Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
File:                     k8C6F5rKocB50zxmk_RGcBBPzZg.mft (raw, json)
Hash identifier:          nuX4O2ZCmYNgJsVQ7uxoP9fDMFnHTP+ypwb7q/eCft8=
Subject key identifier:   44:23:5D:E9:50:F7:EA:BA:8D:80:FA:1E:DB:DF:D9:BF:0B:44:D7:89
Authority key identifier: 93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98
Certificate issuer:       /CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
Certificate serial:       0286
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
Manifest number:          027F
Signing time:             Wed 25 Mar 2026 01:17:53 +0000
Manifest this update:     Wed 25 Mar 2026 01:17:53 +0000
Manifest next update:     Wed 01 Apr 2026 01:17:53 +0000
Files and hashes:         1: k8C6F5rKocB50zxmk_RGcBBPzZg.crl (hash: GSrVb1d+ImyDm/3KnhoQs1fptC3E5bnGYBJ1jrrLxs4=)
                          2: 6F57F77659AF11EDB5683587C4F9AE02.roa (hash: AS7hONAEbWURBwN9VRm/e1ZIfPOhEfiT7U5Yp4Gpb94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl
                          rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111788, serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
        Validity
            Not Before: Mar 25 01:17:53 2026 GMT
            Not After : Apr  1 01:17:53 2026 GMT
        Subject: CN=69c337c1-b824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ac:bc:6a:54:cd:c1:af:38:ad:8f:fa:b0:8e:
                    2f:58:5f:40:d8:c8:78:90:01:11:42:d2:b2:24:d3:
                    fa:d9:e6:0b:5a:9a:8b:9e:c3:c6:75:ef:92:89:aa:
                    55:1a:1f:1f:e1:71:ef:41:23:12:3c:1a:ab:e9:30:
                    94:7c:96:47:99:a0:5d:90:73:78:1c:3a:e2:a4:6b:
                    06:f8:f3:22:b4:ae:7f:b2:f5:30:ab:1d:ce:d0:7c:
                    cd:39:4c:26:25:db:ec:4e:7f:60:e9:04:65:a3:9d:
                    0c:cd:bf:34:19:46:28:45:84:70:dd:19:9d:80:3f:
                    e3:77:8e:27:e3:f2:25:c4:0e:f3:29:ef:8b:62:df:
                    e3:78:21:16:45:83:8e:cf:a5:ce:5c:a4:b9:cf:77:
                    79:63:55:f7:24:04:20:cd:f3:92:e3:54:b6:db:e7:
                    c0:25:53:8e:e5:44:9e:3b:fb:e0:23:b9:03:9d:76:
                    4f:46:a0:97:73:6d:44:df:dc:38:43:17:7c:11:d1:
                    4e:47:fa:7c:4d:a0:df:b5:f0:a0:da:42:7f:aa:8e:
                    ec:1f:8c:32:69:78:02:d6:5f:df:b9:3a:45:ae:2a:
                    f6:8d:7e:8e:95:02:18:03:e9:81:8e:d1:b7:9f:0e:
                    7a:7e:8a:18:22:b8:a3:fa:93:8a:41:8d:1c:43:67:
                    70:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:23:5D:E9:50:F7:EA:BA:8D:80:FA:1E:DB:DF:D9:BF:0B:44:D7:89
            X509v3 Authority Key Identifier:
                keyid:93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a8:56:2e:6a:57:9e:26:10:7c:a3:17:24:63:9e:f5:c6:ff:
         bb:a8:3a:42:5f:eb:88:a5:26:3c:77:ca:2a:16:68:2f:75:d4:
         d0:5e:27:39:df:07:9a:10:f0:b6:77:36:cb:8f:88:93:c2:55:
         92:60:77:c4:69:76:88:23:2e:9b:86:03:21:33:ac:cd:b5:1d:
         9a:06:a4:09:a9:9a:26:69:5c:44:04:8a:b6:41:17:93:af:af:
         be:de:51:35:f5:87:56:56:e1:7e:42:6b:09:83:ac:11:c0:d3:
         70:01:56:c0:3d:37:87:d3:2c:48:81:69:31:df:03:a1:4f:1d:
         37:f9:81:17:0b:63:a6:f1:9f:b9:a7:38:f9:f5:97:c0:4e:9b:
         cb:f7:42:b3:07:20:e7:ea:2d:93:5f:e0:6e:2c:86:93:41:44:
         95:50:b7:85:43:5f:d3:d7:ac:a8:0f:30:75:01:fe:00:2a:c0:
         71:7f:bd:7b:cc:50:10:c3:ff:13:64:ef:42:ff:01:59:4e:4f:
         9b:7e:ea:be:b5:d5:6a:5e:27:ce:dc:93:96:e1:b3:87:7e:27:
         b4:96:f0:46:0c:cb:69:02:07:d9:09:35:89:ba:31:f8:f0:54:
         74:a1:e0:6a:96:17:1b:16:8b:81:00:42:da:04:2a:7e:ec:d4:
         b6:dc:e9:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE3ODgxMTAvBgNVBAUTKDkzQzBCQTE3OUFDQUExQzA3OUQzM0M2NjkzRjQ0Njcw
MTA0RkNEOTgwHhcNMjYwMzI1MDExNzUzWhcNMjYwNDAxMDExNzUzWjAYMRYwFAYD
VQQDEw02OWMzMzdjMS1iODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArKy8alTNwa84rY/6sI4vWF9A2Mh4kAERQtKyJNP62eYLWpqLnsPGde+SiapV
Gh8f4XHvQSMSPBqr6TCUfJZHmaBdkHN4HDripGsG+PMitK5/svUwqx3O0HzNOUwm
JdvsTn9g6QRlo50Mzb80GUYoRYRw3RmdgD/jd44n4/IlxA7zKe+LYt/jeCEWRYOO
z6XOXKS5z3d5Y1X3JAQgzfOS41S22+fAJVOO5USeO/vgI7kDnXZPRqCXc21E39w4
Qxd8EdFOR/p8TaDftfCg2kJ/qo7sH4wyaXgC1l/fuTpFrir2jX6OlQIYA+mBjtG3
nw56fooYIrij+pOKQY0cQ2dwGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQjXelQ
9+q6jYD6Htvf2b8LRNeJMB8GA1UdIwQYMBaAFJPAuheayqHAedM8ZpP0RnAQT82Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTc4OC8zRDA1MTVBMDU5
QUIxMUVEOEVFQkE0NTZDNEY5QUUwMi9rOEM2RjVyS29jQjUwenhta19SR2NCQlB6
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s4QzZGNXJLb2NCNTB6eG1rX1JHY0JCUHpaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTc4OC8zRDA1MTVBMDU5QUIxMUVEOEVFQkE0NTZDNEY5QUUwMi9rOEM2RjVyS29j
QjUwenhta19SR2NCQlB6WmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARKhWLmpXniYQfKMXJGOe9cb/u6g6Ql/riKUmPHfKKhZoL3XU0F4nOd8HmhDw
tnc2y4+Ik8JVkmB3xGl2iCMum4YDITOszbUdmgakCamaJmlcRASKtkEXk6+vvt5R
NfWHVlbhfkJrCYOsEcDTcAFWwD03h9MsSIFpMd8DoU8dN/mBFwtjpvGfuac4+fWX
wE6by/dCswcg5+otk1/gbiyGk0FElVC3hUNf09esqA8wdQH+ACrAcX+9e8xQEMP/
E2TvQv8BWU5Pm37qvrXVal4nztyTluGzh34ntJbwRgzLaQIH2Qk1ibox+PBUdKHg
apYXGxaLgQBC2gQqfuzUttzp3Q==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:58:46 2026 by rpki-client