Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
File:                     L9JLb9eYBEVzVDhmYs4w3aOyALU.mft (raw, json)
Hash identifier:          iXRoFIQoi3xB9z2eWkdJrTYFJm9frRhL0IHu9tbrq9I=
Subject key identifier:   99:50:CE:09:B2:48:C2:72:13:80:34:95:21:B7:5F:81:37:83:31:48
Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5
Certificate issuer:       /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
Manifest number:          0175
Signing time:             Tue 03 Mar 2026 04:18:42 +0000
Manifest this update:     Tue 03 Mar 2026 04:18:42 +0000
Manifest next update:     Tue 10 Mar 2026 04:18:42 +0000
Files and hashes:         1: L9JLb9eYBEVzVDhmYs4w3aOyALU.crl (hash: fC+lMmsarpMpEF9b0+ikhJc/wgJGDY5zxg1f3hWMyro=)
                          2: AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa (hash: YD6V2HI2hUFrH/8EXeFP7xfUl76wgNpHMjQUF10dCIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl
                          rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29DA, serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
        Validity
            Not Before: Mar  3 04:18:42 2026 GMT
            Not After : Mar 10 04:18:42 2026 GMT
        Subject: CN=69a66122-f326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:94:50:28:be:79:5f:1f:2b:d1:48:86:0a:12:
                    fe:83:8e:12:93:47:84:4a:f0:1f:c9:6a:d6:d4:52:
                    9b:32:95:10:a5:b4:f8:46:3e:e1:48:de:6e:19:4a:
                    a3:8c:f5:f5:9d:09:2b:24:35:60:3b:c7:2a:d9:9e:
                    70:ca:52:f0:ca:7c:3d:12:9d:a9:df:cb:33:b9:9e:
                    92:e3:7b:f4:03:84:8b:10:05:78:af:af:b6:bd:a2:
                    41:94:b7:e6:f5:49:ed:29:54:58:1d:64:07:ec:5e:
                    9d:1e:ff:d4:a0:af:7b:ed:96:1d:eb:81:f8:6c:ca:
                    e3:46:4f:b1:29:ee:46:1c:cb:1c:e1:5e:e7:52:ec:
                    36:8d:55:18:11:c6:65:3e:17:fb:65:c8:7a:3a:5a:
                    2d:b1:50:87:61:36:d9:88:ca:ed:4d:59:19:be:c8:
                    a4:eb:f6:fc:58:72:02:74:43:37:58:0c:ae:12:0b:
                    76:bf:19:ca:f6:05:70:b1:81:4c:c8:be:3f:b1:d3:
                    a0:b7:56:91:8a:79:03:5c:16:53:b0:94:3c:af:dc:
                    16:d3:e9:4a:f3:14:9c:fb:8f:16:2f:b1:68:ec:e7:
                    6c:c1:11:2f:4b:9b:87:9f:2c:09:74:1b:5a:98:01:
                    57:a3:be:39:12:da:db:b0:a4:60:05:42:6f:96:39:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:50:CE:09:B2:48:C2:72:13:80:34:95:21:B7:5F:81:37:83:31:48
            X509v3 Authority Key Identifier:
                keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:78:3f:6e:4f:00:19:a0:85:46:6b:22:54:9e:57:c5:34:d1:
         1b:bc:6c:b8:c8:8b:c0:56:08:13:d1:d3:0e:18:60:5a:c2:a0:
         b1:be:63:ac:33:10:01:93:f4:0c:dd:34:db:fb:11:77:d5:08:
         cc:b7:6f:83:01:75:f5:11:bf:ad:a7:07:0d:57:0a:e8:45:e3:
         90:dc:b4:0f:90:09:39:be:45:e4:95:67:cc:a8:b4:22:e1:9c:
         b5:da:10:67:b6:15:4f:12:eb:c9:b3:66:df:8d:e6:03:ef:33:
         34:5b:53:a1:78:80:08:2b:ad:7c:6d:19:e3:89:cf:10:10:3b:
         da:a5:f9:04:e1:c5:1c:fd:66:94:c9:b4:2d:38:37:f4:73:ac:
         0e:9a:3a:5b:ad:b3:4d:4e:65:9d:30:53:61:9d:4b:40:b3:95:
         a1:02:ce:bb:fc:bb:4c:f3:7e:e4:19:ec:75:51:e7:d2:9e:73:
         41:d8:02:20:33:4c:cb:1e:87:e8:ac:1f:fb:53:b9:6b:e8:46:
         f5:59:b1:7f:d4:aa:f3:60:2f:f8:fb:b2:90:28:86:1e:b0:3a:
         90:5c:96:f4:b2:0e:80:90:26:99:81:c1:20:b1:2a:40:94:c4:
         87:56:23:48:a9:02:0e:54:b4:9a:38:44:bc:18:66:96:d8:5d:
         af:82:53:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI5REExMTAvBgNVBAUTKDJGRDI0QjZGRDc5ODA0NDU3MzU0Mzg2NjYyQ0UzMERE
QTNCMjAwQjUwHhcNMjYwMzAzMDQxODQyWhcNMjYwMzEwMDQxODQyWjAYMRYwFAYD
VQQDEw02OWE2NjEyMi1mMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2pRQKL55Xx8r0UiGChL+g44Sk0eESvAfyWrW1FKbMpUQpbT4Rj7hSN5uGUqj
jPX1nQkrJDVgO8cq2Z5wylLwynw9Ep2p38szuZ6S43v0A4SLEAV4r6+2vaJBlLfm
9UntKVRYHWQH7F6dHv/UoK977ZYd64H4bMrjRk+xKe5GHMsc4V7nUuw2jVUYEcZl
Phf7Zch6OlotsVCHYTbZiMrtTVkZvsik6/b8WHICdEM3WAyuEgt2vxnK9gVwsYFM
yL4/sdOgt1aRinkDXBZTsJQ8r9wW0+lK8xSc+48WL7Fo7OdswREvS5uHnywJdBta
mAFXo745EtrbsKRgBUJvljmUVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlQzgmy
SMJyE4A0lSG3X4E3gzFIMB8GA1UdIwQYMBaAFC/SS2/XmARFc1Q4ZmLOMN2jsgC1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zNEI1QjUxNERB
NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJFVnpWRGhtWXM0dzNhT3lB
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0w5SkxiOWVZQkVWelZEaG1ZczR3M2FPeUFMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjlEQS8zNEI1QjUxNERBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJF
VnpWRGhtWXM0dzNhT3lBTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdHg/bk8AGaCFRmsiVJ5XxTTRG7xsuMiLwFYIE9HTDhhgWsKgsb5jrDMQAZP0
DN002/sRd9UIzLdvgwF19RG/racHDVcK6EXjkNy0D5AJOb5F5JVnzKi0IuGctdoQ
Z7YVTxLrybNm343mA+8zNFtToXiACCutfG0Z44nPEBA72qX5BOHFHP1mlMm0LTg3
9HOsDpo6W62zTU5lnTBTYZ1LQLOVoQLOu/y7TPN+5BnsdVHn0p5zQdgCIDNMyx6H
6Kwf+1O5a+hG9Vmxf9Sq82Av+PuykCiGHrA6kFyW9LIOgJAmmYHBILEqQJTEh1Yj
SKkCDlS0mjhEvBhmlthdr4JTTQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:27 2026 by rpki-client