Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
File:                     MVUT5UqwyZuLyoQELjg1i2DbGyw.mft (raw, json)
Hash identifier:          FtkSQSFQEDQ588ES8ICGxvVcKfMDLQr0xlYDQGBVREg=
Subject key identifier:   F8:1A:74:0C:2C:3B:4F:4F:C4:6A:C7:27:AE:48:B6:9F:0B:DA:8D:7C
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Certificate issuer:       /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial:       0887
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
Manifest number:          07AD
Signing time:             Thu 12 Mar 2026 21:43:00 +0000
Manifest this update:     Thu 12 Mar 2026 21:42:59 +0000
Manifest next update:     Thu 19 Mar 2026 21:42:59 +0000
Files and hashes:         1: MVUT5UqwyZuLyoQELjg1i2DbGyw.crl (hash: R/mU1yAocBjRhxzGFhfThRufMy/d8fhVo2QynK2DgGk=)
                          2: 8205A466A73111ED97576186C4F9AE02.roa (hash: rtjDnkP1XJTCpkI2J/yJ+McKzjgNtJldb8Vx9S87ecc=)
                          3: 20EC686CFB8211EEAAFD740AC4F9AE02.roa (hash: E+BR0+TimYOC5eHCgMJvkbeghM62K4+PNvqm5Xd/1Us=)
                          4: 4A32E74C26D411EEA00C7C38C4F9AE02.roa (hash: 0tWj75+Ouq6RIgLCUMshdvJPzR8AsPCm9Z0jxTfe3lE=)
                          5: D0DC58F432C611ECA639A749C4F9AE02.roa (hash: oH5y3yS567DWBQ59SHWtXRtomqD32Y3MrDRrRtObbME=)
                          6: B6F12A04A72E11EDA708F167C4F9AE02.roa (hash: av/zIL1P+iLu+u5jBn1T6eq8lbDkz0TtiaZvy0+7VY4=)
                          7: E0125116A69711ED9DFF0870C4F9AE02.roa (hash: tSdYLFZCk792fEMZCExwfRV5SYB5CkGoXiLRUQRZEtU=)
                          8: EDD4DB0CEDB211EFB0D2622AC4F9AE02.roa (hash: 94RDx70LG5IyD7ln6nyWmw3CJGIuGdny8kRccYnNuHk=)
                          9: 3C30815CABB611ED8370AB5DC4F9AE02.roa (hash: 5Awu2dcqznVLSdbuajkXGMj10RWZ6e/c7t02vUFAqSc=)
                          10: DAAFB93452D811ECB51CE973C4F9AE02.roa (hash: p7G3QRM/2uhtQj3wtDMDeZf0kzeIU6oXaiulKt6wFug=)
                          11: 815EF8B470DD11F08E727853C4F9AE02.roa (hash: 4s2g/ii9eaZCJDpNgvj9gN6fkndE9J1zfe+i0vICvTo=)
                          12: 350E08F41F1C11ECAD024E53C4F9AE02.roa (hash: f5WNiir/xDutuwQ+vK6ySA/zn3JB8xNKvX/jBhoITbc=)
                          13: 35A803641F1C11ECAD024E53C4F9AE02.roa (hash: XbIp4elLJp1qu0Ppo4cUH0HSgtw5D5sigsmfPksT1oI=)
                          14: 8188D300A73111ED97576186C4F9AE02.roa (hash: BCVf5yrdcKZu1AR7g0yk03w2UiroKt/ZqMtyO7z6e4c=)
                          15: CEEBD0EC32C611ECA639A749C4F9AE02.roa (hash: sVwSFmALnyhxgDlohue16n5bgQSwMcWm5mXNF6xU8nc=)
                          16: 3558D5DC1F1711EC924DB151C4F9AE02.roa (hash: XapL9s7D1JMjKJu7MjHBtQo0wYwagcUoAvKKZmIDLWE=)
                          17: B81F8808A72E11EDA708F167C4F9AE02.roa (hash: +vK9sN/wwEHgTPgsw6vo/nMVxNjCNVxPKRzOcPHnjxI=)
                          18: 8D7F07D6555A11F09950400BC4F9AE02.roa (hash: MdGux5KuG5vHcPm7yZJEdfJJ2QMTyqn8Ch7aLATLVTw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 21:42:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
        Validity
            Not Before: Mar 12 21:42:59 2026 GMT
            Not After : Mar 19 21:42:59 2026 GMT
        Subject: CN=69b33364-28a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:08:97:ef:91:c9:4f:c6:e1:6e:85:58:0b:
                    59:02:f6:33:8d:7f:1c:af:7f:7e:cd:9c:67:de:52:
                    a8:be:19:c5:4b:59:84:f6:4c:da:50:b5:9f:f4:00:
                    57:81:bd:d7:7e:31:32:11:a2:3d:da:ae:d0:e0:00:
                    67:85:b6:cc:d9:67:a4:9f:60:39:90:3d:ec:a9:5f:
                    82:d0:09:d7:48:38:95:86:89:fa:f2:e9:c9:92:c7:
                    b4:62:41:e7:76:da:2f:ef:62:9a:94:f8:21:6a:6d:
                    2f:ab:39:06:19:24:e2:fc:47:4d:60:01:bb:e8:6d:
                    ad:d4:d1:16:bd:af:51:34:40:d1:17:72:2a:ae:40:
                    8b:15:a7:f2:67:70:6d:0c:10:21:b6:ad:45:21:0f:
                    9f:bd:db:e7:86:ae:16:0e:e9:99:1e:27:e8:b5:da:
                    85:36:31:21:66:24:cb:3e:63:b1:bd:1e:ff:af:b0:
                    28:67:de:a9:36:ac:2e:c3:06:50:a1:55:43:39:6f:
                    5c:a8:49:a7:03:5b:88:6e:46:de:1e:dd:cb:ed:9f:
                    dc:c4:62:b8:0d:43:22:8e:05:ce:7f:a3:bb:15:af:
                    e4:f5:e2:87:e0:7a:35:17:45:2b:e5:1b:e0:2f:5c:
                    7a:c4:a7:7a:97:b4:fb:1a:0f:18:fa:03:b3:7f:d0:
                    85:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1A:74:0C:2C:3B:4F:4F:C4:6A:C7:27:AE:48:B6:9F:0B:DA:8D:7C
            X509v3 Authority Key Identifier:
                keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:fd:a7:6e:3a:cc:6b:5f:e4:8c:9c:b5:2d:10:c0:66:ce:15:
         33:60:de:19:89:a7:0d:6d:16:85:18:94:01:3d:44:74:da:af:
         c1:26:42:17:c1:fc:6a:a3:3b:9e:e1:94:89:d4:b0:e8:e4:8c:
         a7:8f:d2:2e:c2:5e:2b:a7:e5:12:ec:f6:17:a8:8b:94:5b:82:
         ab:35:bf:f7:82:ce:42:f7:f7:8a:d8:b4:b6:2a:40:e4:4b:98:
         e3:74:c1:19:2b:51:5b:18:79:63:21:18:b0:13:f2:11:20:0f:
         51:25:df:02:5a:2f:49:76:39:fa:a5:11:75:d1:73:67:c1:fd:
         d2:99:af:a8:c5:ed:9d:5b:21:6f:db:ea:a7:92:ec:c5:5d:c7:
         90:5f:fb:01:11:d6:00:43:25:51:85:1a:93:35:cb:2c:cb:fd:
         4b:70:56:21:a6:52:7f:17:7a:56:b6:2e:6a:c4:e1:68:f5:31:
         e2:85:ce:04:2c:12:c3:7e:a5:fb:04:46:0e:9a:23:d8:cc:29:
         77:2c:c6:94:60:60:f4:89:ad:56:52:96:13:bc:12:e1:7a:aa:
         f6:a4:06:18:78:e3:6d:13:40:15:96:5d:77:8a:cd:44:c7:b3:
         cd:a1:71:cb:45:d3:6c:9e:6f:20:a6:eb:fb:9c:1c:0f:a2:27:
         4d:c1:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:14:55 2026 by rpki-client