Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
File:                     y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json)
Hash identifier:          mLkilH5+NchQQtRpDP1257QYCbtBOPxMB8vvW2ttFJY=
Subject key identifier:   B3:97:FE:95:D1:35:8D:A6:7C:41:54:44:C3:B3:5B:1E:15:C2:AD:D5
Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2
Certificate issuer:       /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
Certificate serial:       040C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
Manifest number:          0405
Signing time:             Wed 25 Mar 2026 00:06:02 +0000
Manifest this update:     Wed 25 Mar 2026 00:06:02 +0000
Manifest next update:     Wed 01 Apr 2026 00:06:02 +0000
Files and hashes:         1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: yuOyqRnS/TvQirpvmstdgwJe+KkCv5vCKOjGzo1XFm8=)
                          2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: Wrx7+0yyE0y6mHBZKupTJpJMKjJY9lireuqMWBGxSlg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1036 (0x40c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
        Validity
            Not Before: Mar 25 00:06:02 2026 GMT
            Not After : Apr  1 00:06:02 2026 GMT
        Subject: CN=69c326ea-4da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:2b:7d:a4:13:72:96:15:bc:1a:d6:a5:7f:
                    0f:3f:b5:0c:a5:b4:f6:17:41:52:2a:4e:15:f6:11:
                    8e:89:02:bc:68:be:8f:45:36:03:31:8b:7c:65:40:
                    72:be:88:ac:c8:84:66:05:8e:35:cf:16:e4:3c:bd:
                    6c:dc:ef:a4:d3:38:d2:c3:fa:08:11:bf:48:59:20:
                    fe:50:68:c1:43:0d:e7:5b:4b:c8:22:b0:70:1e:80:
                    32:bb:31:2d:04:8f:22:ff:39:c2:b3:e7:83:ab:cf:
                    d1:5d:14:db:df:32:bb:08:94:6c:b9:a8:2b:4f:1f:
                    2b:d8:c3:28:55:8e:e1:95:14:54:fb:9d:e2:30:24:
                    b4:e8:0a:83:52:38:af:d6:64:a2:18:8c:39:4f:d4:
                    25:3d:2d:87:4f:14:8a:44:73:f7:f6:f6:86:52:3d:
                    48:38:60:7b:31:c2:e3:05:95:51:5e:6d:a7:4e:0f:
                    1f:3f:8d:42:d4:e1:a6:f5:89:46:fa:34:02:63:9f:
                    c8:6b:ab:bb:ea:d6:85:d6:12:29:16:61:4f:2a:6b:
                    50:e1:c0:89:02:23:1a:57:34:f3:41:02:1a:98:7d:
                    b5:6e:f3:e7:98:5c:92:ab:ce:54:67:3c:ca:cb:de:
                    cd:a9:35:21:f8:e2:1e:11:ad:f0:a4:15:8b:dd:f9:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:97:FE:95:D1:35:8D:A6:7C:41:54:44:C3:B3:5B:1E:15:C2:AD:D5
            X509v3 Authority Key Identifier:
                keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:2f:13:2d:e6:9d:df:d0:34:d6:79:0e:b0:34:f0:69:69:cc:
         73:66:6e:c2:d7:13:84:9b:c4:59:d4:f9:60:1a:e6:ab:aa:e3:
         41:9f:32:c6:3f:97:db:04:fd:99:7a:de:e0:3f:be:50:47:b5:
         66:00:0e:4b:99:38:7b:11:98:59:21:64:4d:de:f2:00:47:5d:
         93:50:94:3f:08:e1:db:55:9d:8f:c2:9c:4b:39:1f:63:99:68:
         ca:1e:06:f2:fd:33:76:33:ec:f1:e3:69:f1:17:95:0e:2c:95:
         be:b4:1d:52:b1:b7:a0:50:69:e2:3d:53:a7:dd:67:b2:33:91:
         ac:a3:c2:6a:f9:a6:33:39:52:85:ce:63:6f:18:57:da:6a:10:
         98:2f:ea:06:1c:a6:47:b0:cb:b5:cd:93:81:cc:8f:22:c8:e9:
         b1:c4:76:72:4b:d5:1c:ec:08:9f:9f:9d:97:ae:13:d8:34:67:
         29:c3:36:56:aa:ae:e2:a4:6c:0f:64:2c:35:4d:61:0e:29:1f:
         72:28:b0:bc:e7:c4:db:0c:3a:cd:d7:ab:b9:c3:72:6e:f9:91:
         84:14:f1:9a:2f:43:1e:1a:e0:f0:58:d9:87:68:c6:cf:fb:4d:
         fd:73:3c:63:10:7e:05:0c:a9:cc:90:ee:78:93:90:1c:f3:ea:
         75:d0:ef:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3MDAxMTAvBgNVBAUTKENCQkYyNjAzNzI0RDc4NTY2QjFDMTJDMzJENUM0ODFG
NUQzMEYxRjIwHhcNMjYwMzI1MDAwNjAyWhcNMjYwNDAxMDAwNjAyWjAYMRYwFAYD
VQQDEw02OWMzMjZlYS00ZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwFArfaQTcpYVvBrWpX8PP7UMpbT2F0FSKk4V9hGOiQK8aL6PRTYDMYt8ZUBy
voisyIRmBY41zxbkPL1s3O+k0zjSw/oIEb9IWSD+UGjBQw3nW0vIIrBwHoAyuzEt
BI8i/znCs+eDq8/RXRTb3zK7CJRsuagrTx8r2MMoVY7hlRRU+53iMCS06AqDUjiv
1mSiGIw5T9QlPS2HTxSKRHP39vaGUj1IOGB7McLjBZVRXm2nTg8fP41C1OGm9YlG
+jQCY5/Ia6u76taF1hIpFmFPKmtQ4cCJAiMaVzTzQQIamH21bvPnmFySq85UZzzK
y97NqTUh+OIeEa3wpBWL3fnrsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOX/pXR
NY2mfEFURMOzWx4Vwq3VMB8GA1UdIwQYMBaAFMu/JgNyTXhWaxwSwy1cSB9dMPHy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwMC9DQ0RCRjRGMEFF
NTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVGWnJIQkxETFZ4SUgxMHc4
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k3OG1BM0pOZUZackhCTERMVnhJSDEwdzhmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzcwMC9DQ0RCRjRGMEFFNTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVG
WnJIQkxETFZ4SUgxMHc4ZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqy8TLead39A01nkOsDTwaWnMc2ZuwtcThJvEWdT5YBrmq6rjQZ8yxj+X2wT9
mXre4D++UEe1ZgAOS5k4exGYWSFkTd7yAEddk1CUPwjh21Wdj8KcSzkfY5loyh4G
8v0zdjPs8eNp8ReVDiyVvrQdUrG3oFBp4j1Tp91nsjORrKPCavmmMzlShc5jbxhX
2moQmC/qBhymR7DLtc2TgcyPIsjpscR2ckvVHOwIn5+dl64T2DRnKcM2Vqqu4qRs
D2QsNU1hDikfciiwvOfE2ww6zderucNybvmRhBTxmi9DHhrg8FjZh2jGz/tN/XM8
YxB+BQypzJDueJOQHPPqddDvEQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:50:33 2026 by rpki-client