Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
File:                     RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft (raw, json)
Hash identifier:          vkpjXcjZTHHCyI+CnJM7JPd6LgpDEqbPoSpPEtL4yXQ=
Subject key identifier:   08:95:F8:3E:0B:C7:AE:74:AD:C7:0F:FF:5A:40:E6:40:F5:8F:F6:BB
Authority key identifier: 45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01
Certificate issuer:       /CN=A917BEDF/serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
Manifest number:          31
Signing time:             Tue 03 Mar 2026 08:18:52 +0000
Manifest this update:     Tue 03 Mar 2026 08:18:52 +0000
Manifest next update:     Tue 10 Mar 2026 08:18:52 +0000
Files and hashes:         1: RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl (hash: Kphr4UJdrhmHaC2qhiXrZG8H/0zSjvwWEvNPGEdkFco=)
                          2: BFE98870D00911F08B3BE011C4F9AE02.roa (hash: iWJLrvzKgxNbc1JW1lDrYQAh5nQktcAJb+hfOL0uYqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl
                          rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEDF, serialNumber=4535CF1D1221B71407C141CE6BB573A8B6BE8701
        Validity
            Not Before: Mar  3 08:18:52 2026 GMT
            Not After : Mar 10 08:18:52 2026 GMT
        Subject: CN=69a6996c-9616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:5a:35:f2:d5:25:7c:7f:53:94:54:1f:cb:
                    65:22:f9:f5:bd:55:70:f6:b3:b1:6f:36:d1:d9:a8:
                    8e:36:e9:9e:3a:fd:d2:db:ee:f1:b3:80:ad:e3:53:
                    e3:00:85:a5:76:6b:33:d8:83:43:cc:18:39:52:35:
                    17:55:1e:ee:84:ce:7a:94:f0:00:4e:7a:cf:11:a0:
                    de:c9:15:03:b4:e8:9b:ad:2e:76:20:27:d4:1a:19:
                    a0:d0:64:ad:1d:ad:53:88:ee:1a:25:ed:81:8e:f4:
                    62:4a:97:8f:10:3c:f8:a4:2e:97:27:c8:77:ea:d5:
                    5c:92:38:6f:54:32:c7:5f:ea:cc:bc:d4:60:52:77:
                    46:79:4d:9b:ce:d1:e6:50:55:54:2d:a3:da:2b:a4:
                    b3:d0:67:06:1e:3e:77:95:df:8c:57:2b:26:ac:25:
                    58:12:92:ef:cb:dd:7a:bf:c1:5c:98:a3:1a:8f:69:
                    09:9d:66:7f:1a:cd:a1:b9:ea:10:10:bf:99:f6:ff:
                    e2:5c:7e:c8:90:64:91:3f:8f:c6:24:f1:32:65:1e:
                    b7:78:0a:57:ea:7e:9a:9d:1c:aa:48:7c:69:67:de:
                    fa:9a:f5:9a:d8:88:98:71:23:3f:ba:5b:3a:96:84:
                    af:5b:e2:2f:0a:ba:46:de:a8:6f:a3:82:55:25:d9:
                    83:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:95:F8:3E:0B:C7:AE:74:AD:C7:0F:FF:5A:40:E6:40:F5:8F:F6:BB
            X509v3 Authority Key Identifier:
                keyid:45:35:CF:1D:12:21:B7:14:07:C1:41:CE:6B:B5:73:A8:B6:BE:87:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTXPHRIhtxQHwUHOa7VzqLa-hwE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/2E81279ED00911F083700E6BC4F9AE02/RTXPHRIhtxQHwUHOa7VzqLa-hwE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a4:ca:99:18:53:04:a0:17:07:d3:ab:b2:0a:e4:8f:a9:8d:
         70:a6:9f:8e:bb:fb:11:2e:be:de:19:22:44:30:1a:69:2e:90:
         29:e4:54:bf:ea:fd:bd:a7:1b:49:7b:69:9a:f0:73:d9:cf:19:
         31:b6:c1:0e:f2:e7:48:b6:58:89:64:de:1b:54:b6:cc:3f:ca:
         04:e8:d9:80:d0:eb:9b:2c:ec:ec:c5:32:aa:a0:2c:70:69:65:
         04:53:bd:f2:d9:99:ba:26:17:73:b4:96:14:b9:6d:25:7a:e6:
         d9:a0:f4:33:65:44:95:bc:77:3d:f6:f0:13:b2:d2:e3:79:c6:
         d1:27:2d:72:a3:b6:32:d1:b4:5a:68:c8:79:8c:a2:25:55:c0:
         e5:dc:3f:29:52:18:63:7d:99:66:02:63:30:2a:72:fb:6e:fa:
         f2:a0:f1:1c:65:fd:82:c6:f7:55:2f:c2:77:2e:49:39:ac:08:
         81:24:e0:d8:74:d2:0b:5a:ad:e5:48:78:6d:d1:4c:40:67:8b:
         84:ef:76:bf:ae:3a:cc:7a:4d:ea:ea:a8:49:f7:50:03:78:6a:
         f2:1a:b8:44:ac:8c:d0:9b:60:db:7f:34:91:e6:dd:7a:6d:7a:
         47:92:a1:ed:0f:3f:c3:58:73:e4:af:30:62:62:94:8b:9e:79:
         e6:a5:78:f0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QkVERjExMC8GA1UEBRMoNDUzNUNGMUQxMjIxQjcxNDA3QzE0MUNFNkJCNTczQThC
NkJFODcwMTAeFw0yNjAzMDMwODE4NTJaFw0yNjAzMTAwODE4NTJaMBgxFjAUBgNV
BAMTDTY5YTY5OTZjLTk2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjGlo18tUlfH9TlFQfy2Ui+fW9VXD2s7FvNtHZqI426Z46/dLb7vGzgK3jU+MA
haV2azPYg0PMGDlSNRdVHu6EznqU8ABOes8RoN7JFQO06JutLnYgJ9QaGaDQZK0d
rVOI7hol7YGO9GJKl48QPPikLpcnyHfq1VySOG9UMsdf6sy81GBSd0Z5TZvO0eZQ
VVQto9orpLPQZwYePneV34xXKyasJVgSku/L3Xq/wVyYoxqPaQmdZn8azaG56hAQ
v5n2/+JcfsiQZJE/j8Yk8TJlHrd4ClfqfpqdHKpIfGln3vqa9ZrYiJhxIz+6WzqW
hK9b4i8KukbeqG+jglUl2YNvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCJX4PgvH
rnStxw//WkDmQPWP9rswHwYDVR0jBBgwFoAURTXPHRIhtxQHwUHOa7VzqLa+hwEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzJFODEyNzlFRDAw
OTExRjA4MzcwMEU2QkM0RjlBRTAyL1JUWFBIUklodHhRSHdVSE9hN1Z6cUxhLWh3
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUlRYUEhSSWh0eFFId1VIT2E3VnpxTGEtaHdFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC
RURGLzJFODEyNzlFRDAwOTExRjA4MzcwMEU2QkM0RjlBRTAyL1JUWFBIUklodHhR
SHdVSE9hN1Z6cUxhLWh3RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAqpMqZGFMEoBcH06uyCuSPqY1wpp+Ou/sRLr7eGSJEMBppLpAp5FS/6v29pxtJ
e2ma8HPZzxkxtsEO8udItliJZN4bVLbMP8oE6NmA0OubLOzsxTKqoCxwaWUEU73y
2Zm6JhdztJYUuW0leubZoPQzZUSVvHc99vATstLjecbRJy1yo7Yy0bRaaMh5jKIl
VcDl3D8pUhhjfZlmAmMwKnL7bvryoPEcZf2CxvdVL8J3Lkk5rAiBJODYdNILWq3l
SHht0UxAZ4uE73a/rjrMek3q6qhJ91ADeGryGrhErIzQm2DbfzSR5t16bXpHkqHt
Dz/DWHPkrzBiYpSLnnnmpXjw
-----END CERTIFICATE-----
Generated at Wed Mar 4 14:35:30 2026 by rpki-client