Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
File:                     119NVHZK705TBIfeterZIyLy4As.mft (raw, json)
Hash identifier:          iwceyxlgueJKFvpYSP+L3Y0VzKHIXigQZy5lUYPL+Uc=
Subject key identifier:   B6:C0:0C:90:A9:03:1F:98:6C:D7:B4:DC:1F:A0:1E:1D:B6:17:E2:14
Authority key identifier: D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B
Certificate issuer:       /CN=A9162B98/serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
Manifest number:          2B
Signing time:             Tue 03 Mar 2026 08:25:25 +0000
Manifest this update:     Tue 03 Mar 2026 08:25:25 +0000
Manifest next update:     Tue 10 Mar 2026 08:25:25 +0000
Files and hashes:         1: 119NVHZK705TBIfeterZIyLy4As.crl (hash: ixFsweR/lZVzwDN0LPIOuLdokIdh2n4MlQUfGgCICYA=)
                          2: 6641AB54DEE111F0BF0237E8526F56BC.roa (hash: 3c720aJ/J3RclkYPzI9bzs0SKJeg4GvB6leOfaOooVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.crl
                          rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162B98, serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B
        Validity
            Not Before: Mar  3 08:25:25 2026 GMT
            Not After : Mar 10 08:25:25 2026 GMT
        Subject: CN=69a69af5-e7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:88:67:e0:4b:2a:84:1e:12:dd:72:23:fa:
                    e7:fe:9b:fe:cd:2a:b0:c7:c1:c5:66:ae:02:27:0d:
                    b3:ce:16:1d:ed:ba:bd:45:a0:eb:ce:a4:2c:79:d7:
                    54:58:88:01:cb:a1:69:b4:98:ac:9d:17:53:91:a7:
                    45:e2:31:a8:b0:99:3a:8b:28:d9:4a:5e:7c:d0:a0:
                    2a:1c:39:90:72:9c:af:59:b0:09:d5:82:ed:70:6d:
                    a2:c8:bc:c5:be:35:51:70:70:fe:c2:36:31:1b:b5:
                    9c:24:75:b2:eb:f8:0a:70:a6:c0:bb:05:f9:d9:b9:
                    6b:34:9a:6a:4e:9e:1d:ec:a2:ca:e9:a9:44:d5:6b:
                    de:eb:72:5d:1a:69:4d:c8:00:55:36:12:a9:1d:a3:
                    b7:7d:2b:6a:ea:8f:23:8b:7c:80:16:e9:46:43:99:
                    65:bd:29:59:e9:96:d6:60:f8:5d:72:24:78:1d:f8:
                    78:7a:be:08:5a:bd:29:a0:7f:b6:38:08:66:6e:3e:
                    62:7f:cb:f2:49:a5:be:33:b5:b5:50:c5:d1:fe:7b:
                    a5:63:05:e4:4b:e8:15:62:55:7a:ab:d3:36:e4:be:
                    87:dc:57:e3:d9:27:10:a7:a3:d6:18:00:0b:55:3e:
                    ee:1c:37:99:b5:b4:a0:30:63:b3:07:ea:56:77:46:
                    a1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C0:0C:90:A9:03:1F:98:6C:D7:B4:DC:1F:A0:1E:1D:B6:17:E2:14
            X509v3 Authority Key Identifier:
                keyid:D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:9f:5d:17:15:93:21:e8:95:c7:ed:49:67:16:a6:5e:cf:
         f8:f1:f6:8d:dc:f4:be:31:75:3c:38:16:12:98:d5:c1:1e:f3:
         ce:86:7a:63:e6:2e:59:de:08:13:89:54:cb:5e:33:38:32:0c:
         cb:8e:08:8a:1c:68:5c:e7:80:c3:06:95:63:4b:6d:09:c9:38:
         ef:ab:da:4f:1f:1d:e3:de:cb:1e:23:d6:30:d2:b9:21:26:7e:
         0c:fa:85:72:42:1c:84:9e:a0:8d:bf:50:f3:b8:b6:e0:e8:70:
         bd:4f:50:6e:53:e6:33:ba:ab:27:3a:41:b7:42:d0:02:87:3d:
         ac:cf:ff:97:68:ed:3d:c6:29:13:2f:9c:c1:a4:fb:b5:fb:c7:
         2a:19:42:64:98:89:0c:0f:98:b1:05:88:a9:68:f6:17:42:3e:
         56:3e:14:ea:72:5d:c6:3b:a7:e1:7f:3d:e8:4f:38:76:48:36:
         79:6a:61:10:97:6e:b9:bc:5a:06:9c:4a:ed:1b:d0:a1:2e:8b:
         b5:1f:ec:b1:00:d5:74:f3:33:f5:b6:1c:ba:bb:ac:11:10:a5:
         00:56:2a:85:1b:1e:28:e2:4e:d6:ae:71:7a:50:79:33:92:a7:
         79:75:7b:6b:04:ed:4a:43:81:06:30:9c:bd:e9:32:4e:24:af:
         15:a7:52:43
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MkI5ODExMC8GA1UEBRMoRDc1RjRENTQ3NjRBRUY0RTUzMDQ4N0RFQjVFQUQ5MjMy
MkYyRTAwQjAeFw0yNjAzMDMwODI1MjVaFw0yNjAzMTAwODI1MjVaMBgxFjAUBgNV
BAMTDTY5YTY5YWY1LWU3ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxu4hn4EsqhB4S3XIj+uf+m/7NKrDHwcVmrgInDbPOFh3tur1FoOvOpCx511RY
iAHLoWm0mKydF1ORp0XiMaiwmTqLKNlKXnzQoCocOZBynK9ZsAnVgu1wbaLIvMW+
NVFwcP7CNjEbtZwkdbLr+ApwpsC7BfnZuWs0mmpOnh3sosrpqUTVa97rcl0aaU3I
AFU2Eqkdo7d9K2rqjyOLfIAW6UZDmWW9KVnpltZg+F1yJHgd+Hh6vghavSmgf7Y4
CGZuPmJ/y/JJpb4ztbVQxdH+e6VjBeRL6BViVXqr0zbkvofcV+PZJxCno9YYAAtV
Pu4cN5m1tKAwY7MH6lZ3RqExAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtsAMkKkD
H5hs17TcH6AeHbYX4hQwHwYDVR0jBBgwFoAU119NVHZK705TBIfeterZIyLy4Asw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyQjk4LzFBNzk4NEQwREM5
MzExRjA5OTVEODREOTNGNkY1NkJDLzExOU5WSFpLNzA1VEJJZmV0ZXJaSXlMeTRB
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMTE5TlZIWks3MDVUQklmZXRlclpJeUx5NEFzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy
Qjk4LzFBNzk4NEQwREM5MzExRjA5OTVEODREOTNGNkY1NkJDLzExOU5WSFpLNzA1
VEJJZmV0ZXJaSXlMeTRBcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAw859dFxWTIeiVx+1JZxamXs/48faN3PS+MXU8OBYSmNXBHvPOhnpj5i5Z3ggT
iVTLXjM4MgzLjgiKHGhc54DDBpVjS20JyTjvq9pPHx3j3sseI9Yw0rkhJn4M+oVy
QhyEnqCNv1DzuLbg6HC9T1BuU+YzuqsnOkG3QtAChz2sz/+XaO09xikTL5zBpPu1
+8cqGUJkmIkMD5ixBYipaPYXQj5WPhTqcl3GO6fhfz3oTzh2SDZ5amEQl265vFoG
nErtG9ChLou1H+yxANV08zP1thy6u6wREKUAViqFGx4o4k7WrnF6UHkzkqd5dXtr
BO1KQ4EGMJy96TJOJK8Vp1JD
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:22:23 2026 by rpki-client