Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
File:                     Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json)
Hash identifier:          UV0HJFxygecy05oONkZ2EerOr4hx+tfTNf7jg1NRhvA=
Subject key identifier:   7E:75:AE:F1:81:7A:0D:75:D4:12:61:E5:35:76:48:5A:F9:DF:9E:7B
Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21
Certificate issuer:       /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
Manifest number:          6F
Signing time:             Tue 03 Mar 2026 07:34:26 +0000
Manifest this update:     Tue 03 Mar 2026 07:34:26 +0000
Manifest next update:     Tue 10 Mar 2026 07:34:26 +0000
Files and hashes:         1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: OW2uUOWJoTdSTja9+ODrFd0iw2tPDjqwNAjQe6cPS6c=)
                          2: AD46933EB65011F0B751DB86C4F9AE02.roa (hash: BQkbdtjI99mxWqdYu14uU0wWLwTO/VUnPRItrckeDrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl
                          rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21
        Validity
            Not Before: Mar  3 07:34:26 2026 GMT
            Not After : Mar 10 07:34:26 2026 GMT
        Subject: CN=69a68f02-03ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:be:78:e0:90:f0:77:a7:0b:17:4d:67:00:
                    d3:6a:45:97:ba:32:a6:88:61:e1:f1:23:bc:8c:bf:
                    83:9c:bc:2f:2a:66:d1:d2:76:ea:62:1c:c4:97:ac:
                    2c:90:3b:4d:da:9f:8b:94:58:2b:47:0d:76:81:21:
                    e9:52:b6:f1:8a:17:4b:f8:29:f4:c1:cb:e7:c1:8e:
                    f1:ca:44:d1:8f:28:52:b0:b7:aa:be:e6:38:f9:27:
                    33:8c:28:a0:84:cd:8f:c5:27:28:64:ae:1c:0a:e5:
                    76:fa:b2:47:34:77:c9:8e:d6:db:41:ef:37:33:bd:
                    85:6b:69:3b:d8:79:cf:a7:2c:c8:f6:b6:17:d9:fa:
                    57:a5:51:6b:9f:61:8c:96:7e:1f:2c:7e:3f:19:fe:
                    cd:9c:1e:25:c8:6e:47:33:a1:c4:89:63:b0:51:14:
                    60:05:32:9e:43:8d:1f:7f:34:d6:e4:89:be:78:f8:
                    84:b8:a3:8a:3a:95:96:a5:bc:72:66:0d:f8:6e:2c:
                    c8:15:83:30:86:e0:bc:1b:61:7c:e1:6b:3f:13:fc:
                    bf:fe:e6:07:6a:4e:f8:5b:85:2e:6f:2e:26:88:c7:
                    05:9e:3e:2b:0c:04:07:45:a0:a8:ad:1e:cf:89:76:
                    6e:6b:a4:03:6f:a1:29:64:1f:67:3b:1d:c5:30:47:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:75:AE:F1:81:7A:0D:75:D4:12:61:E5:35:76:48:5A:F9:DF:9E:7B
            X509v3 Authority Key Identifier:
                keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:05:ea:85:0f:5b:cf:c7:81:1f:37:9a:7d:31:3b:f0:53:31:
         d6:36:f1:45:40:ce:60:a1:b0:35:2d:05:5d:4d:f8:d7:0c:90:
         c0:69:6c:33:86:f6:db:20:98:4c:e1:68:b7:93:41:28:e9:f3:
         05:23:06:6e:2f:78:15:88:7a:56:9e:42:10:1e:63:5e:bf:55:
         3c:12:cc:8a:1a:00:97:91:d5:22:a6:5d:ea:6a:3a:3d:db:fb:
         01:db:66:6b:c3:08:9c:8c:ee:24:24:b7:7c:2d:20:36:d1:41:
         05:f7:79:82:5e:2e:ea:93:76:d6:83:91:ed:a4:15:e5:a4:1d:
         24:45:6d:89:27:96:58:dd:ba:f4:a1:5c:ed:87:36:be:ba:1b:
         ef:b3:9b:ea:c0:b7:c1:41:7f:6f:3c:44:d5:19:88:bd:d8:e4:
         6a:6e:48:fa:c5:3c:5e:00:51:cc:ea:dd:85:12:84:56:f1:c0:
         1e:88:1e:3b:d5:64:99:a1:88:f3:08:20:36:16:81:7c:13:04:
         66:18:d6:a3:80:d3:36:cb:c8:71:7b:ef:5f:dd:03:ab:8d:e7:
         5e:e0:ab:d2:62:87:73:df:31:c2:43:a6:a8:ce:a4:5e:96:52:
         52:cc:e5:48:40:ec:e7:85:6b:32:69:e4:49:bd:3f:b9:18:f6:
         6a:00:2a:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE3QjMxMTAvBgNVBAUTKDY3N0YwQ0Q2NEE1REUyQzFCMDI4RUQwMDNDNTY4NzRC
NDhGQTJFMjEwHhcNMjYwMzAzMDczNDI2WhcNMjYwMzEwMDczNDI2WjAYMRYwFAYD
VQQDEw02OWE2OGYwMi0wM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAruO+eOCQ8HenCxdNZwDTakWXujKmiGHh8SO8jL+DnLwvKmbR0nbqYhzEl6ws
kDtN2p+LlFgrRw12gSHpUrbxihdL+Cn0wcvnwY7xykTRjyhSsLeqvuY4+SczjCig
hM2PxScoZK4cCuV2+rJHNHfJjtbbQe83M72Fa2k72HnPpyzI9rYX2fpXpVFrn2GM
ln4fLH4/Gf7NnB4lyG5HM6HEiWOwURRgBTKeQ40ffzTW5Im+ePiEuKOKOpWWpbxy
Zg34bizIFYMwhuC8G2F84Ws/E/y//uYHak74W4Uuby4miMcFnj4rDAQHRaCorR7P
iXZua6QDb6EpZB9nOx3FMEcm4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH51rvGB
eg111BJh5TV2SFr53557MB8GA1UdIwQYMBaAFGd/DNZKXeLBsCjtADxWh0tI+i4h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMy81NThDNjA5ODc5
Q0QxMUYwQTlCOTAzMjFDNEY5QUUwMi9aMzhNMWtwZDRzR3dLTzBBUEZhSFMwajZM
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ozOE0xa3BkNHNHd0tPMEFQRmFIUzBqNkxpRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTdCMy81NThDNjA5ODc5Q0QxMUYwQTlCOTAzMjFDNEY5QUUwMi9aMzhNMWtwZDRz
R3dLTzBBUEZhSFMwajZMaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANAXqhQ9bz8eBHzeafTE78FMx1jbxRUDOYKGwNS0FXU341wyQwGlsM4b22yCY
TOFot5NBKOnzBSMGbi94FYh6Vp5CEB5jXr9VPBLMihoAl5HVIqZd6mo6Pdv7Adtm
a8MInIzuJCS3fC0gNtFBBfd5gl4u6pN21oOR7aQV5aQdJEVtiSeWWN269KFc7Yc2
vrob77Ob6sC3wUF/bzxE1RmIvdjkam5I+sU8XgBRzOrdhRKEVvHAHogeO9VkmaGI
8wggNhaBfBMEZhjWo4DTNsvIcXvvX90Dq43nXuCr0mKHc98xwkOmqM6kXpZSUszl
SEDs54VrMmnkSb0/uRj2agAqPA==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:44 2026 by rpki-client