Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
File:                     iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json)
Hash identifier:          5ruEmT6rsTkrCbdEjxcxEYsd/CBkMxAk7d4MbwetQFw=
Subject key identifier:   80:A0:21:CF:3F:42:F2:10:4C:FA:E2:D9:55:77:38:9E:5B:D9:1C:42
Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10
Certificate issuer:       /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
Manifest number:          AB
Signing time:             Tue 03 Mar 2026 06:48:42 +0000
Manifest this update:     Tue 03 Mar 2026 06:48:42 +0000
Manifest next update:     Tue 10 Mar 2026 06:48:42 +0000
Files and hashes:         1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: kwIPmGNOXItoY+p3O86qGPIRq5jyzwL/wWjU9KK6eEQ=)
                          2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: SY3BwzCftGVZ3723+P2mum60QxTDJL2Satr/FIkLJnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl
                          rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
        Validity
            Not Before: Mar  3 06:48:42 2026 GMT
            Not After : Mar 10 06:48:42 2026 GMT
        Subject: CN=69a6844a-c0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:72:7e:2c:ba:ed:4b:1a:a8:e6:1f:f3:19:
                    a3:7a:5b:50:b1:63:55:b9:c8:7b:3b:61:0c:10:53:
                    87:ce:39:60:35:ec:8d:da:49:74:1a:29:7a:4f:3a:
                    04:dc:db:67:19:26:0a:89:e7:f7:ff:4d:e1:58:1d:
                    f5:5d:a7:10:dd:39:47:bc:a8:f9:74:65:f2:ab:42:
                    6d:b1:4f:03:53:84:5a:eb:69:0d:8e:18:b1:d0:20:
                    58:5d:9c:06:b7:63:30:e3:d7:4e:f6:15:be:5d:a7:
                    8b:63:11:db:b8:b9:a7:0e:64:c5:31:05:42:ee:cd:
                    cd:96:c4:82:92:ec:5f:1e:ef:bf:32:09:39:db:6d:
                    43:7e:08:b8:e6:37:d6:36:e8:57:a5:28:22:f0:92:
                    13:d3:17:8b:fa:a4:4d:95:11:f0:be:9b:4b:f5:29:
                    83:a5:1b:fc:96:a4:40:aa:d7:cf:b5:ad:b1:a6:88:
                    a8:6f:f7:22:d6:d0:d1:1c:de:65:72:d2:3f:c9:82:
                    07:6d:dd:21:56:3a:7a:b5:b8:68:59:8e:aa:bc:15:
                    f5:fa:b9:70:41:f9:27:99:80:3d:82:8e:b3:f6:7e:
                    c0:ca:d1:bd:6e:c3:95:3c:d7:83:ab:62:41:2f:06:
                    1a:fe:54:02:0e:bf:50:1d:77:1e:8f:a9:37:55:c1:
                    33:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A0:21:CF:3F:42:F2:10:4C:FA:E2:D9:55:77:38:9E:5B:D9:1C:42
            X509v3 Authority Key Identifier:
                keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:bf:21:5a:22:be:2b:0a:54:94:f1:9a:7d:35:9c:5f:87:7d:
         4a:13:c7:bd:2f:ec:b3:4e:6a:fe:2b:52:0a:f3:ac:a1:4c:af:
         61:88:08:59:a1:86:21:77:f1:4f:b2:40:3a:fd:60:d5:d8:e0:
         d9:30:c3:22:51:b0:c4:81:5c:83:03:95:9c:c6:ba:68:62:88:
         9c:f9:b1:af:21:e4:e5:18:d7:e4:5f:dd:d0:03:fe:b6:fb:2e:
         ea:e6:78:9e:25:5c:6a:54:f2:8e:9b:d4:54:2c:92:94:79:54:
         26:95:ba:85:ce:e6:37:ae:64:c8:0c:fc:52:d1:5f:36:4a:80:
         c9:8e:23:07:1f:53:56:24:d4:0e:87:cb:0d:0b:d0:87:35:8c:
         65:e4:4a:46:f1:85:66:ae:d7:01:1b:95:d8:3d:fa:ed:27:05:
         fd:90:1e:d3:66:10:bc:a1:a7:41:b3:4b:ad:21:bb:81:e7:34:
         aa:8b:32:61:9a:8b:26:0e:68:9d:fe:e4:a1:1a:b0:c0:c7:29:
         18:37:ff:dc:99:8d:43:db:81:f5:37:ac:2f:45:15:cf:66:4c:
         c0:58:96:08:f2:4f:8a:3e:5f:e0:9e:2e:bf:42:c6:e4:6a:44:
         fe:16:f7:be:bf:01:1f:b3:98:98:9d:f9:3b:e2:4b:18:7a:74:
         0e:6f:12:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQ0NjAxMTAvBgNVBAUTKDg4OTE5NTM4RUVERUM4MzIwRDVFQUY2QjFGMzJCMjk4
MjNBQjc4MTAwHhcNMjYwMzAzMDY0ODQyWhcNMjYwMzEwMDY0ODQyWjAYMRYwFAYD
VQQDEw02OWE2ODQ0YS1jMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYdyfiy67UsaqOYf8xmjeltQsWNVuch7O2EMEFOHzjlgNeyN2kl0Gil6TzoE
3NtnGSYKief3/03hWB31XacQ3TlHvKj5dGXyq0JtsU8DU4Ra62kNjhix0CBYXZwG
t2Mw49dO9hW+XaeLYxHbuLmnDmTFMQVC7s3NlsSCkuxfHu+/Mgk5221Dfgi45jfW
NuhXpSgi8JIT0xeL+qRNlRHwvptL9SmDpRv8lqRAqtfPta2xpoiob/ci1tDRHN5l
ctI/yYIHbd0hVjp6tbhoWY6qvBX1+rlwQfknmYA9go6z9n7AytG9bsOVPNeDq2JB
LwYa/lQCDr9QHXcej6k3VcEzqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFICgIc8/
QvIQTPri2VV3OJ5b2RxCMB8GA1UdIwQYMBaAFIiRlTju3sgyDV6vax8yspgjq3gQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDQ2MC8wNDk4NjQ3NjE0
ODcxMUYwQTc5RUFCMjZDNEY5QUUwMi9pSkdWT083ZXlESU5YcTlySHpLeW1DT3Jl
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lKR1ZPTzdleURJTlhxOXJIekt5bUNPcmVCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDQ2MC8wNDk4NjQ3NjE0ODcxMUYwQTc5RUFCMjZDNEY5QUUwMi9pSkdWT083ZXlE
SU5YcTlySHpLeW1DT3JlQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnr8hWiK+KwpUlPGafTWcX4d9ShPHvS/ss05q/itSCvOsoUyvYYgIWaGGIXfx
T7JAOv1g1djg2TDDIlGwxIFcgwOVnMa6aGKInPmxryHk5RjX5F/d0AP+tvsu6uZ4
niVcalTyjpvUVCySlHlUJpW6hc7mN65kyAz8UtFfNkqAyY4jBx9TViTUDofLDQvQ
hzWMZeRKRvGFZq7XARuV2D367ScF/ZAe02YQvKGnQbNLrSG7gec0qosyYZqLJg5o
nf7koRqwwMcpGDf/3JmNQ9uB9TesL0UVz2ZMwFiWCPJPij5f4J4uv0LG5GpE/hb3
vr8BH7OYmJ35O+JLGHp0Dm8Skw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:55 2026 by rpki-client