Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
File:                     kI2z-bdG9SC7uahMhT9pJsFeub0.mft (raw, json)
Hash identifier:          U0wpR3O6X+yk0ImVla9GRV5jVhcPxgARjqlPrrznJVo=
Subject key identifier:   EE:D6:07:C2:61:54:76:48:51:F2:19:AC:A3:84:AC:61:BF:7F:AC:91
Authority key identifier: 90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD
Certificate issuer:       /CN=A919A909/serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
Manifest number:          014A
Signing time:             Sat 07 Mar 2026 04:29:15 +0000
Manifest this update:     Sat 07 Mar 2026 04:29:14 +0000
Manifest next update:     Sat 14 Mar 2026 04:29:14 +0000
Files and hashes:         1: kI2z-bdG9SC7uahMhT9pJsFeub0.crl (hash: fsfnrygdFEvdaT9Do7o0g2DGuaVWPUQMnJXOE7Zp1Eo=)
                          2: CCAF2918109411F186362BB2353D8C67.roa (hash: Upvyy2jPvhhD/OdsNESStZNIXsW/r3KlLDVUrD02B1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl
                          rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 04:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A909, serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD
        Validity
            Not Before: Mar  7 04:29:14 2026 GMT
            Not After : Mar 14 04:29:14 2026 GMT
        Subject: CN=69aba99b-a45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:a9:1c:2c:f2:d4:49:a2:64:32:01:d7:9c:
                    cb:86:67:64:66:17:81:2d:34:ea:9e:3a:71:ca:dc:
                    47:c9:c5:b4:51:9c:3a:35:b5:53:a3:06:d4:9e:29:
                    0f:02:e4:54:af:46:6c:9d:3b:67:87:89:20:0e:e2:
                    55:46:cf:23:50:9f:bf:b3:4a:5a:28:6a:36:28:a3:
                    1a:db:a6:31:31:d7:2a:23:6f:5a:6e:c9:b8:68:c4:
                    3c:ee:96:64:8d:36:ae:b4:00:ce:43:83:8c:d1:6e:
                    11:50:8b:a8:79:86:e5:37:03:8c:55:f2:05:74:e3:
                    38:9d:71:a3:33:08:75:16:53:62:8f:21:76:fb:5a:
                    ef:c8:c2:db:2a:29:c9:aa:67:ad:2f:6a:36:ff:35:
                    a2:33:a3:9b:f3:7c:08:b1:19:2e:29:b2:f6:df:b3:
                    c9:b9:0e:5f:2b:01:14:41:60:92:54:cc:a2:88:8e:
                    89:c4:de:f0:6b:16:ce:c2:44:03:bd:71:65:35:b1:
                    c6:6a:cc:c5:fc:c7:dd:39:e3:5c:2e:cc:cf:94:3b:
                    15:de:4c:0b:ea:53:c3:c7:9b:61:a8:97:78:f5:8c:
                    10:6f:5d:4c:c0:91:62:31:67:6d:a5:fd:a9:a4:9d:
                    b0:54:15:69:3d:02:a2:24:2f:df:93:d1:06:68:ae:
                    ff:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D6:07:C2:61:54:76:48:51:F2:19:AC:A3:84:AC:61:BF:7F:AC:91
            X509v3 Authority Key Identifier:
                keyid:90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a7:dc:5d:a7:cf:20:1f:f0:83:44:07:17:63:97:69:c5:d3:
         79:0c:67:52:de:fe:a0:e1:31:fd:69:40:95:c6:7c:4e:62:ae:
         63:d0:89:59:bc:bc:16:3d:07:12:4d:3f:c0:28:1d:93:46:b2:
         9a:87:d8:b7:92:bc:e6:33:bf:c4:2e:2b:2e:cf:5b:72:b2:53:
         74:b9:25:c3:1f:d9:8f:16:db:c3:88:18:29:b0:c6:55:3b:bf:
         61:58:0c:83:9a:fb:f6:75:dc:f7:ec:ba:d4:b4:23:33:bb:9d:
         a5:11:73:f2:c1:bf:da:fd:1e:8c:a2:e4:24:e9:ab:65:d8:3f:
         3b:cb:5e:47:62:34:ce:45:a2:56:cf:bc:a3:76:6d:b5:cd:82:
         26:9b:e7:a1:f3:a8:68:53:71:15:67:11:cd:a7:9e:bb:32:52:
         26:76:63:05:a0:2b:87:c6:d7:d9:31:b1:a8:2d:e0:dd:84:19:
         24:8f:96:05:84:a3:f4:bb:8d:ca:2c:f0:75:84:c7:93:91:dd:
         12:54:d5:6d:2a:de:02:1c:58:36:83:19:1f:fc:02:a8:3a:b4:
         be:dc:b1:94:b3:c2:c2:bd:03:43:4e:a8:9d:d5:c8:d9:b7:0d:
         d5:dc:4a:08:67:09:80:ee:92:3e:c1:cf:3d:05:d7:0b:b4:c5:
         b0:10:1d:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE5MDkxMTAvBgNVBAUTKDkwOERCM0Y5Qjc0NkY1MjBCQkI5QTg0Qzg1M0Y2OTI2
QzE1RUI5QkQwHhcNMjYwMzA3MDQyOTE0WhcNMjYwMzE0MDQyOTE0WjAYMRYwFAYD
VQQDEw02OWFiYTk5Yi1hNDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArAipHCzy1EmiZDIB15zLhmdkZheBLTTqnjpxytxHycW0UZw6NbVTowbUnikP
AuRUr0ZsnTtnh4kgDuJVRs8jUJ+/s0paKGo2KKMa26YxMdcqI29absm4aMQ87pZk
jTautADOQ4OM0W4RUIuoeYblNwOMVfIFdOM4nXGjMwh1FlNijyF2+1rvyMLbKinJ
qmetL2o2/zWiM6Ob83wIsRkuKbL237PJuQ5fKwEUQWCSVMyiiI6JxN7waxbOwkQD
vXFlNbHGaszF/MfdOeNcLszPlDsV3kwL6lPDx5thqJd49YwQb11MwJFiMWdtpf2p
pJ2wVBVpPQKiJC/fk9EGaK7/aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7WB8Jh
VHZIUfIZrKOErGG/f6yRMB8GA1UdIwQYMBaAFJCNs/m3RvUgu7moTIU/aSbBXrm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8yMDlFRERDRTJB
MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi9rSTJ6LWJkRzlTQzd1YWhNaFQ5cEpzRmV1
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tJMnotYmRHOVNDN3VhaE1oVDlwSnNGZXViMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTkwOS8yMDlFRERDRTJBMzMxMUVGQkU5QUE4NTlDNEY5QUUwMi9rSTJ6LWJkRzlT
Qzd1YWhNaFQ5cEpzRmV1YjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEKfcXafPIB/wg0QHF2OXacXTeQxnUt7+oOEx/WlAlcZ8TmKuY9CJWby8Fj0H
Ek0/wCgdk0aymofYt5K85jO/xC4rLs9bcrJTdLklwx/Zjxbbw4gYKbDGVTu/YVgM
g5r79nXc9+y61LQjM7udpRFz8sG/2v0ejKLkJOmrZdg/O8teR2I0zkWiVs+8o3Zt
tc2CJpvnofOoaFNxFWcRzaeeuzJSJnZjBaArh8bX2TGxqC3g3YQZJI+WBYSj9LuN
yizwdYTHk5HdElTVbSreAhxYNoMZH/wCqDq0vtyxlLPCwr0DQ06ondXI2bcN1dxK
CGcJgO6SPsHPPQXXC7TFsBAdUw==
-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:29 2026 by rpki-client