Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
File:                     9htN6lh5mctuFcVAieTbmD0BuxA.mft (raw, json)
Hash identifier:          XH9GKZWY2mXT5mX3fOkkoZfeZvHb6bFM3ZdycEenu7s=
Subject key identifier:   37:19:12:D2:11:08:3C:81:35:9F:8F:26:77:A4:19:8F:56:10:FA:5B
Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10
Certificate issuer:       /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
Certificate serial:       090D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
Manifest number:          14E9
Signing time:             Tue 24 Mar 2026 18:41:11 +0000
Manifest this update:     Tue 24 Mar 2026 18:41:11 +0000
Manifest next update:     Tue 31 Mar 2026 18:41:11 +0000
Files and hashes:         1: 9htN6lh5mctuFcVAieTbmD0BuxA.crl (hash: dW/QMk+J7bA4pGjaGhrTaPNrGSwJQyuxJK2OXJb2cM8=)
                          2: 341C7414CA6111EA97DD3439C4F9AE02.roa (hash: B2941hTNKbBxwIM7y30R5VpV6Tv4L2xCuY6npa00/3w=)
                          3: 336BD320CA6111EA97DD3439C4F9AE02.roa (hash: vfYvhHIW5M8s6DC2vNEU1oMvibTPBiBIJ+gkrN1jB0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl
                          rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317 (0x90d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7315, serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
        Validity
            Not Before: Mar 24 18:41:11 2026 GMT
            Not After : Mar 31 18:41:11 2026 GMT
        Subject: CN=69c2dac7-1a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:28:08:37:2e:8a:e9:84:20:91:16:a2:20:
                    c8:05:10:72:2d:d1:c3:60:d7:16:1f:12:ea:6c:ba:
                    26:e4:5f:85:9d:e8:ea:5a:5f:c3:79:66:7a:b4:dc:
                    b6:12:d0:5f:db:c8:4a:f6:5d:85:53:e1:85:b3:98:
                    3d:8c:49:a1:74:12:45:04:d6:35:f7:34:f2:1e:07:
                    8b:b8:23:83:32:ab:87:87:56:72:74:a0:10:ba:a3:
                    e1:eb:ff:a1:3c:e7:a6:be:b9:d9:3c:88:44:b1:ff:
                    74:5d:db:69:62:da:ef:d5:7f:30:7b:00:c3:e3:23:
                    ad:79:d8:24:4b:51:79:3b:45:7a:6d:85:7f:1e:67:
                    d3:43:20:f3:f3:48:b2:d3:8b:c3:f4:99:3b:63:45:
                    14:79:5c:f4:11:2d:25:f1:ba:22:11:58:18:a7:ff:
                    58:32:49:33:d2:10:2e:c3:b2:23:21:8b:bf:e1:0b:
                    3b:99:80:9c:5a:c8:ec:7e:54:64:bf:e7:7b:5a:55:
                    89:f8:91:ab:c9:d7:97:5b:f3:3c:56:48:36:50:cf:
                    97:c7:4e:23:e5:a0:ae:3c:95:65:5e:15:e6:cd:bc:
                    6d:96:35:af:f8:e0:e8:0c:bf:64:fe:80:94:c7:48:
                    ca:89:61:ee:52:57:7c:35:2c:41:e8:4a:a4:cb:88:
                    45:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:12:D2:11:08:3C:81:35:9F:8F:26:77:A4:19:8F:56:10:FA:5B
            X509v3 Authority Key Identifier:
                keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ed:cd:8a:5c:01:4d:ae:4f:be:cb:8d:eb:bb:31:2d:17:27:
         24:1d:0e:4d:00:cb:a1:09:44:e5:2f:ce:fa:c3:0d:2d:33:14:
         f9:8c:13:ce:c2:ae:ed:e3:ab:d9:fa:ec:5f:59:41:d6:85:62:
         3c:fc:a8:23:0a:0f:23:e3:57:91:c5:83:73:1c:ba:c9:25:f7:
         76:05:ff:1e:07:c3:83:0b:6b:28:25:d9:9c:15:e6:69:d0:2a:
         b0:2b:16:b1:5c:3c:96:af:23:3f:67:4d:47:14:46:19:a1:c0:
         ca:c6:1b:00:5e:03:46:e8:b2:b8:e8:c4:7e:1b:62:fb:74:64:
         ee:4d:78:51:77:d8:1e:16:00:a1:ba:1c:6e:99:a4:ab:e5:ed:
         b6:ce:dd:d6:cf:cc:6b:78:7c:88:ce:68:2e:26:55:69:44:88:
         0b:60:c1:03:0c:20:cd:ec:73:fc:01:a9:a1:69:40:f4:72:99:
         c0:c4:49:08:f4:02:48:56:45:48:79:a8:ab:24:6a:f5:d2:31:
         c0:6b:f1:dd:19:de:9d:2d:79:40:ce:37:48:6c:bf:4d:a0:54:
         aa:2b:1c:44:7b:3d:90:f1:8e:fe:ae:45:35:f2:89:56:2f:7d:
         03:61:f9:ed:85:bf:0b:a4:50:9d:16:9e:5e:74:e0:b7:c4:09:
         42:8a:b0:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjczMTUxMTAvBgNVBAUTKEY2MUI0REVBNTg3OTk5Q0I2RTE1QzU0MDg5RTREQjk4
M0QwMUJCMTAwHhcNMjYwMzI0MTg0MTExWhcNMjYwMzMxMTg0MTExWjAYMRYwFAYD
VQQDEw02OWMyZGFjNy0xYTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0TcoCDcuiumEIJEWoiDIBRByLdHDYNcWHxLqbLom5F+FnejqWl/DeWZ6tNy2
EtBf28hK9l2FU+GFs5g9jEmhdBJFBNY19zTyHgeLuCODMquHh1ZydKAQuqPh6/+h
POemvrnZPIhEsf90XdtpYtrv1X8wewDD4yOtedgkS1F5O0V6bYV/HmfTQyDz80iy
04vD9Jk7Y0UUeVz0ES0l8boiEVgYp/9YMkkz0hAuw7IjIYu/4Qs7mYCcWsjsflRk
v+d7WlWJ+JGrydeXW/M8Vkg2UM+Xx04j5aCuPJVlXhXmzbxtljWv+ODoDL9k/oCU
x0jKiWHuUld8NSxB6Eqky4hFvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDcZEtIR
CDyBNZ+PJnekGY9WEPpbMB8GA1UdIwQYMBaAFPYbTepYeZnLbhXFQInk25g9AbsQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy
RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1jdHVGY1ZBaWVUYm1EMEJ1
eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlodE42bGg1bWN0dUZjVkFpZVRibUQwQnV4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1j
dHVGY1ZBaWVUYm1EMEJ1eEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMu3NilwBTa5PvsuN67sxLRcnJB0OTQDLoQlE5S/O+sMNLTMU+YwTzsKu7eOr
2frsX1lB1oViPPyoIwoPI+NXkcWDcxy6ySX3dgX/HgfDgwtrKCXZnBXmadAqsCsW
sVw8lq8jP2dNRxRGGaHAysYbAF4DRuiyuOjEfhti+3Rk7k14UXfYHhYAobocbpmk
q+Xtts7d1s/Ma3h8iM5oLiZVaUSIC2DBAwwgzexz/AGpoWlA9HKZwMRJCPQCSFZF
SHmoqyRq9dIxwGvx3RnenS15QM43SGy/TaBUqiscRHs9kPGO/q5FNfKJVi99A2H5
7YW/C6RQnRaeXnTgt8QJQoqwBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:21:03 2026 by rpki-client