Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
File:                     cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json)
Hash identifier:          lnjAAZ2Q0VJQ7R3HnJh4VyQMsy9ahEcKX/Tnj8aN4hI=
Subject key identifier:   AB:B9:84:3E:62:37:47:08:8A:46:51:1F:69:8D:78:4D:20:CB:A9:31
Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7
Certificate issuer:       /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
Certificate serial:       05D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
Manifest number:          059B
Signing time:             Thu 12 Mar 2026 22:56:53 +0000
Manifest this update:     Thu 12 Mar 2026 22:56:53 +0000
Manifest next update:     Thu 19 Mar 2026 22:56:53 +0000
Files and hashes:         1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: yzybutnqmH1dXmc6plO4qmCWXRyawFNuL5qZ20Bw2wA=)
                          2: F93DE378B66911F09D7E8031C4F9AE02.roa (hash: c07jP4kaBJLesC3fKCC1+hkjCe95/NhhL5juygnjjI4=)
                          3: 2A490316D97011F0A9AB95F59AD3641D.roa (hash: MTKYuHS54sbbIgz0FdQa7tPFCtPZViVZZlK3jzFk3Qo=)
                          4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: qDBbxutM6whAYRqUGL23M9IPWqduEyKAvV9efNJXIMw=)
                          5: E2256F74D97011F0A26925FA9AD3641D.roa (hash: c0vbYLg0UntBGJI9A2FhToTcMXbZmIvcvE2u9KfX6Sc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 22:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1489 (0x5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7
        Validity
            Not Before: Mar 12 22:56:53 2026 GMT
            Not After : Mar 19 22:56:53 2026 GMT
        Subject: CN=69b344b5-6172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dd:a7:54:fc:1a:30:55:68:56:1b:41:00:70:
                    f5:7c:15:12:bc:f4:d1:05:c8:4e:6d:f3:dc:0a:33:
                    41:69:d2:f5:01:a3:f7:dd:15:c7:fb:e4:50:4e:8a:
                    fe:d9:86:8e:20:83:89:29:68:32:f4:4b:80:c5:39:
                    4c:05:5e:89:f2:96:f7:cd:88:e5:b1:e9:4f:ef:91:
                    84:6c:22:f1:d3:f6:e7:8a:00:31:2b:85:92:2f:c8:
                    84:07:e5:72:3c:96:fb:2a:75:c6:a8:df:9c:06:cb:
                    6a:13:cc:00:60:98:60:e5:a9:aa:34:fc:39:f5:7d:
                    23:d2:a1:df:7e:3d:df:ea:c6:bc:aa:3c:ab:8f:99:
                    39:07:e2:87:45:3e:ec:49:54:d9:3a:9f:67:bc:ba:
                    f0:9e:5a:57:bb:fb:d8:84:12:ac:e4:ac:93:9f:65:
                    c6:47:41:1e:77:fe:59:b3:e1:51:1a:47:53:a2:37:
                    8c:ee:a1:11:35:bb:5d:c3:4d:4c:b1:4b:3b:3d:73:
                    12:c7:84:4e:26:e2:4f:6e:a6:e1:ea:f8:b7:d5:a2:
                    00:8f:b6:91:11:bb:59:e7:8e:34:3c:26:09:ab:bd:
                    ac:95:ab:62:6e:83:7f:d0:92:ae:3a:27:32:ee:1c:
                    80:d9:ef:f9:45:82:ad:be:ef:a4:00:bd:52:15:b9:
                    fc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B9:84:3E:62:37:47:08:8A:46:51:1F:69:8D:78:4D:20:CB:A9:31
            X509v3 Authority Key Identifier:
                keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7c:99:0f:3f:6f:b6:e7:fb:19:70:62:18:e6:37:60:39:bc:
         48:63:0f:2a:1d:74:3d:51:c3:00:02:50:01:f3:4e:4e:a5:1d:
         4d:28:d5:1a:d8:96:b5:2a:24:89:26:67:f8:32:9a:0f:43:0c:
         7b:89:53:e5:5a:c2:9e:2d:27:b5:dc:f0:64:33:ac:f1:7e:ba:
         6e:08:10:18:33:6a:93:fb:b4:f4:50:11:87:13:5b:62:64:d9:
         2f:f7:67:1f:4a:cc:a0:f7:bc:a9:93:0d:39:e4:80:04:49:87:
         4f:e8:24:89:e3:14:b9:81:b7:58:82:30:d2:fb:54:fc:0a:0e:
         8d:95:46:ef:1e:1e:92:87:d5:f7:a0:2a:be:a9:ae:1e:c8:6a:
         33:ff:19:53:62:0d:c0:be:9e:c2:59:61:85:44:af:7d:d1:a2:
         99:b6:9d:6b:d5:ad:e8:5f:d0:72:e5:0d:40:0d:ce:26:39:59:
         b8:e7:b8:12:8b:c6:40:ea:d9:e6:1d:f9:7a:92:c3:03:bc:14:
         4b:6c:df:29:59:d3:bd:49:95:d4:9d:b8:75:7a:4b:64:c6:17:
         03:8c:79:24:35:25:70:7d:65:6f:48:ac:e3:a4:ca:d6:b2:a6:
         0b:44:53:8f:72:42:94:19:04:39:51:de:3b:45:27:7e:cc:5a:
         6a:91:a5:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5
RkEwNjA4QTcwHhcNMjYwMzEyMjI1NjUzWhcNMjYwMzE5MjI1NjUzWjAYMRYwFAYD
VQQDEw02OWIzNDRiNS02MTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkd2nVPwaMFVoVhtBAHD1fBUSvPTRBchObfPcCjNBadL1AaP33RXH++RQTor+
2YaOIIOJKWgy9EuAxTlMBV6J8pb3zYjlselP75GEbCLx0/bnigAxK4WSL8iEB+Vy
PJb7KnXGqN+cBstqE8wAYJhg5amqNPw59X0j0qHffj3f6sa8qjyrj5k5B+KHRT7s
SVTZOp9nvLrwnlpXu/vYhBKs5KyTn2XGR0Eed/5Zs+FRGkdTojeM7qERNbtdw01M
sUs7PXMSx4ROJuJPbqbh6vi31aIAj7aREbtZ5440PCYJq72slatiboN/0JKuOicy
7hyA2e/5RYKtvu+kAL1SFbn8xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKu5hD5i
N0cIikZRH2mNeE0gy6kxMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx
RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3
cVpNX0tVUGNKcE9mb0dDS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAHyZDz9vtuf7GXBiGOY3YDm8SGMPKh10PVHDAAJQAfNOTqUdTSjVGtiWtSok
iSZn+DKaD0MMe4lT5VrCni0ntdzwZDOs8X66bggQGDNqk/u09FARhxNbYmTZL/dn
H0rMoPe8qZMNOeSABEmHT+gkieMUuYG3WIIw0vtU/AoOjZVG7x4ekofV96Aqvqmu
HshqM/8ZU2INwL6ewllhhUSvfdGimbada9Wt6F/QcuUNQA3OJjlZuOe4EovGQOrZ
5h35epLDA7wUS2zfKVnTvUmV1J24dXpLZMYXA4x5JDUlcH1lb0is46TK1rKmC0RT
j3JClBkEOVHeO0UnfsxaapGl3g==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:00:01 2026 by rpki-client