Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
File:                     t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json)
Hash identifier:          MOCYI3aRB2kQBlARFnByWqoZMU8IYqM2DjKsE4PvR0g=
Subject key identifier:   D5:1B:6C:C1:0B:88:BF:48:7F:7E:8C:8D:DA:CB:E7:F5:F0:81:AC:38
Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
Certificate issuer:       /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
Certificate serial:       09CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
Manifest number:          09C4
Signing time:             Tue 24 Mar 2026 19:42:09 +0000
Manifest this update:     Tue 24 Mar 2026 19:42:09 +0000
Manifest next update:     Tue 31 Mar 2026 19:42:09 +0000
Files and hashes:         1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: aXGNaaP26KLKIS9IdVAOxxYfmSBmv4+xn/zy3BxMsuo=)
                          2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: z6vemY7Be4fulCc5xmPy1Z8Av88qjaBaM/88+DS+zPk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl
                          rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2507 (0x9cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FED7C, serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
        Validity
            Not Before: Mar 24 19:42:09 2026 GMT
            Not After : Mar 31 19:42:09 2026 GMT
        Subject: CN=69c2e911-76ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:4d:c9:d1:b3:3b:99:b4:cf:22:7c:b9:4f:
                    13:2e:8b:12:47:57:60:47:13:d2:ae:30:16:86:24:
                    fe:09:56:a4:e7:3c:36:5f:5f:50:43:8b:68:27:2c:
                    e1:59:9b:e1:ee:0e:a0:2f:eb:6e:b2:47:a4:00:12:
                    6b:08:9b:b2:72:01:18:87:f6:db:12:b8:bd:df:fa:
                    dc:0d:79:41:88:93:1d:f6:5e:01:b7:ed:2d:47:e8:
                    c4:fb:37:f1:0f:1b:e6:c9:cc:00:4b:7d:cc:39:a8:
                    ce:39:1e:97:51:93:a2:19:f2:f4:3e:91:ed:eb:69:
                    34:96:97:d2:b7:e8:2d:02:d7:b9:3f:9f:d8:51:c5:
                    46:3c:57:37:00:04:70:ec:01:a4:52:cf:60:17:10:
                    38:78:2b:95:92:fb:e1:ca:e5:62:cd:2e:dc:38:18:
                    32:93:33:23:a2:29:6a:f2:32:26:84:32:31:d6:8b:
                    2c:ab:e1:cc:37:f8:63:3f:d7:5f:30:2d:8e:36:e3:
                    6f:ad:92:33:33:b8:6b:c9:2a:af:ea:27:3e:2a:11:
                    dc:67:4f:8c:26:19:f9:e9:a6:88:cc:df:7a:44:71:
                    1d:cc:68:2f:8b:2b:67:da:45:ec:30:4d:d7:6b:4a:
                    5d:3a:6c:bf:93:61:8c:26:b0:82:fb:f0:e8:69:7e:
                    73:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1B:6C:C1:0B:88:BF:48:7F:7E:8C:8D:DA:CB:E7:F5:F0:81:AC:38
            X509v3 Authority Key Identifier:
                keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:da:00:08:f6:67:77:36:34:4a:ab:18:66:3e:7a:21:88:55:
         67:07:53:41:e4:e4:41:b7:a9:33:39:20:02:13:e2:a8:94:88:
         94:76:0e:8f:13:a0:5d:60:b6:2a:35:71:d3:75:9f:55:a0:3c:
         3d:f2:2c:05:f8:94:99:a8:78:51:dc:f1:f2:45:5b:b5:ba:d4:
         4c:ae:b3:6d:ec:01:88:22:08:0d:d7:42:18:a2:cc:6e:0b:ae:
         51:ab:6d:4a:29:7d:78:42:99:fe:d1:bf:47:59:6f:67:b9:9e:
         c0:f1:ea:01:67:7f:53:85:cd:5d:51:9c:3d:2a:ea:87:9c:3e:
         84:c2:a7:1a:9f:d8:87:dd:a7:7f:74:6c:e7:6b:fa:73:23:74:
         b3:c6:16:41:7a:4b:88:d0:84:18:ac:da:cb:45:4d:1a:99:3a:
         90:9d:ec:f1:60:88:cb:3c:6d:91:68:d3:3a:2e:fa:c2:c6:7a:
         3b:ec:b9:2d:2c:e7:c6:77:78:35:6b:f6:60:ca:6e:26:9a:47:
         da:73:b6:76:83:b1:b0:fc:0c:ce:2b:9d:f4:3a:b2:d0:3f:bd:
         f7:8f:34:ef:6e:b7:4d:01:77:33:f4:6b:29:da:45:09:30:cd:
         e7:d4:72:38:98:b6:8d:67:2b:63:93:e9:c9:fe:f2:92:12:2b:
         5c:df:23:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVEN0MxMTAvBgNVBAUTKEI3RDNFQjYxQ0MwMjhDMzhCRkQzRjdBMjgwRjM2OTA0
Njg2NTVCMDYwHhcNMjYwMzI0MTk0MjA5WhcNMjYwMzMxMTk0MjA5WjAYMRYwFAYD
VQQDEw02OWMyZTkxMS03NmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsRJNydGzO5m0zyJ8uU8TLosSR1dgRxPSrjAWhiT+CVak5zw2X19QQ4toJyzh
WZvh7g6gL+tuskekABJrCJuycgEYh/bbEri93/rcDXlBiJMd9l4Bt+0tR+jE+zfx
DxvmycwAS33MOajOOR6XUZOiGfL0PpHt62k0lpfSt+gtAte5P5/YUcVGPFc3AARw
7AGkUs9gFxA4eCuVkvvhyuVizS7cOBgykzMjoilq8jImhDIx1ossq+HMN/hjP9df
MC2ONuNvrZIzM7hrySqv6ic+KhHcZ0+MJhn56aaIzN96RHEdzGgviytn2kXsME3X
a0pdOmy/k2GMJrCC+/DoaX5zywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUbbMEL
iL9If36MjdrL5/Xwgaw4MB8GA1UdIwQYMBaAFLfT62HMAow4v9P3ooDzaQRoZVsG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUQ3Qy9GRkQzQjNGRTlG
RjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pEaV8wX2VpZ1BOcEJHaGxX
d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q5UHJZY3dDakRpXzBfZWlnUE5wQkdobFd3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUQ3Qy9GRkQzQjNGRTlGRjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pE
aV8wX2VpZ1BOcEJHaGxXd1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvtoACPZndzY0SqsYZj56IYhVZwdTQeTkQbepMzkgAhPiqJSIlHYOjxOgXWC2
KjVx03WfVaA8PfIsBfiUmah4Udzx8kVbtbrUTK6zbewBiCIIDddCGKLMbguuUatt
Sil9eEKZ/tG/R1lvZ7mewPHqAWd/U4XNXVGcPSrqh5w+hMKnGp/Yh92nf3Rs52v6
cyN0s8YWQXpLiNCEGKzay0VNGpk6kJ3s8WCIyzxtkWjTOi76wsZ6O+y5LSznxnd4
NWv2YMpuJppH2nO2doOxsPwMziud9Dqy0D+994807263TQF3M/RrKdpFCTDN59Ry
OJi2jWcrY5Ppyf7ykhIrXN8jJQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:01 2026 by rpki-client