Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
File:                     72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json)
Hash identifier:          JB+vfZ1YSSlcNp3grzhifVd9XXDcb7itrhS6ZjIW008=
Subject key identifier:   A7:B5:AD:73:49:93:D2:18:15:E0:9C:9F:50:6E:64:68:61:DF:41:2C
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Certificate issuer:       /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial:       1330
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
Manifest number:          1305
Signing time:             Fri 20 Mar 2026 16:52:23 +0000
Manifest this update:     Fri 20 Mar 2026 16:52:23 +0000
Manifest next update:     Fri 27 Mar 2026 16:52:23 +0000
Files and hashes:         1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: bdqNSCai6SOiwsC9zxEXNuTo5KdqRj4wnZEW03YTdV4=)
                          2: 08DCBB24DC8011F0AB4C816E3A6F56BC.roa (hash: 96/u/vfI+bwY9VG+LkNCPlB++nMFvbH2aJWjRVlgcT0=)
                          3: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: QFWUYSiZUJc8h7YGZVvOm14atuGAeik2TO0HfRh5JB8=)
                          4: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: pA/9FBNMln0DoNLtOKkiTbgr8bTJzminkkAizik/o0Y=)
                          5: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: BhycUplre6fTkJAbGpyBSXmycS7IRjXv3cPTzMpBNhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 16:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4912 (0x1330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
        Validity
            Not Before: Mar 20 16:52:23 2026 GMT
            Not After : Mar 27 16:52:23 2026 GMT
        Subject: CN=69bd7b47-4527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8f:f9:b1:dd:8f:fd:19:6d:bd:d4:b4:6d:62:
                    3c:ce:1f:0e:6b:55:22:50:d7:44:f0:56:1d:6d:49:
                    52:a0:c6:14:34:94:c4:d7:ad:01:e8:e8:e9:81:97:
                    ca:c2:d6:bf:5d:d9:32:51:61:11:a1:69:79:d6:88:
                    65:4f:b7:78:93:c4:d2:3c:c3:b6:19:7b:06:2c:a7:
                    7d:87:d7:2a:d8:5a:e1:24:ec:88:12:6b:e3:8d:ec:
                    71:38:4c:91:5a:d7:2f:6d:ac:2b:ac:2b:08:5c:85:
                    5f:9d:42:29:cc:d9:9a:9c:de:6e:86:c2:3b:93:f1:
                    6f:da:02:56:dc:b6:b9:64:8d:ab:36:de:1e:05:2a:
                    49:20:83:a9:20:cc:08:89:c8:d1:85:15:6b:52:8d:
                    92:6d:52:aa:de:40:f9:d1:cf:7d:0c:3e:8b:4d:bc:
                    6d:2b:58:a9:45:67:8b:0e:14:89:42:db:79:99:fa:
                    fc:c8:6d:45:b6:46:b8:18:55:6c:5d:11:c1:a5:01:
                    0b:37:ad:1c:f5:59:4d:d5:5b:0a:cf:bb:34:53:85:
                    dd:02:f4:e1:f8:90:c6:48:aa:ef:06:97:aa:be:0a:
                    74:d7:9f:9d:12:0d:16:07:21:44:69:09:4a:76:ea:
                    5d:5b:e4:82:bc:ec:95:e3:ad:cc:4f:91:2a:3c:1e:
                    63:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B5:AD:73:49:93:D2:18:15:E0:9C:9F:50:6E:64:68:61:DF:41:2C
            X509v3 Authority Key Identifier:
                keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:66:81:9c:27:fd:1f:52:e9:1f:c0:7c:25:18:ba:b1:a4:d1:
         8a:a5:f7:11:3d:28:ea:a0:9c:5a:24:1f:b0:c1:8a:98:af:64:
         78:a1:e7:24:e1:37:5a:2f:81:87:d8:42:03:10:de:c3:8e:69:
         73:62:45:4e:75:04:94:bd:c3:29:f6:8d:06:9d:24:77:41:5a:
         45:7d:c2:33:f4:04:53:a3:06:f3:9f:6f:70:63:2a:d6:9e:01:
         b2:f2:52:48:3a:22:a2:ca:b8:e2:4b:e0:6e:87:93:db:da:3d:
         b6:ec:06:b6:16:4e:67:9f:3c:17:b1:73:0e:40:9d:60:5f:22:
         16:cb:46:5b:2d:f6:1f:a6:db:f2:50:ca:54:bc:2b:e0:50:83:
         e4:f2:a8:e3:d6:c2:6b:be:93:b9:7e:bd:fb:bc:41:89:45:e4:
         3b:bf:cd:96:d6:d6:a5:2b:50:94:82:f2:13:3c:44:38:5f:89:
         2b:46:c7:e4:d2:b0:b9:e5:78:fb:d2:88:bd:96:7f:d7:8e:f6:
         04:1a:65:f4:0a:88:75:d0:22:19:66:15:54:81:f8:68:39:77:
         aa:25:ae:b8:6e:07:9a:a6:25:4d:44:51:91:e8:bb:43:84:f7:
         ef:19:77:50:40:2f:0b:f3:a7:1d:bd:23:43:2a:b3:9f:43:55:
         f0:91:53:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB
RkNDNTI4NTkwHhcNMjYwMzIwMTY1MjIzWhcNMjYwMzI3MTY1MjIzWjAYMRYwFAYD
VQQDEw02OWJkN2I0Ny00NTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnI/5sd2P/RltvdS0bWI8zh8Oa1UiUNdE8FYdbUlSoMYUNJTE160B6OjpgZfK
wta/XdkyUWERoWl51ohlT7d4k8TSPMO2GXsGLKd9h9cq2FrhJOyIEmvjjexxOEyR
WtcvbawrrCsIXIVfnUIpzNmanN5uhsI7k/Fv2gJW3La5ZI2rNt4eBSpJIIOpIMwI
icjRhRVrUo2SbVKq3kD50c99DD6LTbxtK1ipRWeLDhSJQtt5mfr8yG1Ftka4GFVs
XRHBpQELN60c9VlN1VsKz7s0U4XdAvTh+JDGSKrvBpeqvgp015+dEg0WByFEaQlK
dupdW+SCvOyV463MT5EqPB5jiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKe1rXNJ
k9IYFeCcn1BuZGhh30EsMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz
ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW
QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAz2aBnCf9H1LpH8B8JRi6saTRiqX3ET0o6qCcWiQfsMGKmK9keKHnJOE3Wi+B
h9hCAxDew45pc2JFTnUElL3DKfaNBp0kd0FaRX3CM/QEU6MG859vcGMq1p4BsvJS
SDoiosq44kvgboeT29o9tuwGthZOZ588F7FzDkCdYF8iFstGWy32H6bb8lDKVLwr
4FCD5PKo49bCa76TuX69+7xBiUXkO7/NltbWpStQlILyEzxEOF+JK0bH5NKwueV4
+9KIvZZ/1472BBpl9AqIddAiGWYVVIH4aDl3qiWuuG4HmqYlTURRkei7Q4T37xl3
UEAvC/OnHb0jQyqzn0NV8JFTGw==
-----END CERTIFICATE-----
Generated at Sun Mar 22 07:20:20 2026 by rpki-client