Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
File:                     -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json)
Hash identifier:          yyYEOTCVzW/tXPCHSMU0lBBIV3vHkj9Hdp3i75rlvII=
Subject key identifier:   18:4B:19:6B:15:6B:BA:FF:FA:48:57:40:6D:6F:B0:FD:CE:2A:14:8D
Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73
Certificate issuer:       /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
Certificate serial:       0462
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
Manifest number:          0454
Signing time:             Thu 12 Mar 2026 23:46:55 +0000
Manifest this update:     Thu 12 Mar 2026 23:46:54 +0000
Manifest next update:     Thu 19 Mar 2026 23:46:54 +0000
Files and hashes:         1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: YNAPqw3rPUyPYT6WQ7o4ffTu2RAahkFw0a43/pPizhE=)
                          2: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: m5Zp36HLKWq14buNjXUXM88ah3I3cvh6NwVn7wphM5U=)
                          3: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: g8QyFrY2SL1yfIP7mOq7u1s7UxTRzh1nPBxe7Z6/CnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl
                          rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1122 (0x462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE567, serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73
        Validity
            Not Before: Mar 12 23:46:54 2026 GMT
            Not After : Mar 19 23:46:54 2026 GMT
        Subject: CN=69b3506e-9e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ad:50:ee:3f:80:f8:c0:b9:56:05:1e:bc:f6:
                    7c:c1:6d:99:13:f1:3f:69:e5:e2:31:40:a4:69:80:
                    41:95:61:5f:66:a1:c8:1d:7a:73:8e:24:62:19:8a:
                    84:62:82:bc:7c:76:f7:24:38:b9:30:6f:32:fe:a3:
                    27:d9:ca:01:26:84:7a:dd:c4:ba:23:c4:9d:d1:e9:
                    d1:61:57:4b:fe:5f:c0:4b:a0:f9:92:1b:5f:31:c3:
                    3e:05:97:30:2b:0d:a1:fb:ee:bc:aa:f7:12:ca:13:
                    24:7c:79:b1:1a:90:cd:15:dc:58:f3:66:49:79:ac:
                    c2:f4:9c:54:7e:e2:46:b7:34:f2:0e:f0:7d:12:a5:
                    7c:80:62:ed:40:76:b3:3b:c1:c5:45:fc:76:e2:a7:
                    7e:a4:48:d8:dc:27:c7:0f:ff:5c:62:76:32:c3:aa:
                    18:63:84:c4:b3:d2:9c:a5:fe:5a:05:bf:7a:2a:01:
                    37:e1:ae:dd:e2:d6:9c:6e:43:38:f3:2f:1b:74:b9:
                    48:e4:e1:32:23:40:ae:4f:41:17:da:68:5d:71:16:
                    31:dc:aa:3a:b3:d7:4c:43:c6:a7:e8:21:18:b2:ef:
                    6e:6e:25:13:4d:4b:68:e7:e1:19:a2:25:10:e5:fd:
                    3e:8b:9b:6e:f5:f1:dd:c5:19:81:4e:39:27:07:53:
                    fa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4B:19:6B:15:6B:BA:FF:FA:48:57:40:6D:6F:B0:FD:CE:2A:14:8D
            X509v3 Authority Key Identifier:
                keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:67:63:12:27:45:5b:14:63:b9:17:05:13:66:14:6e:9c:67:
         dc:c9:e7:27:23:69:9d:31:9b:61:f5:cd:2d:5a:60:2a:42:e6:
         c4:6d:8e:2c:1a:86:09:3f:1a:bb:70:b1:78:65:69:1c:63:92:
         fc:ef:5d:e2:01:d8:60:c3:3a:37:a9:2b:34:a4:74:d1:50:81:
         3b:3c:a9:d9:e3:2e:a7:9b:6b:f0:63:d1:e9:e6:63:b1:f1:ae:
         0b:8d:f9:81:b6:dd:ec:eb:99:39:ba:19:ca:61:3a:e4:20:39:
         27:a7:df:be:6b:10:0c:0b:a6:c4:6a:17:44:42:b2:72:ab:45:
         26:b5:92:4c:de:52:fc:58:bb:db:bb:51:66:ba:7e:31:c2:57:
         3e:4a:b0:31:20:1e:71:80:79:8f:75:26:33:15:3c:84:f1:a5:
         ae:20:10:2c:50:15:0e:a3:94:07:fd:83:97:53:90:f6:8b:5f:
         1c:0d:fb:73:70:11:ab:bb:10:41:dd:32:8f:f4:57:c2:f1:b2:
         27:9c:88:e4:42:3f:5a:e8:24:e8:62:0f:4d:c0:bd:57:a0:35:
         d4:65:e2:cb:b2:41:ea:71:cc:aa:b2:ab:9a:dc:33:96:38:b7:
         f8:b0:16:47:98:0c:5a:65:ed:a7:a5:4f:11:d6:16:fc:a9:98:
         94:df:26:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU1NjcxMTAvBgNVBAUTKEZCNEFCNUE5QTREQzM3QkJENjVFNjFFNDJBNDI1NkNG
OTUxQjhDNzMwHhcNMjYwMzEyMjM0NjU0WhcNMjYwMzE5MjM0NjU0WjAYMRYwFAYD
VQQDEw02OWIzNTA2ZS05ZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2a1Q7j+A+MC5VgUevPZ8wW2ZE/E/aeXiMUCkaYBBlWFfZqHIHXpzjiRiGYqE
YoK8fHb3JDi5MG8y/qMn2coBJoR63cS6I8Sd0enRYVdL/l/AS6D5khtfMcM+BZcw
Kw2h++68qvcSyhMkfHmxGpDNFdxY82ZJeazC9JxUfuJGtzTyDvB9EqV8gGLtQHaz
O8HFRfx24qd+pEjY3CfHD/9cYnYyw6oYY4TEs9Kcpf5aBb96KgE34a7d4tacbkM4
8y8bdLlI5OEyI0CuT0EX2mhdcRYx3Ko6s9dMQ8an6CEYsu9ubiUTTUto5+EZoiUQ
5f0+i5tu9fHdxRmBTjknB1P6/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBhLGWsV
a7r/+khXQG1vsP3OKhSNMB8GA1UdIwQYMBaAFPtKtamk3De71l5h5CpCVs+VG4xz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTU2Ny9FNjc5OTRERThG
RjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043dldYbUhrS2tKV3o1VWJq
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy0wcTFxYVRjTjd2V1htSGtLa0pXejVVYmpITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTU2Ny9FNjc5OTRERThGRjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043
dldYbUhrS2tKV3o1VWJqSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq2djEidFWxRjuRcFE2YUbpxn3MnnJyNpnTGbYfXNLVpgKkLmxG2OLBqGCT8a
u3CxeGVpHGOS/O9d4gHYYMM6N6krNKR00VCBOzyp2eMup5tr8GPR6eZjsfGuC435
gbbd7OuZOboZymE65CA5J6ffvmsQDAumxGoXREKycqtFJrWSTN5S/Fi727tRZrp+
McJXPkqwMSAecYB5j3UmMxU8hPGlriAQLFAVDqOUB/2Dl1OQ9otfHA37c3ARq7sQ
Qd0yj/RXwvGyJ5yI5EI/Wugk6GIPTcC9V6A11GXiy7JB6nHMqrKrmtwzlji3+LAW
R5gMWmXtp6VPEdYW/KmYlN8mmQ==
-----END CERTIFICATE-----
Generated at Sat Mar 14 12:07:47 2026 by rpki-client