Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
File:                     RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json)
Hash identifier:          +vVOR+cCGTrkDPC/I4kop9hcwmWZkQWQIdPVLKFzgfI=
Subject key identifier:   93:E5:C9:B4:ED:02:2E:6A:BB:E1:6D:1F:E5:C2:02:1E:D9:4E:F4:36
Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
Certificate issuer:       /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Certificate serial:       095E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
Manifest number:          094A
Signing time:             Mon 02 Mar 2026 20:03:14 +0000
Manifest this update:     Mon 02 Mar 2026 20:03:14 +0000
Manifest next update:     Mon 09 Mar 2026 20:03:14 +0000
Files and hashes:         1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: xD/IG7SLBQFrYcDTKiVHdPrLIJeJdeK7bQOc+UnBlXg=)
                          2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: tEVppuvDqO2Igjts26bHGw8+2Z3qSj1DL7NhnyY1wWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl
                          rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 20:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2398 (0x95e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
        Validity
            Not Before: Mar  2 20:03:14 2026 GMT
            Not After : Mar  9 20:03:14 2026 GMT
        Subject: CN=69a5ed02-fe4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:f9:8e:c7:16:37:37:6e:dc:ba:04:93:6b:
                    36:b0:e3:50:6f:a7:d4:10:3c:a8:66:84:ef:91:5b:
                    06:55:e8:10:1a:31:c3:d2:88:08:bc:a5:47:72:9c:
                    9c:a9:83:a3:c6:b8:a2:cf:1a:e1:ea:43:4a:ba:f3:
                    93:75:eb:ad:22:ce:21:7c:5e:3d:ff:88:3c:b9:55:
                    71:ed:12:9a:ca:de:01:e9:85:a9:79:f9:70:12:ec:
                    20:97:38:49:46:9c:23:88:65:fe:45:68:29:16:fb:
                    86:44:f6:87:44:2f:8b:75:0b:74:d5:b8:de:f4:56:
                    52:75:ac:88:4f:b7:f6:11:c2:44:f4:09:88:ff:c3:
                    03:1f:a3:47:54:5d:60:f4:de:29:f0:81:d1:ce:12:
                    0a:22:b7:2a:9c:5e:c0:8d:1f:e1:48:8a:ce:f0:8b:
                    d0:a3:2f:b0:84:ed:b6:15:3e:81:27:55:24:9f:5c:
                    5b:87:e6:f3:d0:ae:8b:1b:12:09:71:a4:59:a4:03:
                    4e:be:a5:4b:60:1b:63:13:dc:fa:11:c4:80:49:15:
                    66:5c:2a:a4:70:ac:b1:f8:4d:a7:f1:f9:1b:06:4e:
                    92:1c:75:77:41:ae:71:b1:f3:e5:4f:d8:75:c0:6f:
                    00:a8:22:11:58:11:6e:78:02:f1:01:96:38:4d:71:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E5:C9:B4:ED:02:2E:6A:BB:E1:6D:1F:E5:C2:02:1E:D9:4E:F4:36
            X509v3 Authority Key Identifier:
                keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a4:fe:c8:a4:66:2d:6b:64:aa:a9:ab:42:82:da:82:4d:d2:
         27:39:34:b2:90:e0:e2:ba:2e:5a:e7:e1:da:de:c4:a8:83:3b:
         0f:71:a8:bc:32:82:a1:ec:74:ac:99:d8:41:22:e8:6b:92:23:
         f8:a5:e8:ca:a8:8c:91:4a:9c:b3:f3:1c:4e:95:85:be:e1:da:
         0e:0a:2b:86:bc:f4:a6:81:50:cd:88:b1:c6:c9:a8:b9:9f:62:
         85:a2:89:85:9f:2f:f7:a8:1b:54:2d:0f:66:46:be:40:51:32:
         fd:6c:de:e5:96:75:13:4a:fa:8a:db:13:70:04:9d:10:17:fc:
         00:8e:fb:59:6f:e3:a7:76:37:05:17:f3:d7:4f:c3:49:62:48:
         e9:2e:01:56:84:50:b2:71:89:13:ac:2c:4f:25:87:3a:09:75:
         1f:38:72:33:5a:51:9f:bb:4c:c1:9b:2c:cd:b5:4f:2f:8a:7a:
         bc:01:c4:24:6d:73:18:70:ec:17:59:5b:4d:9e:7e:06:d0:3b:
         61:71:ad:4b:7c:74:55:3a:16:34:a1:aa:9e:6c:5b:42:1b:62:
         9d:86:f9:e9:99:1c:4c:73:f0:41:d7:63:bd:85:5c:cd:a6:57:
         bb:1b:0b:96:68:30:8a:01:7a:a2:73:75:b4:a2:e6:82:29:c5:
         ec:c3:23:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I4QkExMTAvBgNVBAUTKDQ3MEE5MzQ0OUU2MTFGQTlBRDA1QTI4OUQ2MTg4MjIw
QjVGQ0ZDM0EwHhcNMjYwMzAyMjAwMzE0WhcNMjYwMzA5MjAwMzE0WjAYMRYwFAYD
VQQDEw02OWE1ZWQwMi1mZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuqX5jscWNzdu3LoEk2s2sONQb6fUEDyoZoTvkVsGVegQGjHD0ogIvKVHcpyc
qYOjxriizxrh6kNKuvOTdeutIs4hfF49/4g8uVVx7RKayt4B6YWpeflwEuwglzhJ
RpwjiGX+RWgpFvuGRPaHRC+LdQt01bje9FZSdayIT7f2EcJE9AmI/8MDH6NHVF1g
9N4p8IHRzhIKIrcqnF7AjR/hSIrO8IvQoy+whO22FT6BJ1Ukn1xbh+bz0K6LGxIJ
caRZpANOvqVLYBtjE9z6EcSASRVmXCqkcKyx+E2n8fkbBk6SHHV3Qa5xsfPlT9h1
wG8AqCIRWBFueALxAZY4TXGQhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPlybTt
Ai5qu+FtH+XCAh7ZTvQ2MB8GA1UdIwQYMBaAFEcKk0SeYR+prQWiidYYgiC1/Pw6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yQjczMkU3MEJB
ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2bXRCYUtKMWhpQ0lMWDhf
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1J3cVRSSjVoSDZtdEJhS0oxaGlDSUxYOF9Eby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjhCQS8yQjczMkU3MEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2
bXRCYUtKMWhpQ0lMWDhfRG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANqT+yKRmLWtkqqmrQoLagk3SJzk0spDg4rouWufh2t7EqIM7D3GovDKCoex0
rJnYQSLoa5Ij+KXoyqiMkUqcs/McTpWFvuHaDgorhrz0poFQzYixxsmouZ9ihaKJ
hZ8v96gbVC0PZka+QFEy/Wze5ZZ1E0r6itsTcASdEBf8AI77WW/jp3Y3BRfz10/D
SWJI6S4BVoRQsnGJE6wsTyWHOgl1HzhyM1pRn7tMwZsszbVPL4p6vAHEJG1zGHDs
F1lbTZ5+BtA7YXGtS3x0VToWNKGqnmxbQhtinYb56ZkcTHPwQddjvYVczaZXuxsL
lmgwigF6onN1tKLmginF7MMjiw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:09 2026 by rpki-client