Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
File:                     1p-CbIwgERW0fuzDf7XgAI41a9w.mft (raw, json)
Hash identifier:          Ugk2UU2vgCdWh8oRH5A62PtQxURt1AyBEZleG2lQbd8=
Subject key identifier:   FF:A6:53:DB:C1:CD:3D:2D:DE:1B:7F:A9:34:00:79:FF:56:62:82:5F
Authority key identifier: D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
Certificate issuer:       /CN=A918D6AD/serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
Manifest number:          44
Signing time:             Tue 03 Mar 2026 08:01:47 +0000
Manifest this update:     Tue 03 Mar 2026 08:01:46 +0000
Manifest next update:     Tue 10 Mar 2026 08:01:46 +0000
Files and hashes:         1: 1p-CbIwgERW0fuzDf7XgAI41a9w.crl (hash: rJ9EAPv6KmEUjUSFfppwG98eejGurlWt4MhMyqnNTak=)
                          2: 2D57F1BAB90511F0BF94505DC4F9AE02.roa (hash: +wWjLcPKpBqVBQPIBu36nGMdiKTiR75UkPnPyB3guZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
                          rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6AD, serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
        Validity
            Not Before: Mar  3 08:01:46 2026 GMT
            Not After : Mar 10 08:01:46 2026 GMT
        Subject: CN=69a6956b-6fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d0:32:5b:fa:64:6e:5d:53:c4:12:72:ee:06:
                    3c:ee:3e:69:c6:ff:c3:27:f1:68:90:67:0a:56:1b:
                    de:4a:61:20:00:83:b3:30:58:66:98:f3:3e:a3:02:
                    26:65:89:0a:99:1f:62:7d:4e:96:60:2c:57:4b:4c:
                    43:d1:0c:ff:d8:52:a5:04:44:3c:8b:1b:ce:5a:24:
                    4b:ba:0e:74:af:0c:e1:b8:b6:10:65:9c:4f:a4:f4:
                    2b:e0:74:e1:77:0f:bf:74:a1:44:8a:ff:5f:f9:98:
                    c7:ec:ff:67:b1:76:12:1e:cf:9d:be:50:1b:46:40:
                    e8:c3:93:6a:d0:95:92:66:e5:04:36:5c:3f:af:2c:
                    0e:fd:ff:a4:3b:9c:63:e0:b5:2d:fd:e1:28:09:9c:
                    4b:c6:41:d3:0e:cc:e7:c3:af:43:91:2c:cb:7c:fb:
                    38:ce:20:f0:d0:36:5a:1e:db:2d:31:8a:0e:ff:34:
                    3a:b4:a5:51:33:94:56:8e:38:f6:ae:5b:bb:0b:3e:
                    50:05:2b:10:13:a2:b1:a6:62:8d:eb:44:02:fb:82:
                    ce:fd:ac:9a:29:8a:0b:68:2e:f9:09:43:49:b6:d2:
                    e9:0f:6e:c8:f8:ac:74:fe:97:af:7d:29:1a:dc:d4:
                    12:cd:e2:48:ce:d2:ad:89:5a:7c:3b:09:84:c8:7f:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A6:53:DB:C1:CD:3D:2D:DE:1B:7F:A9:34:00:79:FF:56:62:82:5F
            X509v3 Authority Key Identifier:
                keyid:D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:26:ca:62:16:6e:9c:a6:1d:11:be:07:a2:78:72:fe:08:72:
         7a:82:ea:b9:7e:24:a1:63:d4:ee:ee:df:23:08:0d:be:b4:f3:
         d8:2e:6d:61:43:b7:8c:8e:8b:59:61:a4:34:35:7f:b2:c9:74:
         81:0f:63:95:67:f0:9c:98:d5:ca:fd:89:62:89:cb:df:35:eb:
         03:ae:8a:68:8d:63:a7:06:1b:94:49:37:72:a3:c5:93:65:36:
         ae:33:69:6e:6a:59:f1:01:71:6d:f2:cf:30:fb:b8:a4:b4:35:
         ca:1b:f0:77:aa:8d:d7:ab:fd:16:dc:b6:48:b4:f1:e3:0d:cc:
         91:89:29:45:12:71:d9:72:11:05:8d:2a:44:ba:50:58:b0:54:
         54:21:1e:aa:bd:ff:09:9d:79:07:cf:ca:e5:6e:37:fa:82:a4:
         b5:fd:9c:13:ec:ea:bd:74:37:77:9f:d9:3a:99:3e:03:60:94:
         20:18:f4:6c:17:99:fb:9d:04:06:59:a8:89:3c:cd:0d:be:fc:
         b9:50:18:1f:2e:76:5b:8d:68:d3:b7:62:17:5e:4d:96:2b:b4:
         f4:79:7d:1c:79:d0:99:ee:c4:a2:8d:4b:f4:79:a9:79:cb:fb:
         4a:c4:2f:bc:3d:f3:b4:6a:4c:42:01:81:e8:1b:fb:91:da:74:
         25:11:8a:47
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RDZBRDExMC8GA1UEBRMoRDY5RjgyNkM4QzIwMTExNUI0N0VFQ0MzN0ZCNUUwMDA4
RTM1NkJEQzAeFw0yNjAzMDMwODAxNDZaFw0yNjAzMTAwODAxNDZaMBgxFjAUBgNV
BAMTDTY5YTY5NTZiLTZmZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD30DJb+mRuXVPEEnLuBjzuPmnG/8Mn8WiQZwpWG95KYSAAg7MwWGaY8z6jAiZl
iQqZH2J9TpZgLFdLTEPRDP/YUqUERDyLG85aJEu6DnSvDOG4thBlnE+k9CvgdOF3
D790oUSK/1/5mMfs/2exdhIez52+UBtGQOjDk2rQlZJm5QQ2XD+vLA79/6Q7nGPg
tS394SgJnEvGQdMOzOfDr0ORLMt8+zjOIPDQNloe2y0xig7/NDq0pVEzlFaOOPau
W7sLPlAFKxATorGmYo3rRAL7gs79rJopigtoLvkJQ0m20ukPbsj4rHT+l699KRrc
1BLN4kjO0q2JWnw7CYTIf8wtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/6ZT28HN
PS3eG3+pNAB5/1Zigl8wHwYDVR0jBBgwFoAU1p+CbIwgERW0fuzDf7XgAI41a9ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENkFELzYzMzI3NzdBQjQ1
RTExRjBCRDY4QTkzRUM0RjlBRTAyLzFwLUNiSXdnRVJXMGZ1ekRmN1hnQUk0MWE5
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMXAtQ2JJd2dFUlcwZnV6RGY3WGdBSTQxYTl3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE
NkFELzYzMzI3NzdBQjQ1RTExRjBCRDY4QTkzRUM0RjlBRTAyLzFwLUNiSXdnRVJX
MGZ1ekRmN1hnQUk0MWE5dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQASJspiFm6cph0RvgeieHL+CHJ6guq5fiShY9Tu7t8jCA2+tPPYLm1hQ7eMjotZ
YaQ0NX+yyXSBD2OVZ/CcmNXK/YliicvfNesDropojWOnBhuUSTdyo8WTZTauM2lu
alnxAXFt8s8w+7iktDXKG/B3qo3Xq/0W3LZItPHjDcyRiSlFEnHZchEFjSpEulBY
sFRUIR6qvf8JnXkHz8rlbjf6gqS1/ZwT7Oq9dDd3n9k6mT4DYJQgGPRsF5n7nQQG
WaiJPM0Nvvy5UBgfLnZbjWjTt2IXXk2WK7T0eX0cedCZ7sSijUv0eal5y/tKxC+8
PfO0akxCAYHoG/uR2nQlEYpH
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:58 2026 by rpki-client