Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
File:                     4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json)
Hash identifier:          X1VgWOPiO843SqD7w6nFRDS3FB5/hE79ln9fkF6TYcM=
Subject key identifier:   B2:51:41:1A:FF:F3:40:84:B9:5B:2D:18:22:08:87:59:1F:F6:CB:AC
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Certificate issuer:       /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial:       3652
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
Manifest number:          35CA
Signing time:             Thu 12 Mar 2026 14:29:56 +0000
Manifest this update:     Thu 12 Mar 2026 14:29:55 +0000
Manifest next update:     Thu 19 Mar 2026 14:29:55 +0000
Files and hashes:         1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: IHBKtaOQ2X8ji9JMWswdT0THP/LwihWAy6UL5Z9q0fA=)
                          2: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: hG8g9R9N6g9xsHSn0imR+1vWSozb3fa3uL51Vy8mhic=)
                          3: 524236EE6B5711F09CFE4572C4F9AE02.roa (hash: YixDUXuSIn+Hh+G5kFeWAZb1NF/MvO4aijdY29fevto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
                          rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 14:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13906 (0x3652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
        Validity
            Not Before: Mar 12 14:29:55 2026 GMT
            Not After : Mar 19 14:29:55 2026 GMT
        Subject: CN=69b2cde3-2ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:bb:a0:81:a7:7d:cc:8a:cd:f9:ad:cd:53:
                    93:d7:f4:f4:2f:fb:07:53:83:12:43:8f:80:e0:76:
                    92:ae:7e:bd:cd:76:20:52:95:52:86:b9:1c:0a:14:
                    9e:74:6f:cd:5b:32:ae:cd:58:b4:a5:f0:e5:bc:02:
                    28:e3:a7:f9:37:f1:de:a9:e2:46:58:47:35:23:0b:
                    c5:18:c3:dc:33:54:ef:55:60:c8:eb:56:11:aa:1b:
                    69:c9:d1:c2:30:77:ce:bd:05:72:33:a9:87:8a:0e:
                    91:72:38:08:4e:b1:52:23:67:05:5c:e6:89:34:81:
                    0b:64:b5:85:ad:c8:67:61:4e:1b:e9:b7:d7:a8:ee:
                    f4:20:9a:59:3f:ff:ec:d2:e4:55:77:61:b9:aa:df:
                    f3:0b:c7:95:07:25:ee:36:9e:4e:8c:3c:16:92:da:
                    29:24:d4:b2:2b:5d:af:88:f1:08:4c:44:09:5e:0b:
                    40:75:23:5e:06:cd:dc:a3:1a:7f:1f:4f:9f:54:c4:
                    95:c7:80:96:71:67:3d:99:cc:1e:45:5e:0b:ed:dd:
                    a4:85:da:0c:d1:50:4f:e9:5b:a3:fd:06:3a:68:4c:
                    27:1a:cc:5d:8f:1c:43:0e:39:8d:8e:77:f9:1e:21:
                    fd:cb:c4:8b:40:d8:89:ea:48:7b:50:82:b9:3f:a8:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:51:41:1A:FF:F3:40:84:B9:5B:2D:18:22:08:87:59:1F:F6:CB:AC
            X509v3 Authority Key Identifier:
                keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:3a:24:e3:76:e0:d5:7e:f8:5e:aa:d9:b6:a7:22:70:6f:0f:
         37:ab:89:ed:9b:0f:0f:e0:90:87:24:90:82:cf:36:de:96:00:
         81:83:d7:40:34:8d:29:a6:1b:3c:f2:06:8a:26:5a:87:58:e6:
         09:9d:8c:ab:b3:b5:b2:b2:f3:de:f0:7b:24:03:c2:93:9f:ed:
         e3:df:63:e5:7c:06:99:56:03:b8:9c:54:65:15:7b:90:05:01:
         d4:0f:1b:44:ae:7f:bd:21:2c:12:aa:cc:1b:ad:2a:8f:df:1c:
         bd:57:aa:2d:12:09:ef:6d:95:04:2e:07:b3:c8:a3:9e:49:4d:
         a2:9b:8c:f1:9a:be:af:d3:31:32:c0:0e:8e:48:f9:03:1c:31:
         84:9f:df:fc:4f:e9:23:e6:07:80:6b:44:6e:41:e2:27:43:42:
         08:17:46:46:e0:b8:07:ee:65:f5:42:13:56:b6:b0:bc:15:ad:
         e2:72:e4:f9:eb:5b:2f:45:3c:0e:df:53:76:3c:49:04:76:8b:
         5b:11:5f:54:0a:69:f5:57:b2:1d:ca:98:bc:2a:fa:2a:d4:99:
         d0:a7:d2:c8:4a:50:ae:51:a9:0b:fe:f5:31:7a:45:23:e5:03:
         5f:b3:69:42:f6:9b:8f:f1:1c:de:ea:05:4a:a3:fc:cb:92:96:
         be:2f:9c:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEzMDAxMTAvBgNVBAUTKEUxNTY0RkRBNUNFRDVDQUU2OTQxNTMwOTdFRDE5NDI1
NTEyMDkyMjMwHhcNMjYwMzEyMTQyOTU1WhcNMjYwMzE5MTQyOTU1WjAYMRYwFAYD
VQQDEw02OWIyY2RlMy0yY2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyUC7oIGnfcyKzfmtzVOT1/T0L/sHU4MSQ4+A4HaSrn69zXYgUpVShrkcChSe
dG/NWzKuzVi0pfDlvAIo46f5N/HeqeJGWEc1IwvFGMPcM1TvVWDI61YRqhtpydHC
MHfOvQVyM6mHig6RcjgITrFSI2cFXOaJNIELZLWFrchnYU4b6bfXqO70IJpZP//s
0uRVd2G5qt/zC8eVByXuNp5OjDwWktopJNSyK12viPEITEQJXgtAdSNeBs3coxp/
H0+fVMSVx4CWcWc9mcweRV4L7d2khdoM0VBP6Vuj/QY6aEwnGsxdjxxDDjmNjnf5
HiH9y8SLQNiJ6kh7UIK5P6hWtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJRQRr/
80CEuVstGCIIh1kf9susMB8GA1UdIwQYMBaAFOFWT9pc7VyuaUFTCX7RlCVRIJIj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTMwMC9DRDIwMzdFMjFE
ODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhLNXBRVk1KZnRHVUpWRWdr
aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRWWlAybHp0WEs1cFFWTUpmdEdVSlZFZ2tpTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTMwMC9DRDIwMzdFMjFEODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhL
NXBRVk1KZnRHVUpWRWdraU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoDok43bg1X74XqrZtqcicG8PN6uJ7ZsPD+CQhySQgs823pYAgYPXQDSNKaYb
PPIGiiZah1jmCZ2Mq7O1srLz3vB7JAPCk5/t499j5XwGmVYDuJxUZRV7kAUB1A8b
RK5/vSEsEqrMG60qj98cvVeqLRIJ722VBC4Hs8ijnklNopuM8Zq+r9MxMsAOjkj5
AxwxhJ/f/E/pI+YHgGtEbkHiJ0NCCBdGRuC4B+5l9UITVrawvBWt4nLk+etbL0U8
Dt9TdjxJBHaLWxFfVApp9VeyHcqYvCr6KtSZ0KfSyEpQrlGpC/71MXpFI+UDX7Np
Qvabj/Ec3uoFSqP8y5KWvi+ccw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:55 2026 by rpki-client