Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
File:                     w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json)
Hash identifier:          ThGYlZaTCJU1JSmhtYTMFLla1xkrypGIpTb4+503SFc=
Subject key identifier:   4E:7B:4E:79:CB:C1:42:F8:08:CC:1D:85:08:13:06:47:F2:79:D7:16
Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
Certificate issuer:       /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Certificate serial:       1A5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
Manifest number:          1A4E
Signing time:             Thu 12 Mar 2026 16:13:57 +0000
Manifest this update:     Thu 12 Mar 2026 16:13:56 +0000
Manifest next update:     Thu 19 Mar 2026 16:13:56 +0000
Files and hashes:         1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: xdRqZHSnZPihUmfdcBQH21IIoynO93pVrcGlB/m4bhI=)
                          2: 885DA760AA8811E799348329C4F9AE02.roa (hash: OgMqHQ2yVMx+7d3BSt5zC2aY7l1q21WR4K+bA1B1tR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
                          rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 16:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6746 (0x1a5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
        Validity
            Not Before: Mar 12 16:13:56 2026 GMT
            Not After : Mar 19 16:13:56 2026 GMT
        Subject: CN=69b2e645-40f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:02:28:be:0a:44:db:f1:c6:25:76:28:d9:
                    a3:41:e1:4f:a7:ed:df:ab:53:04:6c:ac:6b:72:40:
                    10:bb:02:47:45:de:50:64:c7:42:aa:60:4b:03:a5:
                    65:c9:4c:c1:f7:95:be:28:4d:ab:d5:b0:f9:0a:5a:
                    54:ce:1c:ac:cf:3a:c5:cf:bf:d7:67:32:e0:ff:db:
                    c7:54:fb:32:a9:fa:c8:37:66:18:1f:68:dc:fc:42:
                    de:d5:e0:36:bc:6b:06:5b:97:00:f9:b6:87:51:e9:
                    56:18:ca:73:51:bd:de:e6:c3:1b:65:a4:95:03:bc:
                    ce:5b:e7:3f:fd:ea:99:82:79:7c:e2:b1:6d:6c:d9:
                    ee:d4:18:08:86:21:59:94:6b:1a:82:e7:38:03:d2:
                    2f:c7:27:6a:71:99:6a:6b:78:d4:98:90:08:84:bd:
                    55:55:47:ae:da:09:85:34:cf:3b:8a:f3:34:0f:84:
                    5b:d5:7a:88:fd:88:04:4f:cf:a5:4a:bf:4b:8f:5a:
                    82:e7:12:c8:af:06:4a:40:2c:7c:27:35:bd:78:f0:
                    b9:1e:72:14:d9:24:d3:9c:9c:00:86:d4:b1:31:c7:
                    09:4a:6a:c2:3f:3d:f0:52:c4:be:b9:07:a2:19:32:
                    70:4c:db:dd:81:dc:e7:3a:0f:14:33:4f:1c:55:13:
                    9a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7B:4E:79:CB:C1:42:F8:08:CC:1D:85:08:13:06:47:F2:79:D7:16
            X509v3 Authority Key Identifier:
                keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:99:9d:91:d2:c0:b2:f2:01:13:1a:f7:89:2c:71:f2:e3:8e:
         76:41:77:35:1c:c0:2b:33:19:28:83:30:f7:fe:7d:ba:b7:aa:
         21:80:b7:60:de:9b:a3:a2:c7:6d:be:b2:90:df:8d:a8:85:2f:
         48:cf:6d:6f:f7:21:2f:1e:3f:d4:a6:90:6e:49:11:0d:28:7b:
         19:d8:10:78:35:1a:2e:23:96:61:0b:1c:c2:76:26:64:d0:c7:
         39:e2:83:f3:76:38:ee:25:4a:7d:87:e6:74:2d:21:17:a1:ae:
         58:90:af:b4:f2:e1:5e:df:bb:2d:45:b4:77:7f:6b:fc:0e:63:
         0d:d7:9f:db:0f:2a:1d:9b:de:83:bb:dd:2a:3f:11:b3:64:37:
         82:fd:12:93:43:b9:74:a3:09:c0:42:43:a8:c7:2a:e5:50:c7:
         7c:e8:08:cf:c2:98:0b:83:99:24:01:20:8b:e2:4b:34:13:bf:
         14:33:d3:b7:3a:da:0d:67:8e:92:34:6e:97:14:db:7b:fc:4b:
         86:ab:75:72:24:7c:e0:cd:f7:70:d5:a2:6f:0b:21:de:9b:cc:
         44:a5:f8:ac:fe:f2:be:40:d2:20:73:45:d6:e1:31:79:ea:78:
         50:b0:f6:57:e1:16:92:84:29:75:7f:22:c1:6c:a3:c1:56:59:
         9c:8f:f8:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD
OTI4QkExNzMwHhcNMjYwMzEyMTYxMzU2WhcNMjYwMzE5MTYxMzU2WjAYMRYwFAYD
VQQDEw02OWIyZTY0NS00MGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugUCKL4KRNvxxiV2KNmjQeFPp+3fq1MEbKxrckAQuwJHRd5QZMdCqmBLA6Vl
yUzB95W+KE2r1bD5ClpUzhyszzrFz7/XZzLg/9vHVPsyqfrIN2YYH2jc/ELe1eA2
vGsGW5cA+baHUelWGMpzUb3e5sMbZaSVA7zOW+c//eqZgnl84rFtbNnu1BgIhiFZ
lGsaguc4A9IvxydqcZlqa3jUmJAIhL1VVUeu2gmFNM87ivM0D4Rb1XqI/YgET8+l
Sr9Lj1qC5xLIrwZKQCx8JzW9ePC5HnIU2STTnJwAhtSxMccJSmrCPz3wUsS+uQei
GTJwTNvdgdznOg8UM08cVROaLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE57TnnL
wUL4CMwdhQgTBkfyedcWMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw
MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ
NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA05mdkdLAsvIBExr3iSxx8uOOdkF3NRzAKzMZKIMw9/59ureqIYC3YN6bo6LH
bb6ykN+NqIUvSM9tb/chLx4/1KaQbkkRDSh7GdgQeDUaLiOWYQscwnYmZNDHOeKD
83Y47iVKfYfmdC0hF6GuWJCvtPLhXt+7LUW0d39r/A5jDdef2w8qHZveg7vdKj8R
s2Q3gv0Sk0O5dKMJwEJDqMcq5VDHfOgIz8KYC4OZJAEgi+JLNBO/FDPTtzraDWeO
kjRulxTbe/xLhqt1ciR84M33cNWibwsh3pvMRKX4rP7yvkDSIHNF1uExeep4ULD2
V+EWkoQpdX8iwWyjwVZZnI/4rA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:37 2026 by rpki-client