Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
File:                     fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json)
Hash identifier:          EkCcZz1UqsW8LM2I5GlZdb6Ce1svDSOy0P+76gKvmUw=
Subject key identifier:   ED:F2:E9:4C:22:E4:1C:DE:2C:69:5C:1C:F4:D5:7E:29:CC:4A:9F:78
Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
Certificate issuer:       /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
Manifest number:          8E
Signing time:             Fri 13 Mar 2026 06:31:11 +0000
Manifest this update:     Fri 13 Mar 2026 06:31:10 +0000
Manifest next update:     Fri 20 Mar 2026 06:31:10 +0000
Files and hashes:         1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: OLRE9mxfcVV8JZJCw734qp4Z3jbZpIKEyW54KcnkrkA=)
                          2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: 8TFnySzYjqGkLlYHhhpYGf9ApF8MAtmix4sZ0+hIQmI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 06:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
        Validity
            Not Before: Mar 13 06:31:10 2026 GMT
            Not After : Mar 20 06:31:10 2026 GMT
        Subject: CN=69b3af2e-b01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a8:fe:c2:d3:62:07:dc:48:f2:ea:bb:e5:9f:
                    06:b5:9c:c2:9a:c4:f1:da:03:a9:e3:b5:21:d7:0e:
                    25:47:aa:71:34:16:0a:86:51:37:f2:35:60:df:10:
                    a9:87:a8:a5:55:ca:e2:0c:62:4f:e7:34:9e:26:78:
                    aa:f5:ef:20:15:83:37:b2:20:74:0d:19:58:72:a9:
                    9b:53:d5:7d:c3:27:44:5a:07:12:d4:0e:54:88:ef:
                    c2:8a:4f:af:bc:0f:55:1a:10:34:f9:bc:c1:a9:d6:
                    38:93:ac:e4:43:1d:3e:1b:4d:07:08:6e:7c:66:5a:
                    09:ef:30:bd:db:1d:1f:26:75:37:e2:80:c8:df:78:
                    91:40:a4:6a:d8:f1:ce:29:35:df:20:d9:99:b3:28:
                    f9:33:c8:5d:cf:d6:3c:28:d3:c3:7c:a8:46:da:e3:
                    42:1a:bd:df:6b:38:22:c1:14:c9:af:34:5e:d7:75:
                    20:c9:de:72:73:6b:31:59:da:22:9f:e0:9e:45:6a:
                    cb:c4:49:eb:e3:f0:3b:89:c3:1e:bb:b6:ec:a6:84:
                    0f:c0:35:3c:eb:e9:ed:a5:fe:8b:f0:4c:cf:92:50:
                    44:4f:44:98:bd:14:d5:62:19:82:c3:a3:c0:62:5f:
                    b7:2c:6e:20:42:68:9b:fa:b6:62:a0:f1:d8:74:19:
                    48:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F2:E9:4C:22:E4:1C:DE:2C:69:5C:1C:F4:D5:7E:29:CC:4A:9F:78
            X509v3 Authority Key Identifier:
                keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b2:c9:3e:19:04:f6:ff:7b:c1:67:4a:a6:c1:16:e0:7b:4a:
         d7:92:f5:15:42:fe:38:66:a6:d0:c9:70:fe:19:e4:1d:ab:89:
         5c:f9:33:b5:14:9d:3b:95:61:d6:f9:a3:7f:a6:28:ad:a5:c0:
         e6:07:8b:e1:63:f3:e7:7b:8d:b7:3e:67:b3:ee:f8:cf:55:f2:
         95:c1:ed:29:b4:24:61:21:cd:6f:cc:bc:20:f7:92:34:1d:d8:
         36:71:1b:c5:ef:54:59:b9:c2:c2:79:4f:94:dc:d7:03:10:33:
         3a:0c:07:a0:09:0a:8f:64:51:70:a3:36:57:33:c1:2f:46:72:
         f5:1e:af:fb:1c:27:7d:9b:1a:cb:7f:10:7e:b3:83:2b:89:89:
         63:5c:06:7c:ba:29:62:73:b6:d3:d8:b3:20:61:3a:43:5d:c3:
         5d:67:0e:87:ce:5f:e5:29:af:3e:fb:65:80:35:af:7b:96:ea:
         1c:98:85:ae:82:3d:8f:51:94:c3:47:0d:9a:a2:df:43:2c:65:
         2f:84:db:d0:3d:5f:07:bc:db:81:37:56:ee:d4:7f:e1:69:6e:
         a9:f0:cd:39:f1:54:51:15:50:f4:a2:81:fd:b5:db:4f:ea:92:
         fe:ba:32:b7:ca:0e:76:35:20:d7:f8:3c:cb:14:55:4a:f4:2e:
         8a:a3:97:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRDNjgxMTAvBgNVBAUTKDdFM0FDNjkxOUMyMjhGOTgwMUFDRjkwNzVEOTA4RTUx
MkRENkRBMzQwHhcNMjYwMzEzMDYzMTEwWhcNMjYwMzIwMDYzMTEwWjAYMRYwFAYD
VQQDEw02OWIzYWYyZS1iMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmKj+wtNiB9xI8uq75Z8GtZzCmsTx2gOp47Uh1w4lR6pxNBYKhlE38jVg3xCp
h6ilVcriDGJP5zSeJniq9e8gFYM3siB0DRlYcqmbU9V9wydEWgcS1A5UiO/Cik+v
vA9VGhA0+bzBqdY4k6zkQx0+G00HCG58ZloJ7zC92x0fJnU34oDI33iRQKRq2PHO
KTXfINmZsyj5M8hdz9Y8KNPDfKhG2uNCGr3fazgiwRTJrzRe13Ugyd5yc2sxWdoi
n+CeRWrLxEnr4/A7icMeu7bspoQPwDU86+ntpf6L8EzPklBET0SYvRTVYhmCw6PA
Yl+3LG4gQmib+rZioPHYdBlIzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3y6Uwi
5BzeLGlcHPTVfinMSp94MB8GA1UdIwQYMBaAFH46xpGcIo+YAaz5B12QjlEt1to0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREM2OC81NkZDRTA4QzUx
OTcxMUYwQjZFOTc4NUVDNEY5QUUwMi9manJHa1p3aWo1Z0JyUGtIWFpDT1VTM1cy
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
REM2OC81NkZDRTA4QzUxOTcxMUYwQjZFOTc4NUVDNEY5QUUwMi9manJHa1p3aWo1
Z0JyUGtIWFpDT1VTM1cyalEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqrLJPhkE9v97wWdKpsEW4HtK15L1FUL+OGam0Mlw/hnkHauJXPkztRSdO5Vh
1vmjf6YoraXA5geL4WPz53uNtz5ns+74z1XylcHtKbQkYSHNb8y8IPeSNB3YNnEb
xe9UWbnCwnlPlNzXAxAzOgwHoAkKj2RRcKM2VzPBL0Zy9R6v+xwnfZsay38QfrOD
K4mJY1wGfLopYnO209izIGE6Q13DXWcOh85f5SmvPvtlgDWve5bqHJiFroI9j1GU
w0cNmqLfQyxlL4Tb0D1fB7zbgTdW7tR/4WluqfDNOfFUURVQ9KKB/bXbT+qS/roy
t8oOdjUg1/g8yxRVSvQuiqOX8w==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:50:56 2026 by rpki-client