Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
File:                     9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft (raw, json)
Hash identifier:          VkN3CtsUqiCbF1Kz4tEOgAGeV59NjCtSteWVBXv7D/s=
Subject key identifier:   BC:84:87:88:CC:B6:66:8A:67:DD:F6:C7:46:13:C2:C3:32:FC:8F:11
Authority key identifier: F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91
Certificate issuer:       /CN=A91E2F80/serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
Manifest number:          0176
Signing time:             Wed 25 Mar 2026 04:06:43 +0000
Manifest this update:     Wed 25 Mar 2026 04:06:43 +0000
Manifest next update:     Wed 01 Apr 2026 04:06:43 +0000
Files and hashes:         1: 9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl (hash: ZETnyieKXMFy1rjQi1u2VmqNFFbvaSvLO5+uhgFxGCo=)
                          2: DAC9D5960C7E11EF9A189E18C4F9AE02.roa (hash: 3ZTRfxQhvuFdMMCMeOtUEE9gemCV8Xo1LJyuC+LNhgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl
                          rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2F80, serialNumber=F410C483A4C8C916FFD4CF420C4C110889798891
        Validity
            Not Before: Mar 25 04:06:43 2026 GMT
            Not After : Apr  1 04:06:43 2026 GMT
        Subject: CN=69c35f53-1537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:66:2b:83:4b:ba:f1:6d:a9:a3:ec:4b:b0:
                    7b:49:0f:8c:c7:54:64:22:5d:07:84:ab:46:39:8b:
                    f3:b9:9b:eb:27:8f:4c:af:e0:c9:23:03:7d:a6:9d:
                    88:2b:83:df:e5:b7:e8:a6:46:f8:66:9d:6c:8a:4e:
                    d0:a5:32:b2:e1:94:80:4f:29:0c:a3:0b:0a:90:1e:
                    0a:74:e9:15:d8:45:d9:c5:49:71:7a:22:5b:59:da:
                    f5:ff:ef:ec:6f:0d:9f:32:28:db:8c:5d:0e:47:e2:
                    5b:9b:3c:ee:b1:37:71:0c:b1:28:c3:7e:f7:a2:dc:
                    7d:e5:07:3c:f4:c7:c1:e0:cc:83:41:55:0c:95:2e:
                    2d:40:1b:92:f8:74:90:20:f5:9e:df:ef:d6:f1:99:
                    da:58:e1:66:62:53:ec:2f:de:a2:a7:b9:11:a5:bf:
                    3f:98:65:82:20:dd:5e:7a:30:e4:14:67:a9:5b:34:
                    8d:ba:b2:18:71:28:7c:90:20:f7:e9:1a:f4:76:8f:
                    bd:6a:c8:ab:df:83:c9:57:4e:09:d4:a7:c2:74:38:
                    e6:a4:e5:5d:de:11:f9:da:ba:52:3d:c5:0a:39:f7:
                    f0:2e:81:e0:d5:13:7d:72:f7:93:58:43:72:ab:10:
                    08:86:3a:c3:d7:5b:47:0b:e0:e7:7f:e7:00:6a:d6:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:84:87:88:CC:B6:66:8A:67:DD:F6:C7:46:13:C2:C3:32:FC:8F:11
            X509v3 Authority Key Identifier:
                keyid:F4:10:C4:83:A4:C8:C9:16:FF:D4:CF:42:0C:4C:11:08:89:79:88:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BDEg6TIyRb_1M9CDEwRCIl5iJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F80/94C54B80039511EF85B69F4EC4F9AE02/9BDEg6TIyRb_1M9CDEwRCIl5iJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b0:94:98:d1:df:bb:15:b4:f2:28:d6:ea:b2:a2:c3:c4:f8:
         49:11:3d:39:bd:11:c0:8a:65:75:bd:d3:92:ee:be:af:40:e7:
         03:1c:bd:45:0b:37:6b:e3:d1:cc:3c:f2:de:09:be:fa:a0:72:
         a1:ae:31:b3:ff:94:26:42:fb:d4:4b:71:28:32:1e:5d:35:c6:
         2c:41:2b:67:ed:16:f9:d3:4d:f2:7f:49:e0:39:4f:bf:e1:23:
         62:0f:49:f8:b4:21:6c:eb:77:97:92:1e:01:e6:55:d7:e6:87:
         cc:a4:22:b4:ca:e1:20:45:6d:db:eb:67:64:48:94:a5:c9:78:
         84:79:57:64:d8:53:58:3d:78:9f:05:1f:5f:15:31:c4:e1:b8:
         73:ad:ca:45:07:3d:3f:69:11:ae:93:ad:61:0f:5e:37:45:b1:
         b4:e6:27:31:80:e2:cc:97:c8:2e:9d:78:de:94:73:32:e7:ba:
         02:23:3a:27:4b:9b:e0:fc:55:9a:e0:e1:3d:4c:83:9c:bb:f7:
         91:e7:13:33:7e:2a:80:56:ae:3e:7b:ba:8a:0a:16:58:82:59:
         a8:f7:11:50:80:51:61:4e:17:23:84:bb:b5:f8:b3:c2:a9:5b:
         36:19:a5:4d:e4:d7:5d:1f:93:90:cd:b3:68:65:82:c2:b8:31:
         72:0d:8b:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTJGODAxMTAvBgNVBAUTKEY0MTBDNDgzQTRDOEM5MTZGRkQ0Q0Y0MjBDNEMxMTA4
ODk3OTg4OTEwHhcNMjYwMzI1MDQwNjQzWhcNMjYwNDAxMDQwNjQzWjAYMRYwFAYD
VQQDEw02OWMzNWY1My0xNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApwFmK4NLuvFtqaPsS7B7SQ+Mx1RkIl0HhKtGOYvzuZvrJ49Mr+DJIwN9pp2I
K4Pf5bfopkb4Zp1sik7QpTKy4ZSATykMowsKkB4KdOkV2EXZxUlxeiJbWdr1/+/s
bw2fMijbjF0OR+JbmzzusTdxDLEow373otx95Qc89MfB4MyDQVUMlS4tQBuS+HSQ
IPWe3+/W8ZnaWOFmYlPsL96ip7kRpb8/mGWCIN1eejDkFGepWzSNurIYcSh8kCD3
6Rr0do+9asir34PJV04J1KfCdDjmpOVd3hH52rpSPcUKOffwLoHg1RN9cveTWENy
qxAIhjrD11tHC+Dnf+cAatZfLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLyEh4jM
tmaKZ932x0YTwsMy/I8RMB8GA1UdIwQYMBaAFPQQxIOkyMkW/9TPQgxMEQiJeYiR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkY4MC85NEM1NEI4MDAz
OTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlSYl8xTTlDREV3UkNJbDVp
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlCREVnNlRJeVJiXzFNOUNERXdSQ0lsNWlKRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MkY4MC85NEM1NEI4MDAzOTUxMUVGODVCNjlGNEVDNEY5QUUwMi85QkRFZzZUSXlS
Yl8xTTlDREV3UkNJbDVpSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAbCUmNHfuxW08ijW6rKiw8T4SRE9Ob0RwIpldb3Tku6+r0DnAxy9RQs3a+PR
zDzy3gm++qByoa4xs/+UJkL71EtxKDIeXTXGLEErZ+0W+dNN8n9J4DlPv+EjYg9J
+LQhbOt3l5IeAeZV1+aHzKQitMrhIEVt2+tnZEiUpcl4hHlXZNhTWD14nwUfXxUx
xOG4c63KRQc9P2kRrpOtYQ9eN0WxtOYnMYDizJfILp143pRzMue6AiM6J0ub4PxV
muDhPUyDnLv3kecTM34qgFauPnu6igoWWIJZqPcRUIBRYU4XI4S7tfizwqlbNhml
TeTXXR+TkM2zaGWCwrgxcg2L/w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:30:17 2026 by rpki-client