Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
File:                     Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json)
Hash identifier:          eQqrynE9wCs5B5bndHv6CzyHaPb5th3ikWWz7cbSt9o=
Subject key identifier:   0D:44:F7:33:43:63:33:E8:63:24:CF:39:1F:00:A5:D9:A2:D4:1E:3F
Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22
Certificate issuer:       /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
Certificate serial:       06B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
Manifest number:          068A
Signing time:             Tue 10 Mar 2026 22:03:51 +0000
Manifest this update:     Tue 10 Mar 2026 22:03:50 +0000
Manifest next update:     Tue 17 Mar 2026 22:03:50 +0000
Files and hashes:         1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: ARaEJWmNtcHSvIhSFwo0IKClPAxwJuzNLkfd3TlgSZM=)
                          2: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: ra5Gb6PZs/OzsXnjVHyYomyoOxgiF9l7qD/G8v55rJE=)
                          3: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: mvXSigs+CYMUI0qIQU184GsMAO7ebIzgG1gltQZTv74=)
                          4: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: VZngPQoD9ajhao0l3dsJoThd/544+8t+izMD2tZRtf8=)
                          5: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: vyexen/B6X3I+xJz9MgxPPblLPV4i6C5p1fUdXNRjq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl
                          rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 22:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1715 (0x6b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
        Validity
            Not Before: Mar 10 22:03:50 2026 GMT
            Not After : Mar 17 22:03:50 2026 GMT
        Subject: CN=69b09547-db8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2d:70:6e:d8:89:da:62:f9:2d:6f:d6:34:d5:
                    c0:41:1e:35:2d:14:76:fd:5b:39:4f:85:dc:44:04:
                    28:a5:6f:c1:ea:8c:90:26:ac:8c:b7:1f:ed:d4:b6:
                    e6:15:f8:e4:d6:64:88:96:6e:92:b3:64:e4:96:0a:
                    06:d9:42:42:06:40:80:a7:07:0f:6c:86:2e:f3:76:
                    58:72:7c:e1:6a:1d:d8:fc:b1:e7:02:5b:ab:06:05:
                    bb:2a:fe:fd:c7:3e:5b:ad:43:aa:88:6a:0c:d2:6e:
                    39:e8:7c:fe:bd:3a:98:93:85:b8:9d:a7:43:8b:77:
                    ff:ff:3b:b3:7d:ee:80:d6:71:ef:6d:55:34:c4:a2:
                    a6:15:2f:92:de:b6:dc:a8:09:e0:52:3b:6f:a9:61:
                    9d:42:3c:97:96:c0:b9:ed:97:fa:4f:e4:17:cc:e8:
                    5c:bc:9b:6a:a2:9c:d5:b6:9f:8a:77:78:dd:32:61:
                    2f:f2:a7:73:83:0e:58:1a:7c:33:ba:a0:ac:49:a1:
                    be:72:a4:79:75:de:2f:71:4e:dc:3a:cd:da:6d:8e:
                    5d:37:a7:d8:da:9f:db:7f:0d:39:39:b7:98:c5:7f:
                    0c:af:01:04:8c:03:c6:87:c2:1a:6b:5b:19:20:68:
                    fb:fd:59:4e:c1:7f:8b:d0:99:74:56:5c:e0:40:57:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:44:F7:33:43:63:33:E8:63:24:CF:39:1F:00:A5:D9:A2:D4:1E:3F
            X509v3 Authority Key Identifier:
                keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8e:56:fa:66:8f:56:7f:53:84:99:29:fb:17:5d:4d:d3:68:
         a3:67:0b:53:9d:e2:2a:a6:32:3e:02:f1:60:08:50:c0:e3:3f:
         25:6c:5f:10:9a:37:f7:3d:a9:c7:a3:48:3d:6d:2a:1c:4f:ac:
         87:15:bf:84:c4:31:6e:8a:d3:82:5f:c6:8f:b2:4f:d1:f9:0a:
         58:dc:fe:58:8a:5d:14:1c:a0:1e:94:8d:3e:d6:1b:6c:47:f3:
         ca:9c:b7:b4:f7:57:ce:0c:b5:1d:0b:35:f8:b8:04:5e:16:24:
         5d:01:05:ea:f9:8c:d1:c7:e9:76:f7:0f:cb:ee:b6:e8:13:f4:
         5c:e9:69:5a:0d:39:0b:95:4d:8a:94:90:50:fc:92:1f:b9:40:
         a4:2a:ff:3f:10:3d:d8:c7:3e:76:86:f2:eb:75:41:63:21:64:
         90:0a:0a:3d:b5:a7:f6:e0:40:7b:06:32:8f:27:0f:95:9f:ff:
         2c:68:62:0d:f1:78:ea:36:2f:99:91:7f:0e:e9:4a:c2:9d:ed:
         5e:d9:2f:b8:61:02:19:44:bc:fb:aa:8d:17:ab:f0:97:28:87:
         be:f9:40:6a:e0:90:73:67:9a:07:5c:07:8f:bd:82:71:42:a0:
         8c:46:31:61:09:25:aa:a8:f1:f0:33:20:bb:10:55:6c:63:97:
         66:fe:82:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlCNTAxMTAvBgNVBAUTKDNEQUZGRkJDN0U5MTJFOUZGQ0QyQTJFMEQ5MjA4RUJD
OTk3MDlCMjIwHhcNMjYwMzEwMjIwMzUwWhcNMjYwMzE3MjIwMzUwWjAYMRYwFAYD
VQQDEw02OWIwOTU0Ny1kYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvi1wbtiJ2mL5LW/WNNXAQR41LRR2/Vs5T4XcRAQopW/B6oyQJqyMtx/t1Lbm
Ffjk1mSIlm6Ss2TklgoG2UJCBkCApwcPbIYu83ZYcnzhah3Y/LHnAlurBgW7Kv79
xz5brUOqiGoM0m456Hz+vTqYk4W4nadDi3f//zuzfe6A1nHvbVU0xKKmFS+S3rbc
qAngUjtvqWGdQjyXlsC57Zf6T+QXzOhcvJtqopzVtp+Kd3jdMmEv8qdzgw5YGnwz
uqCsSaG+cqR5dd4vcU7cOs3abY5dN6fY2p/bfw05ObeYxX8MrwEEjAPGh8Iaa1sZ
IGj7/VlOwX+L0Jl0VlzgQFcpGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1E9zND
YzPoYyTPOR8Apdmi1B4/MB8GA1UdIwQYMBaAFD2v/7x+kS6f/NKi4NkgjryZcJsi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUI1MC9DNkMwNDlCMkFF
RkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2UkxwXzgwcUxnMlNDT3ZKbHdt
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BhX192SDZSTHBfODBxTGcyU0NPdkpsd215SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUI1MC9DNkMwNDlCMkFFRkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2Ukxw
XzgwcUxnMlNDT3ZKbHdteUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh45W+maPVn9ThJkp+xddTdNoo2cLU53iKqYyPgLxYAhQwOM/JWxfEJo39z2p
x6NIPW0qHE+shxW/hMQxborTgl/Gj7JP0fkKWNz+WIpdFBygHpSNPtYbbEfzypy3
tPdXzgy1HQs1+LgEXhYkXQEF6vmM0cfpdvcPy+626BP0XOlpWg05C5VNipSQUPyS
H7lApCr/PxA92Mc+doby63VBYyFkkAoKPbWn9uBAewYyjycPlZ//LGhiDfF46jYv
mZF/DulKwp3tXtkvuGECGUS8+6qNF6vwlyiHvvlAauCQc2eaB1wHj72CcUKgjEYx
YQklqqjx8DMguxBVbGOXZv6CLg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 21:30:44 2026 by rpki-client