Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
File:                     X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json)
Hash identifier:          oFTqjnbdrvFjdDfsf5WzS0SpUFBm3de+ZYi8qgyjsJ8=
Subject key identifier:   E5:70:9B:40:F7:F1:0D:03:27:89:73:DC:9A:4D:1E:22:91:76:E7:65
Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
Certificate issuer:       /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Certificate serial:       07CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
Manifest number:          07BE
Signing time:             Sat 28 Mar 2026 21:17:14 +0000
Manifest this update:     Sat 28 Mar 2026 21:17:13 +0000
Manifest next update:     Sat 04 Apr 2026 21:17:13 +0000
Files and hashes:         1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: rSaTM5QBmfGq50L+oZWo00CJxbA9E7mZuXJgl5M/T0k=)
                          2: FA93793637C011EB97405947C4F9AE02.roa (hash: ldXQuS9J+x+tniCGZo6XJVyJ4zu+DPyHUrx89zjZ/Vc=)
                          3: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: FiJS4cFwnxf/JxN138pQZVaNHd2K178xuIIaltslIoU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
                          rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 21:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1999 (0x7cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
        Validity
            Not Before: Mar 28 21:17:13 2026 GMT
            Not After : Apr  4 21:17:13 2026 GMT
        Subject: CN=69c8455a-6961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:d7:2d:44:70:47:fa:55:fd:59:05:83:ec:
                    ee:31:df:d6:7d:a4:3c:39:71:fe:9b:78:ec:d7:a4:
                    c9:41:e6:55:f4:12:cd:34:5d:df:b6:59:6a:bd:b4:
                    ec:c3:d1:5f:32:34:b8:9e:8e:1b:0b:7f:5e:57:4c:
                    a6:aa:75:1e:19:d9:8b:94:8a:70:26:a8:da:ff:5e:
                    2c:ce:89:83:f0:d1:14:73:b2:cb:26:48:35:ac:22:
                    4a:ab:96:f2:fe:14:40:fe:f7:7e:fc:16:1d:43:02:
                    8b:31:f9:a3:6f:45:87:40:2e:56:2b:ab:69:ee:00:
                    62:48:2e:81:be:e8:60:e1:3f:fe:40:7e:94:f1:73:
                    1b:33:7d:7c:4d:bd:5a:c0:2e:49:4e:ec:00:7b:29:
                    24:af:b3:46:bb:7c:53:03:1d:1f:ce:fa:7f:88:7a:
                    40:d6:ba:9c:34:cd:1f:29:27:bc:51:69:9d:b8:15:
                    b1:ab:f4:e0:97:6e:e3:27:93:4a:f3:56:e9:a9:b0:
                    f2:d3:2b:4d:c8:c4:b5:94:5d:35:93:18:44:84:b0:
                    6e:3e:0a:7a:36:91:ba:c3:56:53:9a:a2:51:ce:c8:
                    23:df:74:4b:f1:85:50:bd:ac:d8:8b:f9:2f:24:4d:
                    0c:0f:42:cc:60:81:89:61:3d:1c:a9:5f:60:3b:c4:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:70:9B:40:F7:F1:0D:03:27:89:73:DC:9A:4D:1E:22:91:76:E7:65
            X509v3 Authority Key Identifier:
                keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d4:6a:16:5c:fa:08:de:f4:26:8e:af:7b:27:ad:7a:53:ce:
         e3:fc:5d:f7:8a:b7:35:f7:e2:c5:3b:ad:9b:08:cd:23:78:64:
         bd:e5:a8:db:49:e0:f7:ff:91:76:66:0b:20:45:2c:d0:b8:29:
         de:41:4d:cb:c0:5d:35:01:50:fc:af:01:6f:b7:d9:3c:38:0c:
         13:18:c5:6b:20:8e:77:b7:0c:61:36:af:99:c9:0f:d4:b4:6f:
         44:41:93:18:2a:b0:5d:ff:68:d2:c0:e5:54:ea:10:49:85:e6:
         bf:96:a1:76:2c:4f:14:96:72:7e:3a:4a:44:5c:34:1a:b2:92:
         c9:e1:b5:1e:79:b9:1d:b2:c3:46:6e:e7:af:31:1e:c1:9b:eb:
         e8:d8:22:73:53:61:22:2e:6f:ef:b8:c6:97:1d:20:25:58:2d:
         e4:87:4f:11:8b:00:29:3c:d3:a1:7c:ae:d2:ee:a5:29:c1:15:
         48:69:d9:99:5d:b1:7c:e0:7c:0e:58:e0:55:ac:38:89:bf:c6:
         12:8a:e7:8b:4f:ab:bd:5b:17:e5:e3:a2:4e:b8:b4:7d:94:e8:
         b5:88:b6:f5:1d:55:ef:c2:47:2b:2d:d8:09:23:55:c5:0a:01:
         ec:44:dd:0e:94:a9:e4:3a:c1:1f:5b:59:7a:be:e5:c0:c2:c2:
         9e:74:e1:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA0OTExMTAvBgNVBAUTKDVGQzNFODZEQUU0MzUzMTU4OEVCMDE1RDUwMUUzMTcx
MjA1RjA4NTEwHhcNMjYwMzI4MjExNzEzWhcNMjYwNDA0MjExNzEzWjAYMRYwFAYD
VQQDEw02OWM4NDU1YS02OTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoCzXLURwR/pV/VkFg+zuMd/WfaQ8OXH+m3js16TJQeZV9BLNNF3ftllqvbTs
w9FfMjS4no4bC39eV0ymqnUeGdmLlIpwJqja/14szomD8NEUc7LLJkg1rCJKq5by
/hRA/vd+/BYdQwKLMfmjb0WHQC5WK6tp7gBiSC6Bvuhg4T/+QH6U8XMbM318Tb1a
wC5JTuwAeykkr7NGu3xTAx0fzvp/iHpA1rqcNM0fKSe8UWmduBWxq/Tgl27jJ5NK
81bpqbDy0ytNyMS1lF01kxhEhLBuPgp6NpG6w1ZTmqJRzsgj33RL8YVQvazYi/kv
JE0MD0LMYIGJYT0cqV9gO8ReEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVwm0D3
8Q0DJ4lz3JpNHiKRdudlMB8GA1UdIwQYMBaAFF/D6G2uQ1MViOsBXVAeMXEgXwhR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDQ5MS85MjlCREJDMjM3
QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4V0k2d0ZkVUI0eGNTQmZD
RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1g4UG9iYTVEVXhXSTZ3RmRVQjR4Y1NCZkNGRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDQ5MS85MjlCREJDMjM3QkUxMUVCODNBRTE4NDRDNEY5QUUwMi9YOFBvYmE1RFV4
V0k2d0ZkVUI0eGNTQmZDRkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACtRqFlz6CN70Jo6veyetelPO4/xd94q3NffixTutmwjNI3hkveWo20ng9/+R
dmYLIEUs0Lgp3kFNy8BdNQFQ/K8Bb7fZPDgMExjFayCOd7cMYTavmckP1LRvREGT
GCqwXf9o0sDlVOoQSYXmv5ahdixPFJZyfjpKRFw0GrKSyeG1Hnm5HbLDRm7nrzEe
wZvr6Ngic1NhIi5v77jGlx0gJVgt5IdPEYsAKTzToXyu0u6lKcEVSGnZmV2xfOB8
DljgVaw4ib/GEorni0+rvVsX5eOiTri0fZTotYi29R1V78JHKy3YCSNVxQoB7ETd
DpSp5DrBH1tZer7lwMLCnnThMg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:11:06 2026 by rpki-client