Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft
File:                     ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft (raw, json)
Hash identifier:          Fj7MeDOubiBtcrpE/S3QAZdHHZDnwq7xwdpUN2r/H28=
Subject key identifier:   36:E7:54:FE:91:1D:E1:B1:AF:34:E6:72:5C:A7:00:E8:52:09:10:BD
Authority key identifier: 76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC
Certificate issuer:       /CN=A91F26F1/serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC
Certificate serial:       02DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft
Manifest number:          02D3
Signing time:             Wed 25 Mar 2026 01:01:33 +0000
Manifest this update:     Wed 25 Mar 2026 01:01:32 +0000
Manifest next update:     Wed 01 Apr 2026 01:01:32 +0000
Files and hashes:         1: ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl (hash: ZtKXUAo0PpiAOLcwp1UYrEvxdVewpXhfBwcKEGfyhns=)
                          2: 150C1686283511EDABF49D69C4F9AE02.roa (hash: LLGJ17Nou/4s6iU/phgh61bl/Dsvbl9fuqtoB8+Y6Fw=)
                          3: DD31B42E1FE711F187FF82A2033D8C67.roa (hash: ctpRoa7CNvYWvvpKX4etSd1GXiLkNAXBMFuv0jRuPgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl
                          rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F26F1, serialNumber=76CD12AD9E608CAA2C1997B636F450577BE937BC
        Validity
            Not Before: Mar 25 01:01:32 2026 GMT
            Not After : Apr  1 01:01:32 2026 GMT
        Subject: CN=69c333ed-61dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ad:11:8c:bd:d7:89:10:41:ad:62:39:fd:d7:
                    6a:17:f5:2d:6a:26:2d:12:54:f5:fc:65:1b:29:77:
                    c8:8d:54:39:70:f1:ae:38:45:d4:7d:aa:06:66:86:
                    21:de:36:57:69:f0:56:ea:fa:33:78:62:87:19:d5:
                    f6:c2:2d:5f:af:e1:5b:52:6d:d6:6a:c6:49:87:6b:
                    3b:eb:b8:4e:a1:0f:a0:fe:dc:bd:f2:3d:0e:b2:9d:
                    81:18:d6:01:7f:3e:c7:c4:b8:dc:a2:40:90:5c:e3:
                    78:df:85:82:9f:2c:a4:f5:db:ab:6c:01:c8:7d:08:
                    53:a5:37:cb:71:43:45:7e:c0:11:ba:09:d9:c7:56:
                    a5:fb:24:89:34:24:af:1e:12:ca:66:82:4b:ed:d3:
                    d1:3c:fe:88:ed:c6:20:f9:ce:dd:aa:b0:cb:1b:f0:
                    02:04:ed:85:7e:c0:eb:1c:62:da:c6:76:d9:99:f3:
                    41:78:1a:5c:dc:35:ee:04:83:aa:0f:da:41:4b:f6:
                    7a:26:e4:54:56:84:2c:54:0f:08:a6:10:cc:de:0b:
                    8a:80:d8:85:08:91:45:4c:ef:12:32:eb:4f:09:0e:
                    ab:e5:2f:3b:49:3b:30:db:56:f5:bb:f0:4a:17:7a:
                    1c:53:88:0c:80:18:dd:b1:49:dc:4a:e9:0d:f4:55:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E7:54:FE:91:1D:E1:B1:AF:34:E6:72:5C:A7:00:E8:52:09:10:BD
            X509v3 Authority Key Identifier:
                keyid:76:CD:12:AD:9E:60:8C:AA:2C:19:97:B6:36:F4:50:57:7B:E9:37:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0SrZ5gjKosGZe2NvRQV3vpN7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F26F1/88F1C784283111ED9495D42AC4F9AE02/ds0SrZ5gjKosGZe2NvRQV3vpN7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b8:98:27:60:f6:c0:93:f4:bc:50:a1:93:bc:2b:a5:68:92:
         62:3e:47:2a:71:f2:32:47:c9:f1:a5:91:e3:7c:a6:22:4f:f7:
         f5:05:cd:9d:20:6d:01:05:a8:b8:37:f5:80:82:c6:d3:f0:d8:
         17:ee:f0:20:f5:a6:a5:a9:1f:3d:30:8e:59:28:0f:01:5e:9b:
         d1:65:fa:6e:f5:bf:bc:56:d4:d9:98:5a:5d:35:53:f8:08:6a:
         44:26:4b:12:dc:b4:ef:44:86:b0:ac:69:cc:6e:9d:88:44:35:
         56:d5:3b:aa:c9:e0:8d:57:dc:58:07:10:15:c9:0b:6a:9a:37:
         2d:ea:23:18:f4:5f:72:61:f9:97:c1:a3:e8:6b:6c:a3:9e:81:
         04:26:de:b3:97:23:de:9d:53:b4:5c:d5:13:73:7a:59:be:9e:
         64:7a:89:7d:e9:1a:76:76:b4:52:2c:2f:15:87:5c:3d:9e:b5:
         ce:50:61:a0:8e:6d:cc:95:91:67:66:a4:ad:a0:55:87:b1:20:
         49:ec:59:56:19:86:ca:eb:c8:51:fb:63:cc:3d:54:77:0a:51:
         a3:60:26:db:19:c2:58:72:c9:45:dc:74:38:59:c0:58:6f:55:
         33:6c:b5:be:1d:04:94:9e:50:06:69:13:c5:58:c3:32:a8:63:
         87:49:83:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjI2RjExMTAvBgNVBAUTKDc2Q0QxMkFEOUU2MDhDQUEyQzE5OTdCNjM2RjQ1MDU3
N0JFOTM3QkMwHhcNMjYwMzI1MDEwMTMyWhcNMjYwNDAxMDEwMTMyWjAYMRYwFAYD
VQQDEw02OWMzMzNlZC02MWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA660RjL3XiRBBrWI5/ddqF/UtaiYtElT1/GUbKXfIjVQ5cPGuOEXUfaoGZoYh
3jZXafBW6vozeGKHGdX2wi1fr+FbUm3WasZJh2s767hOoQ+g/ty98j0Osp2BGNYB
fz7HxLjcokCQXON434WCnyyk9durbAHIfQhTpTfLcUNFfsARugnZx1al+ySJNCSv
HhLKZoJL7dPRPP6I7cYg+c7dqrDLG/ACBO2FfsDrHGLaxnbZmfNBeBpc3DXuBIOq
D9pBS/Z6JuRUVoQsVA8IphDM3guKgNiFCJFFTO8SMutPCQ6r5S87STsw21b1u/BK
F3ocU4gMgBjdsUncSukN9FVFqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbnVP6R
HeGxrzTmclynAOhSCRC9MB8GA1UdIwQYMBaAFHbNEq2eYIyqLBmXtjb0UFd76Te8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjZGMS84OEYxQzc4NDI4
MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pLb3NHWmUyTnZSUVYzdnBO
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RzMFNyWjVnaktvc0daZTJOdlJRVjN2cE43dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MjZGMS84OEYxQzc4NDI4MzExMUVEOTQ5NUQ0MkFDNEY5QUUwMi9kczBTclo1Z2pL
b3NHWmUyTnZSUVYzdnBON3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJbiYJ2D2wJP0vFChk7wrpWiSYj5HKnHyMkfJ8aWR43ymIk/39QXNnSBtAQWo
uDf1gILG0/DYF+7wIPWmpakfPTCOWSgPAV6b0WX6bvW/vFbU2ZhaXTVT+AhqRCZL
Ety070SGsKxpzG6diEQ1VtU7qsngjVfcWAcQFckLapo3LeojGPRfcmH5l8Gj6Gts
o56BBCbes5cj3p1TtFzVE3N6Wb6eZHqJfekadna0UiwvFYdcPZ61zlBhoI5tzJWR
Z2akraBVh7EgSexZVhmGyuvIUftjzD1UdwpRo2Am2xnCWHLJRdx0OFnAWG9VM2y1
vh0ElJ5QBmkTxVjDMqhjh0mDZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:57:01 2026 by rpki-client