Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
File:                     tDxOPTL5W1BV0E_cAfhRljfImm8.mft (raw, json)
Hash identifier:          IDNCEJYaNKOHOg83Wao5ajrYQ34LMGNIXZ6hI7I8+Fw=
Subject key identifier:   FC:C3:C6:80:DA:D6:56:DA:63:3E:33:D9:20:D4:48:01:59:3F:75:EA
Authority key identifier: B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F
Certificate issuer:       /CN=A9161F73/serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
Manifest number:          0146
Signing time:             Sun 29 Mar 2026 04:54:38 +0000
Manifest this update:     Sun 29 Mar 2026 04:54:37 +0000
Manifest next update:     Sun 05 Apr 2026 04:54:37 +0000
Files and hashes:         1: tDxOPTL5W1BV0E_cAfhRljfImm8.crl (hash: SDK1pTf7lh+zkjxwKiLXqonPnUUQ5AHRxj8JuLnsuNk=)
                          2: 858870583D0A11EF829DCE39C4F9AE02.roa (hash: nUPXQLFgYxbwvoUneYWVygADhQDRKvtWC/3dO1oUTC4=)
                          3: 38BDA87E3D0A11EF9EEE4439C4F9AE02.roa (hash: e7uP2Q15Y7+PdXnvPFnRHiamG3196fJe6Q0lPV/VwQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl
                          rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 04:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161F73, serialNumber=B43C4E3D32F95B5055D04FDC01F8519637C89A6F
        Validity
            Not Before: Mar 29 04:54:37 2026 GMT
            Not After : Apr  5 04:54:37 2026 GMT
        Subject: CN=69c8b08d-baad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ac:fd:23:88:4d:ce:a4:6d:7b:a6:cb:5b:84:
                    cc:5e:88:1a:fe:48:03:98:36:23:c1:fb:3a:06:f7:
                    03:31:ce:9e:bf:dd:66:5f:4f:44:3e:1d:99:c0:2d:
                    a3:f7:d4:02:fe:da:9f:fe:7c:d9:7f:ee:50:6a:25:
                    d9:ea:ce:84:3a:47:8b:aa:eb:22:36:da:21:16:25:
                    44:c9:15:72:b1:44:bc:c1:a0:52:09:38:2d:88:d4:
                    63:09:dd:c2:b0:19:60:06:41:0b:3d:ce:0f:2e:30:
                    47:78:a1:15:31:ec:0b:ca:95:c6:30:7f:9a:ca:d3:
                    76:e5:ce:85:27:22:a2:d0:12:86:51:c9:10:07:1d:
                    39:c6:ee:12:a4:97:50:25:48:76:69:e1:d4:b9:30:
                    f8:24:d5:cc:04:bb:9b:f6:11:33:47:ea:fc:26:19:
                    94:18:94:04:6f:80:b7:69:f6:2e:0e:b3:df:3c:ea:
                    8c:83:45:df:a1:48:f1:f9:9c:2f:17:84:74:d6:79:
                    31:a4:a8:7a:cd:49:76:06:ec:c5:27:de:a0:4a:f8:
                    33:4b:ad:31:12:58:cb:a4:a3:6f:6d:c2:67:9f:bd:
                    cd:49:6e:3a:de:3f:c4:a7:c1:ce:81:9d:f5:2d:2f:
                    b6:31:c5:e4:ed:a0:00:8a:04:c8:7a:a6:b0:8f:e3:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C3:C6:80:DA:D6:56:DA:63:3E:33:D9:20:D4:48:01:59:3F:75:EA
            X509v3 Authority Key Identifier:
                keyid:B4:3C:4E:3D:32:F9:5B:50:55:D0:4F:DC:01:F8:51:96:37:C8:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tDxOPTL5W1BV0E_cAfhRljfImm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161F73/6DF0E1083D0711EFB5C9EC24C4F9AE02/tDxOPTL5W1BV0E_cAfhRljfImm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:fe:1b:fa:82:1d:5c:e0:43:42:7a:a0:b1:f4:51:78:49:8e:
         2b:22:0d:99:8d:db:8a:f8:2e:3e:24:cc:a7:81:54:9c:d2:a1:
         9a:43:67:88:38:bb:b2:df:34:11:32:e4:5e:2e:ef:13:84:b8:
         85:af:40:8d:5a:88:35:5e:df:08:ec:76:25:40:a8:6e:76:37:
         6a:f2:c1:9e:b1:78:7d:1c:a4:20:64:03:57:c2:c7:a0:aa:66:
         6b:97:6a:0e:3a:f0:91:08:f2:ae:e7:62:4e:f5:c6:a6:2f:16:
         e3:eb:99:a4:54:de:2a:49:10:61:04:cd:b5:4b:a8:90:35:94:
         2a:be:90:38:18:df:77:c8:e8:b7:73:5e:31:45:0e:31:62:99:
         fa:04:33:27:3d:40:e4:4d:d1:c8:b5:a8:39:73:c2:f7:8f:2f:
         34:00:4b:30:0a:b3:7a:a2:17:05:e8:ee:d1:c4:fa:ba:a6:1a:
         97:93:03:d4:72:21:0f:75:ab:39:83:5d:2a:62:5e:2d:42:8d:
         d8:b8:d9:4b:31:35:5f:65:14:f8:28:60:48:33:1b:7a:59:16:
         88:8f:e0:c8:79:44:e8:41:bb:ff:51:e3:3a:e1:be:d2:76:f0:
         95:50:2a:86:ec:59:b3:b5:c8:f7:90:d5:29:fe:45:20:d6:21:
         1d:ff:88:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFGNzMxMTAvBgNVBAUTKEI0M0M0RTNEMzJGOTVCNTA1NUQwNEZEQzAxRjg1MTk2
MzdDODlBNkYwHhcNMjYwMzI5MDQ1NDM3WhcNMjYwNDA1MDQ1NDM3WjAYMRYwFAYD
VQQDEw02OWM4YjA4ZC1iYWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6az9I4hNzqRte6bLW4TMXoga/kgDmDYjwfs6BvcDMc6ev91mX09EPh2ZwC2j
99QC/tqf/nzZf+5QaiXZ6s6EOkeLqusiNtohFiVEyRVysUS8waBSCTgtiNRjCd3C
sBlgBkELPc4PLjBHeKEVMewLypXGMH+aytN25c6FJyKi0BKGUckQBx05xu4SpJdQ
JUh2aeHUuTD4JNXMBLub9hEzR+r8JhmUGJQEb4C3afYuDrPfPOqMg0XfoUjx+Zwv
F4R01nkxpKh6zUl2BuzFJ96gSvgzS60xEljLpKNvbcJnn73NSW463j/Ep8HOgZ31
LS+2McXk7aAAigTIeqawj+MlWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzDxoDa
1lbaYz4z2SDUSAFZP3XqMB8GA1UdIwQYMBaAFLQ8Tj0y+VtQVdBP3AH4UZY3yJpv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUY3My82REYwRTEwODNE
MDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcxQlYwRV9jQWZoUmxqZklt
bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3REeE9QVEw1VzFCVjBFX2NBZmhSbGpmSW1tOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MUY3My82REYwRTEwODNEMDcxMUVGQjVDOUVDMjRDNEY5QUUwMi90RHhPUFRMNVcx
QlYwRV9jQWZoUmxqZkltbTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIf4b+oIdXOBDQnqgsfRReEmOKyINmY3bivguPiTMp4FUnNKhmkNniDi7st80
ETLkXi7vE4S4ha9AjVqINV7fCOx2JUCobnY3avLBnrF4fRykIGQDV8LHoKpma5dq
DjrwkQjyrudiTvXGpi8W4+uZpFTeKkkQYQTNtUuokDWUKr6QOBjfd8jot3NeMUUO
MWKZ+gQzJz1A5E3RyLWoOXPC948vNABLMAqzeqIXBeju0cT6uqYal5MD1HIhD3Wr
OYNdKmJeLUKN2LjZSzE1X2UU+ChgSDMbelkWiI/gyHlE6EG7/1HjOuG+0nbwlVAq
huxZs7XI95DVKf5FINYhHf+INw==
-----END CERTIFICATE-----
Generated at Tue Mar 31 07:02:46 2026 by rpki-client