Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
File:                     t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json)
Hash identifier:          C2TzEEHo8EAAupDoyCo/DmGtt8qg1CATNNsmDsNTFe8=
Subject key identifier:   D9:E8:63:01:19:64:70:5A:C1:53:44:7A:D6:98:5F:BF:13:8B:75:23
Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44
Certificate issuer:       /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
Manifest number:          0197
Signing time:             Tue 17 Mar 2026 03:14:32 +0000
Manifest this update:     Tue 17 Mar 2026 03:14:31 +0000
Manifest next update:     Tue 24 Mar 2026 03:14:31 +0000
Files and hashes:         1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: yHOqc0UQXWd6gP1tGxMvgOlOaEWjHgWh7xhIyDsCy0w=)
                          2: 18F9209CB55411EEAD96E873C4F9AE02.roa (hash: tVWZ+z7y79vt8dbGtT960HBGJ8r1XqQlEdw77RKXe1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl
                          rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Mar 2026 03:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918897A, serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44
        Validity
            Not Before: Mar 17 03:14:31 2026 GMT
            Not After : Mar 24 03:14:31 2026 GMT
        Subject: CN=69b8c717-7b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:97:bf:47:55:95:5c:a6:82:53:6b:ca:81:
                    ed:76:23:2c:36:fa:50:e1:c8:d3:78:6b:ed:bb:d0:
                    4f:f6:4d:cd:0a:5b:50:34:78:8b:5b:92:65:07:30:
                    f4:11:c4:5c:31:14:32:82:c1:c5:07:97:aa:2d:2b:
                    5e:17:bc:94:8e:87:8f:85:f3:ff:e0:2a:b9:72:b1:
                    79:74:f7:5b:31:40:98:4f:19:f7:ce:66:9a:9d:20:
                    02:4c:32:9b:63:ed:91:fe:04:d2:b5:78:bd:65:18:
                    04:cc:f2:c9:7f:82:69:8c:62:79:fe:ee:b4:aa:fb:
                    08:77:e4:4e:2a:81:c6:43:c7:11:47:dd:73:3b:d7:
                    d9:78:e0:7a:9d:82:85:16:3f:d8:4f:65:6b:65:11:
                    cf:aa:76:0c:4e:21:d0:85:9a:05:aa:df:eb:d0:aa:
                    b5:77:d6:4d:5e:b2:48:ee:ed:08:2d:3a:23:1c:67:
                    52:77:a0:fa:14:bc:52:36:2a:86:a4:bd:e6:fe:c0:
                    e5:53:a5:79:ad:d3:f3:25:63:df:e0:ff:6a:b5:a0:
                    4d:92:fe:3a:a9:3e:7c:83:e2:83:be:6e:a3:fe:d1:
                    a4:08:2b:28:a0:1a:e8:c8:fb:a7:12:87:3e:0e:3a:
                    44:11:ef:01:20:bf:ed:ce:96:dc:4d:54:03:52:fb:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E8:63:01:19:64:70:5A:C1:53:44:7A:D6:98:5F:BF:13:8B:75:23
            X509v3 Authority Key Identifier:
                keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ac:f3:77:5a:e5:bf:cf:7b:50:96:c1:88:13:7e:6a:29:cb:
         49:03:33:5f:9e:14:a2:e4:9e:78:7b:84:eb:41:23:2a:f4:34:
         d0:64:ad:db:6c:da:9b:66:ba:c5:95:d5:ad:53:a4:bd:9b:07:
         2f:f6:03:f9:b6:9c:b8:06:96:65:f4:39:6e:ac:84:97:1d:93:
         31:f3:aa:eb:13:a9:9d:79:4e:da:8a:7b:2b:ea:9b:20:db:07:
         55:e0:c6:33:dd:ec:c7:9e:5b:05:38:9b:8b:e2:2b:14:51:b7:
         89:dd:fc:bd:04:fe:0b:8e:64:06:06:9f:c8:e1:ab:f6:49:98:
         bc:34:78:51:be:bf:f2:aa:9a:f7:22:10:77:c1:ce:cf:14:09:
         0d:17:c5:21:92:b2:73:cf:10:1b:5e:01:47:1d:af:e8:51:33:
         3a:d8:cd:ef:a7:4b:cc:67:37:4d:18:37:87:ab:be:23:e0:a6:
         a7:db:c7:ac:8f:17:ee:42:c5:d2:29:5b:e3:63:0c:fd:90:c4:
         ec:aa:52:f9:ed:43:ba:76:07:5c:a8:40:09:44:d3:b9:63:61:
         d0:47:87:1a:0e:9d:65:20:0f:df:5d:80:b5:9c:a5:80:be:84:
         b5:68:2a:c2:a7:e7:f4:e0:fd:b6:8b:96:69:bd:1e:55:32:80:
         18:5f:8a:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg5N0ExMTAvBgNVBAUTKEI3RkE1MTIxNUJCNUMxRUY4OEVBRTE1RjAzNDMxM0Qx
QjcxQjhENDQwHhcNMjYwMzE3MDMxNDMxWhcNMjYwMzI0MDMxNDMxWjAYMRYwFAYD
VQQDEw02OWI4YzcxNy03YjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqYiXv0dVlVymglNryoHtdiMsNvpQ4cjTeGvtu9BP9k3NCltQNHiLW5JlBzD0
EcRcMRQygsHFB5eqLSteF7yUjoePhfP/4Cq5crF5dPdbMUCYTxn3zmaanSACTDKb
Y+2R/gTStXi9ZRgEzPLJf4JpjGJ5/u60qvsId+ROKoHGQ8cRR91zO9fZeOB6nYKF
Fj/YT2VrZRHPqnYMTiHQhZoFqt/r0Kq1d9ZNXrJI7u0ILTojHGdSd6D6FLxSNiqG
pL3m/sDlU6V5rdPzJWPf4P9qtaBNkv46qT58g+KDvm6j/tGkCCsooBroyPunEoc+
DjpEEe8BIL/tzpbcTVQDUvsrIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnoYwEZ
ZHBawVNEetaYX78Ti3UjMB8GA1UdIwQYMBaAFLf6USFbtcHviOrhXwNDE9G3G41E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODk3QS81MzNFMjQ2MkI1
NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdlLUk2dUZmQTBNVDBiY2Jq
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RfcFJJVnUxd2UtSTZ1RmZBME1UMGJjYmpVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODk3QS81MzNFMjQ2MkI1NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdl
LUk2dUZmQTBNVDBiY2JqVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGqzzd1rlv897UJbBiBN+ainLSQMzX54UouSeeHuE60EjKvQ00GSt22zam2a6
xZXVrVOkvZsHL/YD+bacuAaWZfQ5bqyElx2TMfOq6xOpnXlO2op7K+qbINsHVeDG
M93sx55bBTibi+IrFFG3id38vQT+C45kBgafyOGr9kmYvDR4Ub6/8qqa9yIQd8HO
zxQJDRfFIZKyc88QG14BRx2v6FEzOtjN76dLzGc3TRg3h6u+I+Cmp9vHrI8X7kLF
0ilb42MM/ZDE7KpS+e1DunYHXKhACUTTuWNh0EeHGg6dZSAP312AtZylgL6EtWgq
wqfn9OD9touWab0eVTKAGF+K8w==
-----END CERTIFICATE-----
Generated at Wed Mar 18 20:45:11 2026 by rpki-client