Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
File:                     rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft (raw, json)
Hash identifier:          TI32woN+ruQ5FNaJKj667BYzP7tZMSQl6uduNmSbcv4=
Subject key identifier:   55:01:39:94:D6:BA:59:15:43:3B:01:19:03:E3:97:62:45:65:97:79
Authority key identifier: AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D
Certificate issuer:       /CN=A91ED65C/serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
Manifest number:          0A
Signing time:             Sun 29 Mar 2026 08:47:37 +0000
Manifest this update:     Sun 29 Mar 2026 08:47:37 +0000
Manifest next update:     Sun 05 Apr 2026 08:47:37 +0000
Files and hashes:         1: rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl (hash: qUviLOpr2ztcKq3hwSgkHB9QgcEb3TMUnuAj0fDYx4k=)
                          2: 39CF61B81E3F11F196621670303D8C67.roa (hash: zPRyj4utwiTX5jFvUWAD+F2yXKjyPz2qiUDVnqyk25k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl
                          rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 08:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED65C, serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D
        Validity
            Not Before: Mar 29 08:47:37 2026 GMT
            Not After : Apr  5 08:47:37 2026 GMT
        Subject: CN=69c8e729-9083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:43:20:49:f9:83:66:8f:bb:58:0b:6d:f3:
                    59:4d:cb:ff:41:0e:81:8b:a7:82:84:eb:ad:74:d4:
                    92:2a:98:84:fe:32:22:a3:0f:06:eb:83:1f:bf:e3:
                    39:94:eb:bc:cd:0e:72:b8:c1:f4:1f:44:11:84:e7:
                    1a:a0:27:ec:df:6e:a6:36:79:d3:e3:ef:a5:f3:16:
                    8e:de:c9:19:9c:b5:81:6b:6c:31:68:9b:91:a1:08:
                    b1:78:87:68:f9:b9:c5:0c:0f:b9:f2:1e:f7:1b:3c:
                    d4:94:5b:93:60:2b:bd:8a:8d:65:ce:6f:1a:7a:ad:
                    aa:04:ab:ff:0f:90:76:ba:09:3f:15:0e:e8:14:31:
                    00:0a:2f:ec:16:bf:0d:c9:d1:8f:b6:c9:8f:dc:2a:
                    5b:08:3b:df:7c:c5:4e:68:e6:1b:7b:98:24:15:bc:
                    29:d9:79:23:2d:e2:10:7f:2d:12:c9:9b:05:59:78:
                    38:25:8b:39:29:a7:4c:52:08:b8:5d:f4:4a:9d:80:
                    b7:ba:7e:68:cf:a6:88:a4:52:b3:ba:22:12:c7:1c:
                    ba:e0:62:5a:f9:68:40:eb:08:f1:5f:03:7b:8c:5c:
                    2e:7f:a3:45:50:6e:c6:be:7b:c4:b4:4b:cf:ce:2b:
                    79:41:0b:48:2c:9b:72:f8:5d:e2:d8:17:e4:2a:1b:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:01:39:94:D6:BA:59:15:43:3B:01:19:03:E3:97:62:45:65:97:79
            X509v3 Authority Key Identifier:
                keyid:AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:a8:a7:54:8c:6e:cd:61:b3:8b:cc:02:53:de:3c:2e:c5:
         6e:76:12:73:c3:4d:61:37:93:6f:10:47:24:1e:7f:21:b8:8f:
         6d:ab:d2:ce:d6:bd:90:0d:0a:a3:8d:79:6d:3b:67:11:b9:aa:
         2b:08:b8:87:75:1a:65:c8:83:04:68:1e:2a:b7:c7:4b:5c:cb:
         10:07:16:ca:31:61:f8:3e:a0:f5:cf:36:32:15:00:33:87:bc:
         1e:62:1d:33:a7:d5:16:0a:d3:32:1b:3c:2d:08:96:57:ec:f2:
         47:47:a2:63:40:fc:68:fb:67:d3:5d:f3:32:6c:76:20:be:40:
         93:9a:79:36:c9:c9:a2:47:d7:45:23:fe:17:81:4d:43:61:1c:
         26:7f:0b:9b:d4:e4:32:b5:9b:38:2a:ea:f5:ed:3a:36:2e:3f:
         2b:9b:2a:af:a5:43:e7:d6:15:37:52:46:7b:62:89:db:5c:e6:
         62:11:8d:0f:0b:97:07:bf:53:ab:1d:85:fd:f2:48:8a:9d:a0:
         31:de:9b:c3:d4:6b:a8:c1:30:c4:f7:13:0d:4b:be:8d:1b:02:
         6a:2b:1a:78:bf:37:15:21:60:e3:da:e3:fa:42:50:a6:c3:e2:
         7e:28:b7:e4:60:bb:4b:71:c1:a9:7c:56:0f:bf:68:99:f8:aa:
         5c:08:eb:56
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
RDY1QzExMC8GA1UEBRMoQUVGRDUxNDY0QTc5NjU0MkQ1NjQyMTNBMkY2M0FENUY4
RkMzMDA2RDAeFw0yNjAzMjkwODQ3MzdaFw0yNjA0MDUwODQ3MzdaMBgxFjAUBgNV
BAMTDTY5YzhlNzI5LTkwODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvyUMgSfmDZo+7WAtt81lNy/9BDoGLp4KE66101JIqmIT+MiKjDwbrgx+/4zmU
67zNDnK4wfQfRBGE5xqgJ+zfbqY2edPj76XzFo7eyRmctYFrbDFom5GhCLF4h2j5
ucUMD7nyHvcbPNSUW5NgK72KjWXObxp6raoEq/8PkHa6CT8VDugUMQAKL+wWvw3J
0Y+2yY/cKlsIO998xU5o5ht7mCQVvCnZeSMt4hB/LRLJmwVZeDglizkpp0xSCLhd
9EqdgLe6fmjPpoikUrO6IhLHHLrgYlr5aEDrCPFfA3uMXC5/o0VQbsa+e8S0S8/O
K3lBC0gsm3L4XeLYF+QqGw+XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVQE5lNa6
WRVDOwEZA+OXYkVll3kwHwYDVR0jBBgwFoAUrv1RRkp5ZULVZCE6L2OtX4/DAG0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDL0Y2MTNFMTI2MUUz
QzExRjFCRkI1RUExQzJGM0Q4QzY3L3J2MVJSa3A1WlVMVlpDRTZMMk90WDRfREFH
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcnYxUlJrcDVaVUxWWkNFNkwyT3RYNF9EQUcwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE
NjVDL0Y2MTNFMTI2MUUzQzExRjFCRkI1RUExQzJGM0Q4QzY3L3J2MVJSa3A1WlVM
VlpDRTZMMk90WDRfREFHMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB1a6inVIxuzWGzi8wCU948LsVudhJzw01hN5NvEEckHn8huI9tq9LO1r2QDQqj
jXltO2cRuaorCLiHdRplyIMEaB4qt8dLXMsQBxbKMWH4PqD1zzYyFQAzh7weYh0z
p9UWCtMyGzwtCJZX7PJHR6JjQPxo+2fTXfMybHYgvkCTmnk2ycmiR9dFI/4XgU1D
YRwmfwub1OQytZs4Kur17To2Lj8rmyqvpUPn1hU3UkZ7YonbXOZiEY0PC5cHv1Or
HYX98kiKnaAx3pvD1GuowTDE9xMNS76NGwJqKxp4vzcVIWDj2uP6QlCmw+J+KLfk
YLtLccGpfFYPv2iZ+KpcCOtW
-----END CERTIFICATE-----
Generated at Mon Mar 30 00:41:54 2026 by rpki-client