Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
File:                     MMRROGeLe9mvTFyk6xpdPiBhxcE.mft (raw, json)
Hash identifier:          d6TB6J9/J3EFnFLJ3MqRoReaq+yPhPG/rzITRPZsRUQ=
Subject key identifier:   8D:39:8A:65:CA:9B:C8:F3:F2:89:0C:68:32:B4:30:FB:0F:E8:AB:13
Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1
Certificate issuer:       /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
Certificate serial:       0DB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
Manifest number:          0D91
Signing time:             Tue 24 Mar 2026 17:49:42 +0000
Manifest this update:     Tue 24 Mar 2026 17:49:41 +0000
Manifest next update:     Tue 31 Mar 2026 17:49:41 +0000
Files and hashes:         1: MMRROGeLe9mvTFyk6xpdPiBhxcE.crl (hash: 3ntrrVNhSSiK7hpy7QFAD5Zp9zvqw0X7G6atiGAxL8Q=)
                          2: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (hash: E6xKBwdXXk6plBWpWlytPRfzZulatDVFNhrKKgIrSig=)
                          3: 82A69048E5E611E9A31D0F15C4F9AE02.roa (hash: AfD5HxA5Aq0yoBWic1AreIDVnB+IzK6gGah8YdarTYM=)
                          4: 813F208AE5E611E9A31D0F15C4F9AE02.roa (hash: rqH3evVe4RRzDIoqiHRSRZUenT8VbTWiFy0YpHu4G6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl
                          rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3511 (0xdb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1
        Validity
            Not Before: Mar 24 17:49:41 2026 GMT
            Not After : Mar 31 17:49:41 2026 GMT
        Subject: CN=69c2ceb6-a49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:4c:4f:c5:08:3f:97:f5:ee:ea:3a:86:20:
                    5c:98:31:b2:0d:6d:be:0b:e2:4b:e6:cb:44:19:00:
                    ea:86:c4:7e:d7:7d:89:b4:43:cd:cf:71:89:d6:75:
                    9b:d9:59:3b:b3:b2:cd:8b:cb:5c:01:13:7a:09:43:
                    ef:2e:61:93:49:da:c6:8a:d4:ba:0b:ce:65:43:8d:
                    f5:3c:39:b3:0d:83:55:04:16:74:37:4d:fc:12:48:
                    44:d1:4b:b0:ea:31:b4:96:c3:8b:53:3b:ae:6a:65:
                    fb:a2:78:73:1d:eb:d9:5f:49:8c:ec:f0:a7:7b:d8:
                    bd:0b:63:e0:fc:92:37:00:a6:d8:f3:e3:75:dc:28:
                    66:f4:41:7c:39:b9:34:5f:03:51:6d:8c:63:9f:f5:
                    cc:96:bf:67:62:cb:e7:0c:fb:0a:24:8c:eb:f9:58:
                    f3:69:91:61:6f:67:0d:65:2d:27:ba:16:a6:b8:5a:
                    57:84:6a:38:73:75:df:fc:02:4d:59:0d:7e:c0:2f:
                    23:24:0a:39:6f:a1:00:82:cf:a8:ad:ec:e2:99:83:
                    1e:29:a5:5d:f4:05:ca:e4:32:ad:db:bf:53:cb:47:
                    0c:44:9e:8f:5c:95:de:db:22:82:a9:db:12:df:66:
                    1b:0a:1e:f8:08:02:4e:5d:a1:6c:bd:a5:8f:95:4e:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:39:8A:65:CA:9B:C8:F3:F2:89:0C:68:32:B4:30:FB:0F:E8:AB:13
            X509v3 Authority Key Identifier:
                keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:4e:44:5d:b6:23:b2:06:40:cd:6c:75:5a:a7:b8:6d:2a:b7:
         80:cf:87:45:69:a8:8e:d5:7a:57:2a:6a:ae:c4:fa:a8:78:08:
         aa:d1:16:ea:10:dd:4c:02:be:ec:73:14:a3:49:6f:cb:76:f8:
         40:e1:ac:44:8e:3b:7b:90:17:16:98:f8:19:70:95:e0:5a:2a:
         07:b7:f0:d6:46:48:f3:a2:38:48:50:54:7d:c6:81:b7:be:39:
         ac:a6:71:44:90:47:e8:e2:84:5f:9d:75:85:5e:66:b1:41:54:
         b2:57:be:18:40:e8:bc:23:fa:ee:34:ee:3c:8c:82:c8:b2:8f:
         74:fc:49:28:8a:9f:86:c9:d1:9b:53:71:ab:09:de:d4:ca:44:
         4e:57:25:40:b3:b0:b0:ec:7d:66:1c:9c:8f:f3:7f:30:d5:7d:
         33:b9:09:f1:a3:3c:c7:8e:9d:f1:cb:5f:45:cf:7b:7d:a1:f1:
         50:d6:be:5e:81:5f:0f:dc:62:e3:6f:64:bf:15:61:bc:c7:81:
         10:3b:ac:2f:07:e8:ff:b9:d3:88:97:e5:ac:ea:6b:19:af:0c:
         c5:91:7e:c3:4f:d6:51:1d:c8:9e:9d:be:03:43:37:52:b6:84:
         fc:dd:51:da:29:eb:14:66:c1:62:eb:6c:ba:5f:6e:12:1b:f0:
         97:43:c6:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF
MjA2MUM1QzEwHhcNMjYwMzI0MTc0OTQxWhcNMjYwMzMxMTc0OTQxWjAYMRYwFAYD
VQQDEw02OWMyY2ViNi1hNDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2RMT8UIP5f17uo6hiBcmDGyDW2+C+JL5stEGQDqhsR+132JtEPNz3GJ1nWb
2Vk7s7LNi8tcARN6CUPvLmGTSdrGitS6C85lQ431PDmzDYNVBBZ0N038EkhE0Uuw
6jG0lsOLUzuuamX7onhzHevZX0mM7PCne9i9C2Pg/JI3AKbY8+N13Chm9EF8Obk0
XwNRbYxjn/XMlr9nYsvnDPsKJIzr+VjzaZFhb2cNZS0nuhamuFpXhGo4c3Xf/AJN
WQ1+wC8jJAo5b6EAgs+orezimYMeKaVd9AXK5DKt279Ty0cMRJ6PXJXe2yKCqdsS
32YbCh74CAJOXaFsvaWPlU4iiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI05imXK
m8jz8okMaDK0MPsP6KsTMB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1
RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTlBNi80MDg0OEMzRUU1RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5
bXZURnlrNnhwZFBpQmh4Y0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApk5EXbYjsgZAzWx1Wqe4bSq3gM+HRWmojtV6VypqrsT6qHgIqtEW6hDdTAK+
7HMUo0lvy3b4QOGsRI47e5AXFpj4GXCV4FoqB7fw1kZI86I4SFBUfcaBt745rKZx
RJBH6OKEX511hV5msUFUsle+GEDovCP67jTuPIyCyLKPdPxJKIqfhsnRm1Nxqwne
1MpETlclQLOwsOx9Zhycj/N/MNV9M7kJ8aM8x46d8ctfRc97faHxUNa+XoFfD9xi
429kvxVhvMeBEDusLwfo/7nTiJflrOprGa8MxZF+w0/WUR3Inp2+A0M3UraE/N1R
2inrFGbBYutsul9uEhvwl0PGdg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:11 2026 by rpki-client