Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
File:                     N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json)
Hash identifier:          4LM/4W7KrPNtm2HerH37Zl48Z/CjFXMtCHtb9ueXR2Y=
Subject key identifier:   B1:47:9F:1A:90:60:68:95:60:FC:65:50:43:5A:C8:AE:0F:70:F6:4E
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Certificate issuer:       /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial:       05EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
Manifest number:          05D0
Signing time:             Sat 28 Mar 2026 22:57:23 +0000
Manifest this update:     Sat 28 Mar 2026 22:57:23 +0000
Manifest next update:     Sat 04 Apr 2026 22:57:23 +0000
Files and hashes:         1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: R8cfqouApz+5NQDrDha0YdZcBdXrP8Y89b8MuQ1fBek=)
                          2: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: Ja29sSxE8KanVMjVphZgBthiKCRYqnTpDRjm76mlvD4=)
                          3: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: XYFuQnxpl7FqxfYyxe0uvP0uuoI6+uy9BrmnGH143F0=)
                          4: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: 6BeZ+T2YK4xcHE67iF1LQq1UDXWYxRVhMGtHVY4KZKQ=)
                          5: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: FDITcMkvJSfaNZn7WhepfOtYRd5cHo2QRoPeo3DYbKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
                          rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 22:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514 (0x5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
        Validity
            Not Before: Mar 28 22:57:23 2026 GMT
            Not After : Apr  4 22:57:23 2026 GMT
        Subject: CN=69c85cd3-d108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:41:38:08:94:02:b9:a0:02:ac:ec:86:4f:2f:
                    26:3b:0e:7a:e5:cd:b2:c7:6b:6e:f4:9c:ca:e5:35:
                    4b:da:e3:e1:a9:07:f1:99:89:12:e0:44:81:e4:4c:
                    9d:5a:c0:32:67:5b:7f:de:e9:85:20:15:e2:79:76:
                    1d:16:98:6a:fe:4c:41:89:d5:9e:74:e4:af:9b:61:
                    cb:61:3c:7a:6b:30:1e:2d:87:b0:dd:52:3c:7f:83:
                    41:dc:b6:1e:07:27:a5:15:d3:55:cb:2a:df:6f:30:
                    4a:7d:42:0b:c8:8e:55:62:2c:5a:c3:3d:d8:61:9e:
                    6b:e2:22:0e:67:30:d5:f7:90:51:0e:b4:53:73:f2:
                    aa:74:cb:21:4b:e9:37:de:d9:0d:40:2b:6f:35:3e:
                    8e:15:7d:7f:bc:a5:02:48:ba:3f:ba:67:95:e5:ae:
                    e0:f3:89:8a:7b:e8:65:54:b0:cc:c0:78:07:b2:9f:
                    1b:c2:a4:79:d3:c4:eb:5d:e3:c8:98:92:e1:88:4b:
                    6d:9d:16:8d:a4:fa:c2:30:56:eb:c1:2d:2a:7f:b7:
                    af:51:63:48:9e:60:39:f9:00:0f:13:ff:f5:7a:8c:
                    6a:48:82:f6:55:58:18:3c:36:60:ba:f7:47:59:18:
                    f4:13:c1:93:38:4d:48:32:f6:be:62:1c:3e:e3:97:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:47:9F:1A:90:60:68:95:60:FC:65:50:43:5A:C8:AE:0F:70:F6:4E
            X509v3 Authority Key Identifier:
                keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:30:a6:24:1c:00:9b:d6:de:94:42:ac:75:ec:15:cf:d1:32:
         df:d4:a5:6a:a0:0f:5a:6d:cb:64:cc:44:66:c7:88:13:c3:b9:
         2f:cf:dd:32:83:f5:55:6e:19:f4:50:93:78:90:73:1d:e6:26:
         ac:5d:c7:9d:d8:4c:9b:2e:05:04:9e:57:92:1d:6b:c5:bc:59:
         13:4d:74:ed:9a:ee:91:f1:27:0d:c1:fd:e8:6e:82:fb:38:87:
         bb:c5:58:6f:60:86:53:70:ec:2f:83:2a:3d:de:2b:cd:75:eb:
         15:95:a1:1d:4d:a8:8e:94:dc:bf:eb:b4:5b:fe:eb:e9:bc:64:
         44:a1:94:a7:2a:8c:f7:5c:42:b5:fc:55:ee:6b:ff:b9:d2:de:
         2d:51:ee:db:4a:89:40:4f:03:2f:53:4b:f8:7c:bd:c2:e9:cc:
         c9:4b:3f:48:15:8d:13:e5:9a:07:9f:f9:84:89:2a:76:da:f9:
         c0:aa:1d:2e:4d:1d:ca:b9:31:47:77:80:1b:7a:f6:2e:5b:e9:
         ef:54:b6:6b:8b:e8:6d:57:5d:d0:6d:25:c1:39:c4:0e:20:c4:
         64:1d:b8:b7:63:cf:a9:93:9c:94:a5:57:11:2c:8f:83:42:68:
         7f:f6:06:ef:60:c2:25:5c:44:ee:a8:29:0c:01:73:47:7c:26:
         4b:de:41:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIwMzkxMTAvBgNVBAUTKDM3NEQ5QTJDODMyRjIzNDRCREQ4Q0E0MDYzMTE3OTNG
NjZENEM3MzUwHhcNMjYwMzI4MjI1NzIzWhcNMjYwNDA0MjI1NzIzWjAYMRYwFAYD
VQQDEw02OWM4NWNkMy1kMTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0UE4CJQCuaACrOyGTy8mOw565c2yx2tu9JzK5TVL2uPhqQfxmYkS4ESB5Eyd
WsAyZ1t/3umFIBXieXYdFphq/kxBidWedOSvm2HLYTx6azAeLYew3VI8f4NB3LYe
ByelFdNVyyrfbzBKfUILyI5VYixawz3YYZ5r4iIOZzDV95BRDrRTc/KqdMshS+k3
3tkNQCtvNT6OFX1/vKUCSLo/umeV5a7g84mKe+hlVLDMwHgHsp8bwqR508TrXePI
mJLhiEttnRaNpPrCMFbrwS0qf7evUWNInmA5+QAPE//1eoxqSIL2VVgYPDZguvdH
WRj0E8GTOE1IMva+Yhw+45cccQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLFHnxqQ
YGiVYPxlUENayK4PcPZOMB8GA1UdIwQYMBaAFDdNmiyDLyNEvdjKQGMReT9m1Mc1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAzOS9GQjcwREY2QUZG
MjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkwUzkyTXBBWXhGNVAyYlV4
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04wMmFMSU12STBTOTJNcEFZeEY1UDJiVXh6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjAzOS9GQjcwREY2QUZGMjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkw
UzkyTXBBWXhGNVAyYlV4elUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOjCmJBwAm9belEKsdewVz9Ey39SlaqAPWm3LZMxEZseIE8O5L8/dMoP1VW4Z
9FCTeJBzHeYmrF3HndhMmy4FBJ5Xkh1rxbxZE0107ZrukfEnDcH96G6C+ziHu8VY
b2CGU3DsL4MqPd4rzXXrFZWhHU2ojpTcv+u0W/7r6bxkRKGUpyqM91xCtfxV7mv/
udLeLVHu20qJQE8DL1NL+Hy9wunMyUs/SBWNE+WaB5/5hIkqdtr5wKodLk0dyrkx
R3eAG3r2Llvp71S2a4vobVdd0G0lwTnEDiDEZB24t2PPqZOclKVXESyPg0Jof/YG
72DCJVxE7qgpDAFzR3wmS95B1w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:26 2026 by rpki-client