Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
File:                     d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json)
Hash identifier:          iEty4vC04jMqvE9PHTQaG8fWsBVrekveueIzWw7aXTQ=
Subject key identifier:   BA:D6:E5:B4:5F:1B:FE:29:47:C3:BD:FC:C2:8E:ED:E4:03:A4:D8:3C
Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52
Certificate issuer:       /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
Certificate serial:       01A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
Manifest number:          019D
Signing time:             Mon 02 Mar 2026 23:10:14 +0000
Manifest this update:     Mon 02 Mar 2026 23:10:14 +0000
Manifest next update:     Mon 09 Mar 2026 23:10:14 +0000
Files and hashes:         1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: 4SykL95GpcJZwwPdgFowST86hasMS3UcFFE4YU4zS7o=)
                          2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: Yv6bUlsD/jxVLpyWhyU1eut2obLAQwxoOOHmIUOMRcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 23:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52
        Validity
            Not Before: Mar  2 23:10:14 2026 GMT
            Not After : Mar  9 23:10:14 2026 GMT
        Subject: CN=69a618d6-e21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f1:20:33:a4:f3:bb:c8:ea:c6:49:71:68:70:
                    67:72:a9:11:7f:1f:bd:d8:1e:5e:30:6b:68:d6:73:
                    3b:68:ab:61:50:14:f5:07:c4:f2:2a:b5:91:9c:80:
                    9a:19:e2:68:f5:d7:70:88:76:3c:37:42:cd:b3:1d:
                    79:e0:44:de:c0:3d:7a:86:8a:65:ec:ba:34:98:9f:
                    68:c0:b9:79:40:8c:b7:14:39:30:29:36:be:37:ee:
                    a9:6c:b7:18:57:c7:14:55:e0:83:04:7d:1b:b0:86:
                    3e:2c:6d:19:7c:84:f7:87:47:c7:e9:44:a3:a5:63:
                    d4:92:ed:f2:24:8c:c4:64:02:a0:82:bb:bd:3e:42:
                    08:bc:72:a0:e0:cb:71:b6:fb:36:26:63:05:e3:aa:
                    01:12:dc:e7:18:12:56:be:60:f9:2c:a4:d8:c1:0f:
                    79:27:cf:8f:43:fa:ee:01:c2:7b:08:e1:d4:f6:ca:
                    28:b3:18:c2:39:7b:2a:ff:d9:10:4d:b8:ee:86:22:
                    ea:29:2a:cd:31:fe:a8:42:d4:4b:4a:8e:7c:07:65:
                    68:1a:31:be:af:ec:7c:07:d0:2c:8d:51:1b:eb:30:
                    bc:1f:55:3c:d0:7f:f9:ce:5c:5b:51:08:90:54:43:
                    67:a0:a3:45:0f:24:75:81:e8:44:3b:18:f8:57:99:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D6:E5:B4:5F:1B:FE:29:47:C3:BD:FC:C2:8E:ED:E4:03:A4:D8:3C
            X509v3 Authority Key Identifier:
                keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:e2:50:ae:33:df:76:17:f8:60:a3:5d:44:1e:66:80:2d:03:
         60:bc:11:41:74:5a:87:76:d1:5e:e9:da:4d:07:2d:16:73:f1:
         14:5b:49:c2:85:de:89:b5:d4:45:17:6b:26:ff:f9:e9:2e:eb:
         e9:6a:2d:f8:37:15:b7:64:90:6e:92:23:3e:2c:e7:d5:27:d9:
         94:e0:76:6a:0e:91:73:bb:81:25:e2:ae:b3:52:ca:da:47:d1:
         be:06:2a:27:7d:28:29:2e:28:dd:23:48:e4:d8:ca:5a:83:7a:
         f4:cf:61:a0:72:a0:ed:6d:4f:2c:e4:ec:a8:8a:90:4f:5a:ba:
         c6:dd:21:75:b9:69:3e:22:99:7a:94:7f:ce:ff:64:7a:94:85:
         4a:9d:ed:5e:78:37:e4:73:f0:7d:03:ca:5b:75:e7:82:98:4a:
         f4:1d:9e:18:0d:46:06:c8:f1:c9:1a:94:79:f8:c0:4f:b0:43:
         06:f4:27:ff:83:fd:8f:08:ed:e8:23:f7:d8:50:09:90:c4:57:
         52:88:08:db:d1:d0:8e:ba:f2:b0:97:60:da:4f:9a:1d:12:13:
         f5:a0:ab:69:7b:4a:23:1d:60:a7:79:bb:a8:b6:99:91:88:6c:
         1c:bd:2b:6f:52:c8:0a:f0:e5:4d:b4:cc:d0:b8:3d:f3:92:06:
         6a:eb:6d:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTIzMjAxMTAvBgNVBAUTKDc3RUM0ODY5MkQwNDI3MDI5NzhEQ0QwQjY4RTk0MEI4
RDc3MjNFNTIwHhcNMjYwMzAyMjMxMDE0WhcNMjYwMzA5MjMxMDE0WjAYMRYwFAYD
VQQDEw02OWE2MThkNi1lMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3PEgM6Tzu8jqxklxaHBncqkRfx+92B5eMGto1nM7aKthUBT1B8TyKrWRnICa
GeJo9ddwiHY8N0LNsx154ETewD16hopl7Lo0mJ9owLl5QIy3FDkwKTa+N+6pbLcY
V8cUVeCDBH0bsIY+LG0ZfIT3h0fH6USjpWPUku3yJIzEZAKggru9PkIIvHKg4Mtx
tvs2JmMF46oBEtznGBJWvmD5LKTYwQ95J8+PQ/ruAcJ7COHU9soosxjCOXsq/9kQ
TbjuhiLqKSrNMf6oQtRLSo58B2VoGjG+r+x8B9AsjVEb6zC8H1U80H/5zlxbUQiQ
VENnoKNFDyR1gehEOxj4V5lr+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLrW5bRf
G/4pR8O9/MKO7eQDpNg8MB8GA1UdIwQYMBaAFHfsSGktBCcCl43NC2jpQLjXcj5S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC8yOEM2Q0NFNkE5
RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3S1hqYzBMYU9sQXVOZHlQ
bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2QteElhUzBFSndLWGpjMExhT2xBdU5keVBsSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjMyMC8yOEM2Q0NFNkE5RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3
S1hqYzBMYU9sQXVOZHlQbEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyeJQrjPfdhf4YKNdRB5mgC0DYLwRQXRah3bRXunaTQctFnPxFFtJwoXeibXU
RRdrJv/56S7r6Wot+DcVt2SQbpIjPizn1SfZlOB2ag6Rc7uBJeKus1LK2kfRvgYq
J30oKS4o3SNI5NjKWoN69M9hoHKg7W1PLOTsqIqQT1q6xt0hdblpPiKZepR/zv9k
epSFSp3tXng35HPwfQPKW3XngphK9B2eGA1GBsjxyRqUefjAT7BDBvQn/4P9jwjt
6CP32FAJkMRXUogI29HQjrrysJdg2k+aHRIT9aCraXtKIx1gp3m7qLaZkYhsHL0r
b1LICvDlTbTM0Lg985IGautt5Q==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:29 2026 by rpki-client