Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
File:                     Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json)
Hash identifier:          J2aFL2MCC2Mf2M+GC1qot6aWU8fYZ9miPVdHGJ/M4LI=
Subject key identifier:   90:EA:5E:8B:FB:4E:C2:ED:6C:BF:5E:83:2B:72:34:E5:54:82:BF:FC
Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B
Certificate issuer:       /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
Certificate serial:       0C53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
Manifest number:          0C4A
Signing time:             Tue 24 Mar 2026 18:32:49 +0000
Manifest this update:     Tue 24 Mar 2026 18:32:48 +0000
Manifest next update:     Tue 31 Mar 2026 18:32:48 +0000
Files and hashes:         1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: mZghrq1gmh4Ahe1vhvgYojtJ1PKZ3EW0u6beChjCaWA=)
                          2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: zVKPBOvgf5ZBPV/BL1nd0Q/b/L3Ds0nzM2EgbZq2Spo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl
                          rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3155 (0xc53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9C95, serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B
        Validity
            Not Before: Mar 24 18:32:48 2026 GMT
            Not After : Mar 31 18:32:48 2026 GMT
        Subject: CN=69c2d8d0-ff18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:f0:b5:84:28:3c:3d:1e:d4:e9:c2:9d:52:
                    eb:27:e1:55:03:dd:81:a7:21:89:20:a9:72:80:8c:
                    79:e1:ab:c5:85:13:b2:76:43:9a:56:ce:14:82:36:
                    aa:8d:65:c8:c1:ee:11:4c:24:c0:aa:c0:1a:81:18:
                    11:41:62:40:90:f0:e8:4d:8c:eb:1d:07:b6:c2:72:
                    28:a5:d5:80:d5:14:ea:7f:a9:22:2d:a2:8e:e0:b0:
                    da:e9:39:b8:bb:55:be:77:dd:aa:da:44:e2:46:d5:
                    a9:54:14:ed:98:54:28:e7:cd:5c:5d:37:b4:56:12:
                    df:c3:77:0f:12:09:3d:9a:be:09:02:09:f1:36:5d:
                    f8:4d:63:92:ea:75:b0:f3:fb:04:f3:d3:3d:24:0a:
                    ef:87:70:a1:1e:56:c5:ea:bb:fb:aa:d9:08:60:35:
                    3c:67:5e:b9:4d:54:c0:e3:b0:55:e5:32:cb:fa:4c:
                    05:88:96:fd:6c:16:80:bd:08:cd:74:d7:c2:30:ce:
                    ee:ba:2b:cc:d3:cf:b8:e1:5c:76:60:34:9f:fc:1b:
                    6d:61:c4:8d:e5:77:e3:d6:ba:ef:ad:85:0c:64:a7:
                    97:d1:27:8c:e0:58:d8:e3:ad:ad:f9:82:6c:da:66:
                    1d:4e:ee:41:81:03:f8:3c:c7:79:4f:6b:ee:6a:69:
                    a5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EA:5E:8B:FB:4E:C2:ED:6C:BF:5E:83:2B:72:34:E5:54:82:BF:FC
            X509v3 Authority Key Identifier:
                keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7f:bf:e5:51:f0:9d:51:32:77:5d:ed:e5:fd:f6:3c:4e:db:
         23:c8:6b:42:52:d1:47:e9:44:60:bb:03:b8:30:f4:c7:ac:76:
         68:02:7b:f6:48:01:c6:1d:1a:f6:3c:81:ca:1c:de:30:59:18:
         34:91:a2:29:56:47:0d:56:62:5c:14:a8:64:a6:78:2b:29:51:
         a4:cf:8c:f8:d7:f3:cd:0f:48:d0:37:12:7a:cb:57:6d:66:e4:
         dd:73:cf:d5:ef:71:b9:a4:35:2a:8e:c6:6e:4f:70:ee:41:8d:
         46:c7:79:8e:87:6f:b8:5a:1a:a9:0b:e2:86:4d:84:a9:8d:ee:
         91:88:78:a0:e2:21:58:da:89:08:cc:de:19:8c:3b:eb:7b:15:
         bc:39:f4:df:a7:8f:16:ce:38:11:87:41:a1:43:4c:cc:ad:1b:
         35:7e:5b:e4:0d:3c:4b:49:95:f1:5f:64:9a:64:b9:c1:29:f0:
         a4:54:71:45:4a:f0:9d:b3:46:8d:29:1f:e3:f2:d5:0b:76:86:
         ef:20:56:3b:33:33:cb:8f:e6:2a:ce:c9:7d:06:fd:34:07:c9:
         3b:65:d5:b7:74:01:bf:a3:1e:3b:62:0f:88:1f:f3:9b:5b:cc:
         23:d4:4b:34:5e:c1:ff:be:a9:a1:da:ca:eb:5f:93:ee:e0:72:
         e8:8c:7b:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlDOTUxMTAvBgNVBAUTKDUyQkY2RjYyRUJDQTI2QjFEQzQyN0ZCRUFGRTcyMEZC
QjA5N0MyMUIwHhcNMjYwMzI0MTgzMjQ4WhcNMjYwMzMxMTgzMjQ4WjAYMRYwFAYD
VQQDEw02OWMyZDhkMC1mZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoc7wtYQoPD0e1OnCnVLrJ+FVA92BpyGJIKlygIx54avFhROydkOaVs4Ugjaq
jWXIwe4RTCTAqsAagRgRQWJAkPDoTYzrHQe2wnIopdWA1RTqf6kiLaKO4LDa6Tm4
u1W+d92q2kTiRtWpVBTtmFQo581cXTe0VhLfw3cPEgk9mr4JAgnxNl34TWOS6nWw
8/sE89M9JArvh3ChHlbF6rv7qtkIYDU8Z165TVTA47BV5TLL+kwFiJb9bBaAvQjN
dNfCMM7uuivM08+44Vx2YDSf/BttYcSN5Xfj1rrvrYUMZKeX0SeM4FjY462t+YJs
2mYdTu5BgQP4PMd5T2vuammloQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJDqXov7
TsLtbL9egytyNOVUgr/8MB8GA1UdIwQYMBaAFFK/b2Lryiax3EJ/vq/nIPuwl8Ib
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM5NS9CQTNFQzg2RTIx
NzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0pySGNRbi0tci1jZy03Q1h3
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VyOXZZdXZLSnJIY1FuLS1yLWNnLTdDWHdocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUM5NS9CQTNFQzg2RTIxNzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0py
SGNRbi0tci1jZy03Q1h3aHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANX+/5VHwnVEyd13t5f32PE7bI8hrQlLRR+lEYLsDuDD0x6x2aAJ79kgBxh0a
9jyByhzeMFkYNJGiKVZHDVZiXBSoZKZ4KylRpM+M+NfzzQ9I0DcSestXbWbk3XPP
1e9xuaQ1Ko7Gbk9w7kGNRsd5jodvuFoaqQvihk2EqY3ukYh4oOIhWNqJCMzeGYw7
63sVvDn036ePFs44EYdBoUNMzK0bNX5b5A08S0mV8V9kmmS5wSnwpFRxRUrwnbNG
jSkf4/LVC3aG7yBWOzMzy4/mKs7JfQb9NAfJO2XVt3QBv6MeO2IPiB/zm1vMI9RL
NF7B/76podrK61+T7uBy6Ix7Rw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:42:09 2026 by rpki-client