Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
File:                     KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json)
Hash identifier:          aEs2+idyy/2/m15Oe+66JJg9BWA22VScwg/CATcaUpY=
Subject key identifier:   91:27:75:43:A4:E5:51:DA:8F:96:68:04:84:19:47:51:37:B7:91:00
Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
Certificate issuer:       /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
Manifest number:          021C
Signing time:             Tue 03 Mar 2026 02:34:36 +0000
Manifest this update:     Tue 03 Mar 2026 02:34:35 +0000
Manifest next update:     Tue 10 Mar 2026 02:34:35 +0000
Files and hashes:         1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: fHGlACvATFmAcKTBB7v62NNxC/8iF408P2hOCZGpdvM=)
                          2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: 72/bCWar4kI1SS9FjdRKOsQjDQzMinFfK2s3pr0xemY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
                          rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 02:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
        Validity
            Not Before: Mar  3 02:34:35 2026 GMT
            Not After : Mar 10 02:34:35 2026 GMT
        Subject: CN=69a648bc-b517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:60:13:79:c1:a6:a5:80:67:2d:0c:9e:70:
                    29:32:b9:26:dc:1e:12:5c:0f:63:43:e7:2b:75:5d:
                    24:64:4c:46:2b:87:49:33:fb:ce:8f:a4:3d:2c:19:
                    94:b3:c3:da:64:e7:34:4a:ac:a7:f1:a7:11:2e:75:
                    b1:1f:7e:c2:14:80:1b:dd:03:09:bb:b2:35:b2:82:
                    bb:d5:88:57:20:56:a9:75:72:87:28:53:15:6a:99:
                    52:62:5b:ec:a4:f0:60:1a:5b:06:d1:55:fb:f3:cf:
                    90:ca:4d:7e:c1:91:87:bf:70:92:1a:87:8f:37:cf:
                    56:b7:db:1b:af:c2:6e:1d:60:da:9e:21:fd:d9:f7:
                    db:65:e9:23:c8:e9:e3:2a:80:cb:ec:6c:f7:64:2b:
                    1a:35:de:3c:0a:9e:3f:89:ee:1e:a7:54:a4:9a:7d:
                    5d:40:7d:60:31:4d:26:91:e2:b8:bd:14:9f:67:2e:
                    46:21:f2:ba:f2:f5:d1:9a:d5:3b:be:76:29:bc:cf:
                    e5:92:1d:50:4d:ae:8b:7b:19:94:da:c8:b7:72:e7:
                    8c:4e:ad:82:24:43:29:c4:7d:5a:fa:f9:64:ee:79:
                    8d:d3:31:3a:68:d7:2b:e4:c2:e5:79:a7:4f:d3:64:
                    e7:13:2a:ce:fd:3b:aa:71:ee:77:81:ce:2b:84:ac:
                    e2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:27:75:43:A4:E5:51:DA:8F:96:68:04:84:19:47:51:37:B7:91:00
            X509v3 Authority Key Identifier:
                keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f2:ab:ef:aa:c0:1c:78:f3:17:c6:d1:56:9f:86:4b:12:d1:
         78:82:ad:17:f6:0d:a1:4f:4b:be:d5:93:de:23:62:46:c0:9f:
         ea:62:1a:32:93:5e:49:ec:2f:94:13:74:59:b1:34:14:28:60:
         28:9b:97:5c:32:47:a1:63:88:9a:36:1e:61:92:d0:1f:72:06:
         33:46:b7:af:e8:24:14:3b:df:7f:8b:5c:7b:84:70:10:ba:e7:
         80:ed:cb:5d:64:8a:a8:e3:84:ea:e3:d6:18:15:27:c1:ce:44:
         b7:b4:41:25:c6:e8:4b:27:73:00:bf:70:5d:13:a0:6e:3e:3d:
         da:bf:48:9a:d8:57:8c:c2:d1:51:e1:72:84:ef:c0:00:9f:a8:
         81:df:cb:e0:a8:8b:12:6e:a4:a8:b7:9f:12:f5:97:4d:6d:59:
         07:bb:f3:9c:54:78:f9:9e:b5:85:d3:9a:b4:be:00:91:1a:02:
         47:c9:45:63:9e:70:1f:43:c8:6e:97:90:94:25:ed:3b:8a:c5:
         12:c1:e8:ac:e1:b2:e1:fb:a6:a7:f0:9c:d3:a4:73:15:f1:54:
         d2:fe:6b:ad:96:6a:69:95:d4:8f:8d:d6:e4:09:bb:d0:93:a6:
         f8:13:cd:47:20:12:25:31:a1:42:74:6a:10:97:db:b6:8f:aa:
         e4:87:ba:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNCRjgxMTAvBgNVBAUTKDJBODEzQUU1RDYxNTI5NjA0NURCM0UyQzQyQ0I4RkNE
QUM2QUQyMEMwHhcNMjYwMzAzMDIzNDM1WhcNMjYwMzEwMDIzNDM1WjAYMRYwFAYD
VQQDEw02OWE2NDhiYy1iNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApgBgE3nBpqWAZy0MnnApMrkm3B4SXA9jQ+crdV0kZExGK4dJM/vOj6Q9LBmU
s8PaZOc0Sqyn8acRLnWxH37CFIAb3QMJu7I1soK71YhXIFapdXKHKFMVaplSYlvs
pPBgGlsG0VX788+Qyk1+wZGHv3CSGoePN89Wt9sbr8JuHWDaniH92ffbZekjyOnj
KoDL7Gz3ZCsaNd48Cp4/ie4ep1Skmn1dQH1gMU0mkeK4vRSfZy5GIfK68vXRmtU7
vnYpvM/lkh1QTa6LexmU2si3cueMTq2CJEMpxH1a+vlk7nmN0zE6aNcr5MLleadP
02TnEyrO/Tuqce53gc4rhKzijQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJEndUOk
5VHaj5ZoBIQZR1E3t5EAMB8GA1UdIwQYMBaAFCqBOuXWFSlgRds+LELLj82satIM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BMjJCRDE1OEUw
MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktXQkYyejRzUXN1UHpheHEw
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0tvRTY1ZFlWS1dCRjJ6NHNRc3VQemF4cTBndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0JGOC9BMjJCRDE1OEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktX
QkYyejRzUXN1UHpheHEwZ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARvKr76rAHHjzF8bRVp+GSxLReIKtF/YNoU9LvtWT3iNiRsCf6mIaMpNeSewv
lBN0WbE0FChgKJuXXDJHoWOImjYeYZLQH3IGM0a3r+gkFDvff4tce4RwELrngO3L
XWSKqOOE6uPWGBUnwc5Et7RBJcboSydzAL9wXROgbj492r9ImthXjMLRUeFyhO/A
AJ+ogd/L4KiLEm6kqLefEvWXTW1ZB7vznFR4+Z61hdOatL4AkRoCR8lFY55wH0PI
bpeQlCXtO4rFEsHorOGy4fump/Cc06RzFfFU0v5rrZZqaZXUj43W5Am70JOm+BPN
RyASJTGhQnRqEJfbto+q5Ie6wQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:42:12 2026 by rpki-client