJ4Fn9MyE
w2X3OhJ4zmxYcVZHSVxeXMf+mxcGMdbLRavbQL0iMyhga7OZB9cZ0lgGxGUF8/6P
PTOW5/JPqrAkCZk9eADrWjJE+4vtUFbv6FjcoAHu3SmjtYAn9wl3kQ+72DN5mQ9R
WUiDKKSf9JSCTqBw53PzjWhmMlu9dbTgwf9UQsSIDHm6TSKsh32G3JQkKcyyw94Z
FzaIqDJ9OLOS0u7W/gtG+ln3l3g+auac/k/Fd0Ilzs8OzainKx33hxsJktZFlxPC
fZsEpmwrSYV5fwE0QTK+dg+UUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:51 2026 by rpki-client