Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
File:                     _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json)
Hash identifier:          If5LTNs7UT9CORcIQDyjeCs0HZvPicKbGFb8l2bILUg=
Subject key identifier:   7F:3C:F8:FB:48:18:4A:B2:32:A1:2C:FA:5D:CB:E6:2C:BB:4B:C4:25
Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
Certificate issuer:       /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
Manifest number:          74
Signing time:             Tue 03 Mar 2026 07:28:45 +0000
Manifest this update:     Tue 03 Mar 2026 07:28:44 +0000
Manifest next update:     Tue 10 Mar 2026 07:28:44 +0000
Files and hashes:         1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: 3NM7Eu9+HeZ+rKyrMRBKv55NSE+WbQI7jERkcw/JApI=)
                          2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: aq1rkL3lbBFNGSwriSfEgnoepxf49LO+cuY4rWY4wMw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl
                          rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
        Validity
            Not Before: Mar  3 07:28:44 2026 GMT
            Not After : Mar 10 07:28:44 2026 GMT
        Subject: CN=69a68dad-3c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f3:42:86:cd:28:23:a0:54:0f:1d:aa:db:2b:
                    e0:ed:91:ad:d8:f8:b5:4d:38:dd:be:af:84:7e:ff:
                    3a:09:27:09:39:6d:75:a6:d9:a7:9a:37:df:44:10:
                    bf:5e:98:8b:ac:76:61:03:b7:1c:dc:12:6f:66:b0:
                    89:5f:02:89:fa:28:0d:16:b9:06:19:a4:19:c3:c4:
                    c8:f9:a7:9e:3b:8d:c4:dc:f4:1b:bf:e7:9a:7b:74:
                    55:66:22:ea:e0:6c:84:e3:ab:1e:91:15:99:f0:0d:
                    cb:c8:97:73:b3:ab:71:6c:77:b9:c4:5e:06:ff:0f:
                    7b:1a:2a:30:67:2e:91:b7:45:d8:57:d2:07:a0:06:
                    dd:79:4f:02:a5:0a:cb:01:4c:4a:de:90:11:49:4b:
                    79:97:c2:5d:0a:33:f4:96:84:b6:ea:a7:2a:b4:d5:
                    0d:bb:a8:e2:d0:35:18:fb:e9:91:5c:19:d9:e3:06:
                    b2:34:82:9b:f9:2e:e0:9c:d6:e2:84:6a:29:0c:3d:
                    46:ba:f3:d2:df:79:06:fb:b2:5f:68:ec:ae:77:de:
                    53:2f:2b:96:a4:d1:c3:8c:da:7a:50:28:c8:87:08:
                    52:ad:00:42:04:a5:6d:9d:cd:50:48:41:78:66:ca:
                    b0:49:e1:9c:89:7b:89:98:8f:aa:e2:3d:d7:ca:aa:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3C:F8:FB:48:18:4A:B2:32:A1:2C:FA:5D:CB:E6:2C:BB:4B:C4:25
            X509v3 Authority Key Identifier:
                keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:81:f2:56:b1:55:9f:ec:ff:33:2b:b8:56:9e:00:2a:31:d6:
         c0:44:7d:64:35:dc:2b:55:f9:b8:4a:cb:4c:e0:c0:ac:df:d6:
         af:13:42:73:75:1d:25:24:d7:44:17:51:df:a1:8d:a7:0d:34:
         2d:a6:24:d8:c7:74:83:72:a7:89:e5:13:4b:cc:6e:51:33:c6:
         34:55:8b:38:75:4b:cb:8c:55:e1:52:3f:b9:0d:70:70:e9:5b:
         1c:40:b1:e6:42:20:ac:e7:0f:0f:60:f5:90:8c:11:27:f3:48:
         ed:33:6f:c9:bd:20:08:13:e8:40:51:ee:8b:54:76:a0:c3:fc:
         5e:07:7b:5f:ed:b8:c1:d5:08:d6:2e:88:43:d0:0d:fd:52:bb:
         6c:18:cf:42:3b:e7:f1:92:41:1a:f3:32:bf:42:6b:fe:92:43:
         73:c1:fe:2a:cc:b8:63:4b:69:c5:bf:79:42:9c:55:08:a9:a5:
         75:eb:bb:20:ae:cd:2c:7e:c6:1d:a2:e5:46:d5:e7:4e:6e:03:
         7a:3d:3d:7e:e5:89:54:69:e3:06:50:02:c1:32:f2:0c:39:c4:
         f7:f7:ae:f1:07:f7:93:ff:5f:99:6d:e0:03:b9:ee:9a:99:8b:
         66:30:35:28:0c:4e:ac:bb:f2:c5:ff:0a:ec:d5:4a:47:d1:04:
         0f:e5:3c:96
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QjgyMDExMC8GA1UEBRMoRkNBQzZGQTgzMUU4RjVBMjg0MTM0Qzk1QThEMDIwRkNC
QzhFQzlGMjAeFw0yNjAzMDMwNzI4NDRaFw0yNjAzMTAwNzI4NDRaMBgxFjAUBgNV
BAMTDTY5YTY4ZGFkLTNjNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDP80KGzSgjoFQPHarbK+Dtka3Y+LVNON2+r4R+/zoJJwk5bXWm2aeaN99EEL9e
mIusdmEDtxzcEm9msIlfAon6KA0WuQYZpBnDxMj5p547jcTc9Bu/55p7dFVmIurg
bITjqx6RFZnwDcvIl3Ozq3Fsd7nEXgb/D3saKjBnLpG3RdhX0gegBt15TwKlCssB
TErekBFJS3mXwl0KM/SWhLbqpyq01Q27qOLQNRj76ZFcGdnjBrI0gpv5LuCc1uKE
aikMPUa689LfeQb7sl9o7K533lMvK5ak0cOM2npQKMiHCFKtAEIEpW2dzVBIQXhm
yrBJ4ZyJe4mYj6riPdfKqhvrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfzz4+0gY
SrIyoSz6XcvmLLtLxCUwHwYDVR0jBBgwFoAU/KxvqDHo9aKEE0yVqNAg/LyOyfIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCODIwLzkwQThCMDhBNjg0
MDExRjBBOTQwNDc2QkM0RjlBRTAyL19LeHZxREhvOWFLRUUweVZxTkFnX0x5T3lm
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvX0t4dnFESG85YUtFRTB5VnFOQWdfTHlPeWZJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC
ODIwLzkwQThCMDhBNjg0MDExRjBBOTQwNDc2QkM0RjlBRTAyL19LeHZxREhvOWFL
RUUweVZxTkFnX0x5T3lmSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCRgfJWsVWf7P8zK7hWngAqMdbARH1kNdwrVfm4SstM4MCs39avE0JzdR0lJNdE
F1HfoY2nDTQtpiTYx3SDcqeJ5RNLzG5RM8Y0VYs4dUvLjFXhUj+5DXBw6VscQLHm
QiCs5w8PYPWQjBEn80jtM2/JvSAIE+hAUe6LVHagw/xeB3tf7bjB1QjWLohD0A39
UrtsGM9CO+fxkkEa8zK/Qmv+kkNzwf4qzLhjS2nFv3lCnFUIqaV167sgrs0sfsYd
ouVG1edObgN6PT1+5YlUaeMGUALBMvIMOcT3967xB/eT/1+ZbeADue6amYtmMDUo
DE6su/LF/wrs1UpH0QQP5TyW
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:30 2026 by rpki-client