Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
File:                     rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json)
Hash identifier:          qujx3No+3gxZguB9e5dZDu9KEq2KIRSDh3hW/3stz6M=
Subject key identifier:   CA:A2:C1:21:74:C4:A3:8B:29:B3:EC:30:DC:31:C9:51:70:AA:E7:F9
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Certificate issuer:       /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial:       05F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
Manifest number:          05EF
Signing time:             Tue 24 Mar 2026 22:38:04 +0000
Manifest this update:     Tue 24 Mar 2026 22:38:03 +0000
Manifest next update:     Tue 31 Mar 2026 22:38:03 +0000
Files and hashes:         1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: Wbvq3Gb0dCShYZWVakmiJzv+vO2z4PXrhocknVhv5/o=)
                          2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: LMpJMuYVTyY2sVa9uHYEonkQ7494tf0v3yx1gmrO5vY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
                          rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525 (0x5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
        Validity
            Not Before: Mar 24 22:38:03 2026 GMT
            Not After : Mar 31 22:38:03 2026 GMT
        Subject: CN=69c3124c-8dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:f2:29:69:ee:05:e9:c5:cd:b6:44:1c:85:
                    a5:f5:6a:70:bb:b3:db:02:4a:b1:ce:e1:74:e9:95:
                    7e:d8:7a:f9:5a:6d:2c:93:64:00:73:13:e1:9a:d9:
                    8a:60:39:cb:d7:fc:24:8f:51:ee:3a:5c:24:e2:86:
                    d1:33:87:c3:1a:c8:b0:59:b7:4f:2c:39:05:5a:08:
                    39:bc:9c:af:70:55:c0:bd:49:7d:f0:04:40:64:c0:
                    40:42:9b:53:c1:28:9c:db:f3:6a:e7:e1:27:63:74:
                    74:80:f0:38:be:81:98:37:aa:02:3b:53:af:8f:dc:
                    12:0a:8e:1c:73:7e:b1:c3:11:d4:d2:ea:d0:b7:86:
                    ea:8c:32:70:04:ee:86:8c:0c:d0:39:84:cb:81:71:
                    7a:55:6f:8b:78:90:00:97:c8:2a:1c:b0:3d:b3:1d:
                    91:9a:32:94:4d:8c:3f:c4:bd:00:0a:ba:30:71:0e:
                    22:cc:f2:23:41:90:8b:cf:77:d6:48:0c:c0:d1:74:
                    9e:35:3c:d1:d8:27:48:10:d4:86:a1:d6:b0:c5:22:
                    3e:36:af:36:86:13:ac:fa:fe:65:4b:02:7d:f9:ff:
                    ca:ef:f2:45:f4:2e:f5:c6:51:9d:79:34:60:89:fa:
                    07:1a:85:ef:af:2f:88:5d:81:6d:98:32:b7:de:f8:
                    28:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A2:C1:21:74:C4:A3:8B:29:B3:EC:30:DC:31:C9:51:70:AA:E7:F9
            X509v3 Authority Key Identifier:
                keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3a:ec:e5:14:5a:4e:b7:34:be:b1:e7:1b:32:53:32:33:09:
         ca:21:2b:5e:3f:39:2b:34:21:5f:c3:15:f6:82:7f:d8:90:c0:
         ff:8e:8b:1d:8a:46:1c:eb:29:27:75:62:45:ee:a1:8f:30:01:
         95:b7:85:a2:49:22:e4:6d:bf:bb:ab:5b:1b:7a:91:48:c7:ce:
         f8:1b:fb:5c:69:53:de:25:2d:53:4e:04:c0:18:04:08:0b:13:
         1a:bd:ca:25:d7:8f:55:41:42:3a:f6:0b:7f:fa:e5:ac:36:96:
         b6:91:c8:89:b5:66:19:b1:3b:d5:69:47:c2:8e:15:0d:a2:21:
         51:6c:6e:d4:6a:65:c3:46:aa:2d:55:0a:46:2c:9a:74:15:bc:
         73:d0:3b:22:21:97:82:41:1f:a4:8e:20:17:24:8a:01:67:0e:
         4a:b3:4d:e2:ba:6d:e6:9a:63:6e:28:e9:24:19:c4:2b:20:1d:
         ec:90:f9:93:40:50:d4:d3:5a:92:e7:16:9c:f3:f6:f2:a5:e5:
         50:c4:37:cf:47:55:a4:b9:0c:0d:f6:af:a1:07:3f:79:bb:6c:
         c1:4a:22:83:82:35:b0:3f:bd:a8:2a:c0:34:fc:0b:4a:bc:1d:
         b5:68:63:ec:2d:08:27:32:61:f2:d1:2b:34:a2:12:25:52:75:
         01:f3:b8:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQ1NTMxMTAvBgNVBAUTKEFERTZCNTc3RDU0QjVBQjA5MDA1Q0U2MTNCQjEzNjQ4
NjUyRTZBNkIwHhcNMjYwMzI0MjIzODAzWhcNMjYwMzMxMjIzODAzWjAYMRYwFAYD
VQQDEw02OWMzMTI0Yy04ZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxsXyKWnuBenFzbZEHIWl9Wpwu7PbAkqxzuF06ZV+2Hr5Wm0sk2QAcxPhmtmK
YDnL1/wkj1HuOlwk4obRM4fDGsiwWbdPLDkFWgg5vJyvcFXAvUl98ARAZMBAQptT
wSic2/Nq5+EnY3R0gPA4voGYN6oCO1Ovj9wSCo4cc36xwxHU0urQt4bqjDJwBO6G
jAzQOYTLgXF6VW+LeJAAl8gqHLA9sx2RmjKUTYw/xL0ACrowcQ4izPIjQZCLz3fW
SAzA0XSeNTzR2CdIENSGodawxSI+Nq82hhOs+v5lSwJ9+f/K7/JF9C71xlGdeTRg
ifoHGoXvry+IXYFtmDK33vgokwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqiwSF0
xKOLKbPsMNwxyVFwquf5MB8GA1UdIwQYMBaAFK3mtXfVS1qwkAXOYTuxNkhlLmpr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDU1My80RDIzQkIwRUVC
NzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdyQ1FCYzVoTzdFMlNHVXVh
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JlYTFkOVZMV3JDUUJjNWhPN0UyU0dVdWFtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDU1My80RDIzQkIwRUVCNzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdy
Q1FCYzVoTzdFMlNHVXVhbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWjrs5RRaTrc0vrHnGzJTMjMJyiErXj85KzQhX8MV9oJ/2JDA/46LHYpGHOsp
J3ViRe6hjzABlbeFokki5G2/u6tbG3qRSMfO+Bv7XGlT3iUtU04EwBgECAsTGr3K
JdePVUFCOvYLf/rlrDaWtpHIibVmGbE71WlHwo4VDaIhUWxu1Gplw0aqLVUKRiya
dBW8c9A7IiGXgkEfpI4gFySKAWcOSrNN4rpt5ppjbijpJBnEKyAd7JD5k0BQ1NNa
kucWnPP28qXlUMQ3z0dVpLkMDfavoQc/ebtswUoig4I1sD+9qCrANPwLSrwdtWhj
7C0IJzJh8tErNKISJVJ1AfO4nA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:35 2026 by rpki-client