Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
File:                     C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json)
Hash identifier:          mx8YXYPud9ECmcvw70PDZTcHG+DkGL2GdiV7PKXViUU=
Subject key identifier:   50:44:99:43:B0:58:3C:D7:90:65:BE:49:DB:8A:F3:07:C8:F1:05:78
Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
Certificate issuer:       /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
Certificate serial:       01C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
Manifest number:          01BB
Signing time:             Wed 25 Mar 2026 03:10:16 +0000
Manifest this update:     Wed 25 Mar 2026 03:10:15 +0000
Manifest next update:     Wed 01 Apr 2026 03:10:15 +0000
Files and hashes:         1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: GRmaYC/bYEZLmCRL7N2f08PCVt3sj7kxh3wtSYOI4J4=)
                          2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: 0ULeWis5k5ScEy2JfIawyIstIOTvRt9YF0f+ToPSQIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl
                          rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
        Validity
            Not Before: Mar 25 03:10:15 2026 GMT
            Not After : Apr  1 03:10:15 2026 GMT
        Subject: CN=69c35218-efb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:b1:d2:b2:06:4e:f1:28:df:f0:ec:7a:0a:
                    c3:d2:26:8b:bb:78:78:df:c7:d3:c1:f9:b0:93:11:
                    48:e9:78:eb:45:86:46:ad:dc:23:c6:11:4b:a7:36:
                    8d:c3:c3:21:fd:7c:86:d0:54:9b:78:88:51:7d:af:
                    27:a2:5f:f0:0e:01:7a:3d:18:01:3b:b5:a5:fa:8b:
                    4c:4b:49:d2:ea:ec:fe:93:fe:57:bd:fc:f2:3c:38:
                    1c:e1:fe:e2:d2:ff:92:21:70:b0:d6:46:12:5e:80:
                    7c:cf:dc:3f:fe:d2:68:89:88:44:fc:6b:a0:5c:89:
                    2d:2a:b5:75:8c:fc:77:71:2d:7b:c9:8f:28:8e:49:
                    24:23:64:06:23:3c:f3:84:12:24:c8:56:e5:16:ce:
                    16:29:0d:0a:09:c9:4a:af:4b:aa:8e:8a:27:4a:86:
                    b1:d6:51:59:ca:b7:f1:4c:7c:f3:38:84:21:56:d8:
                    59:aa:a8:bd:29:14:83:76:b4:fb:04:38:c1:5d:bc:
                    43:3e:91:ca:a5:4d:b2:ca:05:73:10:28:ff:e9:3e:
                    fe:f4:42:9f:ad:38:3a:2a:16:b5:90:05:c0:90:89:
                    66:d6:c2:e1:e3:d9:60:cf:26:29:30:1b:95:95:19:
                    09:2d:65:b2:c2:de:70:85:e6:58:b3:32:e3:5b:2a:
                    67:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:44:99:43:B0:58:3C:D7:90:65:BE:49:DB:8A:F3:07:C8:F1:05:78
            X509v3 Authority Key Identifier:
                keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:79:01:2f:5c:8f:85:96:8b:6b:2d:5a:32:f3:69:c7:42:51:
         e0:f9:1e:d9:37:69:27:3a:1b:da:80:f2:ad:ef:ec:ab:3f:32:
         07:3d:95:d6:2d:ae:45:45:4d:66:fe:e0:30:67:64:79:47:3c:
         80:6b:22:94:c5:8c:2b:29:7e:f6:a7:cd:dc:5e:df:ce:51:70:
         fa:6e:0a:13:41:4b:53:df:aa:b0:4d:fd:cb:87:ef:14:0e:a6:
         89:32:c2:84:5b:30:3b:21:9c:96:43:f1:08:08:a9:5f:7d:22:
         5a:ed:b7:6d:52:fb:a9:bf:de:cf:2b:9f:cb:c0:c5:3f:06:4b:
         c3:87:b7:bf:81:f0:71:91:4f:ff:4d:42:15:f9:b8:6b:96:e0:
         81:39:dc:e8:6b:6a:66:31:65:3d:0b:e1:c4:54:c0:96:7f:bc:
         03:cc:ae:e5:39:b3:67:49:02:66:4b:03:8d:34:ac:1c:41:d6:
         5a:29:aa:2a:51:9e:a4:69:26:9a:30:ba:dc:38:c0:63:6d:f3:
         21:20:dd:58:2b:fe:78:c4:5d:93:06:43:ad:d0:d9:57:44:57:
         9f:76:17:2c:63:6e:bb:1b:29:8f:64:6f:e0:82:0d:f5:50:c7:
         d8:03:27:1e:5e:52:b6:c5:6b:28:7f:bf:55:c0:c2:6e:ba:56:
         23:12:24:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1NjY2N0ZFQ0Ux
RjYxQjQ5NEIwHhcNMjYwMzI1MDMxMDE1WhcNMjYwNDAxMDMxMDE1WjAYMRYwFAYD
VQQDEw02OWMzNTIxOC1lZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqLCx0rIGTvEo3/DsegrD0iaLu3h438fTwfmwkxFI6XjrRYZGrdwjxhFLpzaN
w8Mh/XyG0FSbeIhRfa8nol/wDgF6PRgBO7Wl+otMS0nS6uz+k/5XvfzyPDgc4f7i
0v+SIXCw1kYSXoB8z9w//tJoiYhE/GugXIktKrV1jPx3cS17yY8ojkkkI2QGIzzz
hBIkyFblFs4WKQ0KCclKr0uqjoonSoax1lFZyrfxTHzzOIQhVthZqqi9KRSDdrT7
BDjBXbxDPpHKpU2yygVzECj/6T7+9EKfrTg6Kha1kAXAkIlm1sLh49lgzyYpMBuV
lRkJLWWywt5wheZYszLjWypn1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBEmUOw
WDzXkGW+SduK8wfI8QV4MB8GA1UdIwQYMBaAFAuBPiu6hAaetDTWVmZ/7OH2G0lL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E4RS9BMDUxNTZBNjgz
NUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJwNjBOTlpXWm5fczRmWWJT
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
N0E4RS9BMDUxNTZBNjgzNUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJw
NjBOTlpXWm5fczRmWWJTVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoHkBL1yPhZaLay1aMvNpx0JR4Pke2TdpJzob2oDyre/sqz8yBz2V1i2uRUVN
Zv7gMGdkeUc8gGsilMWMKyl+9qfN3F7fzlFw+m4KE0FLU9+qsE39y4fvFA6miTLC
hFswOyGclkPxCAipX30iWu23bVL7qb/ezyufy8DFPwZLw4e3v4HwcZFP/01CFfm4
a5bggTnc6GtqZjFlPQvhxFTAln+8A8yu5TmzZ0kCZksDjTSsHEHWWimqKlGepGkm
mjC63DjAY23zISDdWCv+eMRdkwZDrdDZV0RXn3YXLGNuuxspj2Rv4IIN9VDH2AMn
Hl5StsVrKH+/VcDCbrpWIxIknw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:14 2026 by rpki-client