Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
File:                     cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json)
Hash identifier:          401PsYq6pkv9YjBs2PJnAtnm71KqVOoGoANNNZ4R1/U=
Subject key identifier:   F5:C7:31:9A:AA:AA:0A:66:E5:D0:42:56:E1:E7:00:9D:C5:A5:04:52
Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E
Certificate issuer:       /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
Manifest number:          012D
Signing time:             Sat 21 Mar 2026 04:34:45 +0000
Manifest this update:     Sat 21 Mar 2026 04:34:45 +0000
Manifest next update:     Sat 28 Mar 2026 04:34:45 +0000
Files and hashes:         1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: i6tbEfWuWHJ8rTizs1lzk+GjuaQwAWcshTU+cn6H4ek=)
                          2: D93EF164ABF311F0BBF66516C4F9AE02.roa (hash: 2kOeP60myM1mAUly5SCWYSaPMPRSRG8lPF8mhNDgtQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl
                          rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 04:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
        Validity
            Not Before: Mar 21 04:34:45 2026 GMT
            Not After : Mar 28 04:34:45 2026 GMT
        Subject: CN=69be1fe5-292e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:9c:2d:f5:80:bd:44:41:be:63:9a:13:5d:
                    88:97:33:57:86:fd:49:39:81:8b:b8:62:86:1d:bc:
                    75:a1:b7:43:bc:d0:74:17:b2:ab:5e:0e:64:1e:57:
                    d1:7b:c3:6d:15:72:e9:17:7c:b5:c3:0b:e5:00:51:
                    18:db:62:6b:51:c3:39:22:19:d1:e9:9a:15:16:b8:
                    37:02:2a:e2:b2:16:50:8d:32:21:15:0f:73:0f:bf:
                    9e:35:2d:f4:2d:40:52:b6:3d:c5:a0:04:5a:ec:d6:
                    28:74:4c:6a:bc:e0:bb:3f:8c:a4:fe:03:fb:27:15:
                    00:40:84:aa:ee:67:88:1a:45:0f:75:4a:17:07:67:
                    23:09:5c:06:b4:7a:59:52:43:e8:0b:5b:d9:6e:98:
                    d0:4c:45:dd:bc:32:09:09:34:63:3f:f3:c6:27:31:
                    0f:e2:0c:5e:88:3f:9c:d6:87:63:54:59:83:56:00:
                    1b:0c:16:d8:0a:4b:13:f9:3c:8d:33:0e:33:18:8b:
                    63:54:94:3f:02:65:91:55:e3:a3:65:cd:8d:69:fe:
                    b6:43:9d:e5:fa:66:23:d4:4f:81:ec:a9:91:04:94:
                    f0:f5:73:ca:26:e3:b7:5f:66:65:98:31:6f:59:ec:
                    b9:d8:48:ca:83:93:12:bb:93:d9:40:f8:e6:96:b3:
                    0d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C7:31:9A:AA:AA:0A:66:E5:D0:42:56:E1:E7:00:9D:C5:A5:04:52
            X509v3 Authority Key Identifier:
                keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:5f:4f:31:8b:4d:84:62:64:59:81:0d:a7:c6:2d:b8:f9:
         70:4e:e3:4f:b6:84:ae:64:e2:b6:d8:a6:b1:8d:f4:59:e8:e3:
         52:18:52:9b:e6:1e:f0:79:0a:4b:af:19:e1:4d:b9:af:b0:f6:
         ae:8d:b2:6f:fc:fc:3b:2e:22:b3:0a:2a:a5:10:ff:05:78:f2:
         a1:7c:4c:68:ca:a1:9b:3a:47:72:4d:ee:85:4f:77:bc:48:2c:
         e2:57:89:15:3a:81:e9:3a:d6:0c:4c:b5:f1:af:d5:4c:79:3b:
         a7:85:d1:31:9b:bc:20:57:fc:55:ff:e7:49:43:65:5c:e9:39:
         f1:71:f2:d9:94:fd:70:8e:ab:63:79:d0:7e:ec:e2:7c:c1:d6:
         33:18:7e:ca:98:31:78:0c:d8:bf:2f:9b:21:7d:79:b4:ee:21:
         36:e1:d3:8d:8c:f8:d8:77:b7:ce:ba:8d:8b:77:10:5e:25:57:
         9e:6e:d9:b8:4f:b2:35:d9:dd:bc:ea:c2:cc:4a:52:98:c9:ac:
         d1:49:60:fb:8d:8a:e0:23:ae:34:0e:80:1b:71:e6:93:ba:d4:
         98:d7:b4:18:7f:66:4f:5f:ee:6f:73:a0:bd:a6:3b:ab:33:2c:
         93:0b:af:bd:e7:29:b4:b7:90:98:24:1a:70:42:9e:71:95:df:
         db:a7:f3:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM2RTcxMTAvBgNVBAUTKDcxMTYxNzAwMkQ5RjBDOUVCNjVCNEVERDYxRjdBMUM5
MUZDREI4M0UwHhcNMjYwMzIxMDQzNDQ1WhcNMjYwMzI4MDQzNDQ1WjAYMRYwFAYD
VQQDEw02OWJlMWZlNS0yOTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkYicLfWAvURBvmOaE12IlzNXhv1JOYGLuGKGHbx1obdDvNB0F7KrXg5kHlfR
e8NtFXLpF3y1wwvlAFEY22JrUcM5IhnR6ZoVFrg3AirishZQjTIhFQ9zD7+eNS30
LUBStj3FoARa7NYodExqvOC7P4yk/gP7JxUAQISq7meIGkUPdUoXB2cjCVwGtHpZ
UkPoC1vZbpjQTEXdvDIJCTRjP/PGJzEP4gxeiD+c1odjVFmDVgAbDBbYCksT+TyN
Mw4zGItjVJQ/AmWRVeOjZc2Naf62Q53l+mYj1E+B7KmRBJTw9XPKJuO3X2ZlmDFv
Wey52EjKg5MSu5PZQPjmlrMNhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXHMZqq
qgpm5dBCVuHnAJ3FpQRSMB8GA1UdIwQYMBaAFHEWFwAtnwyetltO3WH3ockfzbg+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzZFNy9FNEEwQ0NBRTVE
REQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRKNjJXMDdkWWZlaHlSX051
RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NSWVhBQzJmREo2MlcwN2RZZmVoeVJfTnVENC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzZFNy9FNEEwQ0NBRTVEREQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRK
NjJXMDdkWWZlaHlSX051RDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh7JfTzGLTYRiZFmBDafGLbj5cE7jT7aErmTittimsY30WejjUhhSm+Ye8HkK
S68Z4U25r7D2ro2yb/z8Oy4iswoqpRD/BXjyoXxMaMqhmzpHck3uhU93vEgs4leJ
FTqB6TrWDEy18a/VTHk7p4XRMZu8IFf8Vf/nSUNlXOk58XHy2ZT9cI6rY3nQfuzi
fMHWMxh+ypgxeAzYvy+bIX15tO4hNuHTjYz42He3zrqNi3cQXiVXnm7ZuE+yNdnd
vOrCzEpSmMms0Ulg+42K4COuNA6AG3Hmk7rUmNe0GH9mT1/ub3OgvaY7qzMskwuv
vecptLeQmCQacEKecZXf26fz/g==
-----END CERTIFICATE-----
Generated at Sat Mar 21 23:44:21 2026 by rpki-client