Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
File:                     _nzI0SyMuUDQbq7bWwrUPQUDYvE.mft (raw, json)
Hash identifier:          mQcilabvjJUEMkXftMsT/9RnwHtaeu4Mq4ISu7O3hnI=
Subject key identifier:   9F:B0:71:05:2B:16:2F:FF:29:8A:DB:C1:49:DE:5D:B9:BF:79:B7:DE
Authority key identifier: FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1
Certificate issuer:       /CN=A91D404F/serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
Manifest number:          E0
Signing time:             Fri 13 Mar 2026 05:29:32 +0000
Manifest this update:     Fri 13 Mar 2026 05:29:31 +0000
Manifest next update:     Fri 20 Mar 2026 05:29:31 +0000
Files and hashes:         1: _nzI0SyMuUDQbq7bWwrUPQUDYvE.crl (hash: riUUVfdfeuHtRvvLdrnEcFp3ofUyWf80IuLR3sOWtlg=)
                          2: F943DF74CBF711EFB86EC74FC4F9AE02.roa (hash: 4hDTlCGLeED2V5NneVQ9VwBSF0HWPTNuGKERbuoxtX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl
                          rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D404F, serialNumber=FE7CC8D12C8CB940D06EAEDB5B0AD43D050362F1
        Validity
            Not Before: Mar 13 05:29:31 2026 GMT
            Not After : Mar 20 05:29:31 2026 GMT
        Subject: CN=69b3a0bc-1d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:64:eb:f6:07:4d:95:82:fb:e8:39:2c:8a:
                    e8:fc:be:fc:9e:d7:0a:9c:3b:6d:bc:05:47:88:da:
                    2d:e1:8d:99:8a:df:4e:a4:9d:9e:eb:cf:17:2f:83:
                    ea:6d:2b:69:a5:53:19:61:a2:10:df:c4:19:b7:8e:
                    ef:b2:62:80:c1:02:87:14:ff:0b:1e:85:f2:b9:84:
                    9e:f0:17:ca:d9:85:61:24:7e:ad:72:f6:aa:30:fc:
                    9b:4d:94:04:cc:48:b0:f7:8c:eb:a1:93:ec:dc:75:
                    89:d4:20:b0:6d:b9:0d:77:97:02:b8:b3:30:a7:7f:
                    6a:fd:4e:85:58:81:3c:c1:ea:63:11:6d:25:3f:0f:
                    b8:ac:b3:dc:3b:b4:d1:04:a8:48:66:3a:22:80:75:
                    17:39:44:14:cf:81:1b:80:b6:b1:17:fc:75:da:64:
                    36:eb:49:0e:ab:ff:bb:21:7a:e7:70:15:55:ed:f6:
                    13:e3:b8:5d:2e:f6:38:95:6e:52:85:0b:6a:b4:a3:
                    37:55:a5:c4:dd:49:1e:62:ea:74:ff:e3:8c:5d:2c:
                    6b:65:d4:46:ac:35:7a:97:64:47:c3:e6:4b:db:e8:
                    a1:a1:f2:47:fd:eb:28:3c:f7:e6:d2:39:f8:db:c0:
                    96:d7:6b:c3:ba:14:44:fe:6e:b6:52:64:6d:48:9c:
                    48:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B0:71:05:2B:16:2F:FF:29:8A:DB:C1:49:DE:5D:B9:BF:79:B7:DE
            X509v3 Authority Key Identifier:
                keyid:FE:7C:C8:D1:2C:8C:B9:40:D0:6E:AE:DB:5B:0A:D4:3D:05:03:62:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_nzI0SyMuUDQbq7bWwrUPQUDYvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D404F/D5D0FEB4CBF711EF869C904FC4F9AE02/_nzI0SyMuUDQbq7bWwrUPQUDYvE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:0a:81:56:56:1c:11:e1:e8:d4:d5:c0:a9:1f:59:7a:31:2a:
         90:04:c1:ff:1f:94:9f:7e:00:04:3b:35:a6:66:62:85:3c:b2:
         77:ad:64:50:f5:2b:17:5e:ad:d4:07:44:29:40:4b:c7:2d:c6:
         30:48:ff:4c:0a:63:df:eb:74:cc:53:20:f0:48:e0:31:91:c2:
         ae:ea:29:ea:ab:07:da:6d:0a:16:18:58:f4:d9:9a:11:d2:a0:
         77:8c:a1:0c:08:ba:1b:2e:69:bf:3c:5e:78:6d:fc:5f:8a:44:
         cc:07:2f:53:e7:29:dc:68:dd:e8:dd:82:2e:bf:75:53:42:8d:
         0b:16:e4:fd:d7:c3:c9:e6:84:32:38:25:a4:eb:69:ef:ba:a5:
         ab:67:8f:cd:07:e5:70:bc:74:53:f9:36:e4:6b:eb:0a:1c:af:
         ff:75:02:26:3a:80:fd:8a:1c:db:1a:03:4d:c0:e1:94:3e:57:
         05:9f:71:4b:28:97:01:8c:13:d6:ef:5e:82:f6:d1:29:24:7a:
         df:b4:e1:e0:a1:1d:bf:b2:72:e2:ca:f6:83:5f:c7:f3:1e:01:
         7b:c4:1a:93:f6:f2:2b:ee:31:19:2c:48:ce:1c:ca:dc:f5:18:
         47:cd:81:c6:07:fa:f8:bb:43:5a:13:14:71:53:4a:1c:72:7b:
         c8:e6:43:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQwNEYxMTAvBgNVBAUTKEZFN0NDOEQxMkM4Q0I5NDBEMDZFQUVEQjVCMEFENDNE
MDUwMzYyRjEwHhcNMjYwMzEzMDUyOTMxWhcNMjYwMzIwMDUyOTMxWjAYMRYwFAYD
VQQDEw02OWIzYTBiYy0xZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApz1k6/YHTZWC++g5LIro/L78ntcKnDttvAVHiNot4Y2Zit9OpJ2e688XL4Pq
bStppVMZYaIQ38QZt47vsmKAwQKHFP8LHoXyuYSe8BfK2YVhJH6tcvaqMPybTZQE
zEiw94zroZPs3HWJ1CCwbbkNd5cCuLMwp39q/U6FWIE8wepjEW0lPw+4rLPcO7TR
BKhIZjoigHUXOUQUz4EbgLaxF/x12mQ260kOq/+7IXrncBVV7fYT47hdLvY4lW5S
hQtqtKM3VaXE3UkeYup0/+OMXSxrZdRGrDV6l2RHw+ZL2+ihofJH/esoPPfm0jn4
28CW12vDuhRE/m62UmRtSJxI5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+wcQUr
Fi//KYrbwUneXbm/ebfeMB8GA1UdIwQYMBaAFP58yNEsjLlA0G6u21sK1D0FA2Lx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDA0Ri9ENUQwRkVCNENC
RjcxMUVGODY5QzkwNEZDNEY5QUUwMi9fbnpJMFN5TXVVRFFicTdiV3dyVVBRVURZ
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19uekkwU3lNdVVEUWJxN2JXd3JVUFFVRFl2RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDA0Ri9ENUQwRkVCNENCRjcxMUVGODY5QzkwNEZDNEY5QUUwMi9fbnpJMFN5TXVV
RFFicTdiV3dyVVBRVURZdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmgqBVlYcEeHo1NXAqR9ZejEqkATB/x+Un34ABDs1pmZihTyyd61kUPUrF16t
1AdEKUBLxy3GMEj/TApj3+t0zFMg8EjgMZHCruop6qsH2m0KFhhY9NmaEdKgd4yh
DAi6Gy5pvzxeeG38X4pEzAcvU+cp3Gjd6N2CLr91U0KNCxbk/dfDyeaEMjglpOtp
77qlq2ePzQflcLx0U/k25GvrChyv/3UCJjqA/Yoc2xoDTcDhlD5XBZ9xSyiXAYwT
1u9egvbRKSR637Th4KEdv7Jy4sr2g1/H8x4Be8Qak/byK+4xGSxIzhzK3PUYR82B
xgf6+LtDWhMUcVNKHHJ7yOZDBA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:29:05 2026 by rpki-client