Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
File:                     pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json)
Hash identifier:          nU6uHiBWGQsAAiQw9fMPu+J34X6nq/y/2A6Hccx0spw=
Subject key identifier:   E5:14:AB:31:43:79:05:46:64:2A:48:DC:FA:CC:E1:A9:1A:1F:11:65
Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4
Certificate issuer:       /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
Manifest number:          016A
Signing time:             Sat 21 Mar 2026 04:00:24 +0000
Manifest this update:     Sat 21 Mar 2026 04:00:23 +0000
Manifest next update:     Sat 28 Mar 2026 04:00:23 +0000
Files and hashes:         1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: GpJGsMXVwSOP+zJiRfCKv4oBVGtSMAsC6KmgirTKPFw=)
                          2: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: WjeXpUriKps2e/a008YxeEs8/sYb3OiMoaYxhKdea6w=)
                          3: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: eRm7KXvfE6uXkdA8ouEpiF5+oiI82omF3KoBKYM22hQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4
        Validity
            Not Before: Mar 21 04:00:23 2026 GMT
            Not After : Mar 28 04:00:23 2026 GMT
        Subject: CN=69be17d8-b52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:ce:1c:4a:ae:67:f1:2c:ed:a8:ee:50:42:
                    f4:f9:87:6c:bc:18:12:42:e5:c7:2c:36:70:4a:d8:
                    89:bb:b4:4a:3a:0c:4e:e8:fa:3f:8a:80:04:1b:56:
                    7b:3a:f1:45:d2:d5:f3:51:68:bc:8a:86:94:f9:9c:
                    c5:1d:87:45:32:b9:56:c5:86:48:7a:6a:7c:eb:5a:
                    80:60:11:15:ee:a6:b3:4b:ea:de:1f:24:a2:12:46:
                    ed:09:2e:ef:db:8a:d1:08:d6:fd:01:93:fa:25:7a:
                    4f:bf:f0:af:81:25:3e:fe:2a:cd:f7:72:ae:c2:62:
                    4f:2b:44:88:70:2c:cc:35:5e:66:b0:b2:63:bb:fc:
                    15:98:4c:55:a0:5e:0b:f4:96:f8:24:6c:e3:26:93:
                    16:56:e0:ce:64:48:cd:76:ba:b6:0a:68:f0:91:de:
                    c9:fd:1d:60:84:08:81:59:80:e2:2b:3a:0e:29:15:
                    8b:b3:64:4f:af:00:9b:29:9f:61:c4:9f:30:51:80:
                    80:fa:92:68:08:2f:42:45:0d:4a:2d:ec:af:bc:ce:
                    16:fe:58:71:a2:d1:4b:35:85:9b:dd:eb:f0:fc:6e:
                    ec:07:1f:d4:4e:18:18:6c:47:0a:6c:e6:c8:fc:8b:
                    36:c2:ec:53:64:a0:25:f3:cd:65:93:8e:74:4f:9e:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:14:AB:31:43:79:05:46:64:2A:48:DC:FA:CC:E1:A9:1A:1F:11:65
            X509v3 Authority Key Identifier:
                keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:81:c1:00:f5:ee:21:ae:83:6a:14:0a:6e:58:96:7e:a5:5f:
         58:aa:e5:df:a7:42:f8:27:79:90:d1:ce:fc:78:30:84:88:c7:
         0e:f4:31:82:13:08:47:7b:5a:3f:62:45:29:98:ab:31:e4:5e:
         78:7a:06:79:a1:98:0e:cd:2b:78:e3:2c:37:30:ca:62:4e:9a:
         48:9e:61:39:6f:e2:07:d0:ff:ec:7f:be:db:ea:97:bd:57:74:
         3b:78:c7:72:77:8c:59:d1:88:28:80:b9:ac:9f:e1:1b:c0:c7:
         be:75:39:1e:3b:ac:75:99:4b:fc:fe:27:9c:80:78:48:13:fa:
         c5:ae:aa:c9:57:8e:42:bc:e2:e4:b7:ee:3f:7e:ab:b5:8c:56:
         eb:d8:e1:5b:a7:c2:c5:86:ad:43:45:d4:fd:7a:55:ff:83:d5:
         cd:03:56:7a:52:70:cc:0a:44:b6:14:e2:66:d7:be:ab:e0:f5:
         10:44:ff:79:b2:01:8c:ed:c4:2d:f8:0f:de:03:03:23:1d:b1:
         ff:5b:83:5a:1c:aa:af:4f:4e:d0:16:28:bc:22:72:e7:ca:e3:
         2c:ad:89:03:44:c7:4b:b6:a8:aa:e6:48:90:c0:01:ba:74:13:
         8a:24:c1:95:c0:5b:77:70:33:e9:71:c1:84:99:4f:39:33:6d:
         91:b3:14:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDdEODcxMTAvBgNVBAUTKEE0MzE4M0VDQzY1MEI4NTcwRDY4RjdENDEyQTRGMDAx
NERBOEI5QzQwHhcNMjYwMzIxMDQwMDIzWhcNMjYwMzI4MDQwMDIzWjAYMRYwFAYD
VQQDEw02OWJlMTdkOC1iNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmHTOHEquZ/Es7ajuUEL0+YdsvBgSQuXHLDZwStiJu7RKOgxO6Po/ioAEG1Z7
OvFF0tXzUWi8ioaU+ZzFHYdFMrlWxYZIemp861qAYBEV7qazS+reHySiEkbtCS7v
24rRCNb9AZP6JXpPv/CvgSU+/irN93KuwmJPK0SIcCzMNV5msLJju/wVmExVoF4L
9Jb4JGzjJpMWVuDOZEjNdrq2Cmjwkd7J/R1ghAiBWYDiKzoOKRWLs2RPrwCbKZ9h
xJ8wUYCA+pJoCC9CRQ1KLeyvvM4W/lhxotFLNYWb3evw/G7sBx/UThgYbEcKbObI
/Is2wuxTZKAl881lk450T5747wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUUqzFD
eQVGZCpI3PrM4akaHxFlMB8GA1UdIwQYMBaAFKQxg+zGULhXDWj31BKk8AFNqLnE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Q4Ny8xOEY2MzczMDEy
RDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVGY05hUGZVRXFUd0FVMm91
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3VjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
N0Q4Ny8xOEY2MzczMDEyRDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVG
Y05hUGZVRXFUd0FVMm91Y1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkoHBAPXuIa6DahQKbliWfqVfWKrl36dC+Cd5kNHO/HgwhIjHDvQxghMIR3ta
P2JFKZirMeReeHoGeaGYDs0reOMsNzDKYk6aSJ5hOW/iB9D/7H++2+qXvVd0O3jH
cneMWdGIKIC5rJ/hG8DHvnU5HjusdZlL/P4nnIB4SBP6xa6qyVeOQrzi5LfuP36r
tYxW69jhW6fCxYatQ0XU/XpV/4PVzQNWelJwzApEthTiZte+q+D1EET/ebIBjO3E
LfgP3gMDIx2x/1uDWhyqr09O0BYovCJy58rjLK2JA0THS7aoquZIkMABunQTiiTB
lcBbd3Az6XHBhJlPOTNtkbMUng==
-----END CERTIFICATE-----
Generated at Sat Mar 21 18:50:49 2026 by rpki-client