Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
File:                     p_d_IEfTVowEOjOMeTKwojyPaHE.mft (raw, json)
Hash identifier:          VsdkAj7QPl8XuscHXiP6VufRNtnWdUVRFKthkU+X4gM=
Subject key identifier:   FB:6F:4B:91:CB:A8:CD:5E:CD:16:FB:26:D7:DF:08:3D:C6:8E:F0:4E
Authority key identifier: A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
Certificate issuer:       /CN=A91FD4E2/serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
Manifest number:          49
Signing time:             Tue 03 Mar 2026 07:59:10 +0000
Manifest this update:     Tue 03 Mar 2026 07:59:09 +0000
Manifest next update:     Tue 10 Mar 2026 07:59:09 +0000
Files and hashes:         1: p_d_IEfTVowEOjOMeTKwojyPaHE.crl (hash: /QDWmlNLwKfwvKnxS7RdB0C6eERzDVOJIn74PJFPcp8=)
                          2: D08BF898AEDA11F09093014EC4F9AE02.roa (hash: KbzUtTPtGCQ3I/N5KWpd9MwtuQNamm+9Vruv3vtMr6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl
                          rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD4E2, serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
        Validity
            Not Before: Mar  3 07:59:09 2026 GMT
            Not After : Mar 10 07:59:09 2026 GMT
        Subject: CN=69a694cd-8e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d9:72:c1:63:a2:95:c0:b6:97:72:1e:54:71:
                    2c:4f:23:14:2b:76:c4:12:4d:5c:81:fb:40:fc:d3:
                    69:35:19:ec:6b:83:72:1c:99:45:2a:98:76:ea:94:
                    4f:76:69:c7:3d:e1:41:54:cf:ff:55:59:ee:01:67:
                    11:ad:c4:70:f4:f7:0b:57:7d:1f:58:52:c5:db:bc:
                    92:dd:53:f4:0f:ca:e8:0b:f2:03:70:a1:12:6c:19:
                    f6:b7:8f:5e:2b:d2:bc:d9:0f:3d:13:0a:4a:8a:75:
                    4b:ca:13:f7:10:8a:a9:9e:9d:d4:ba:74:d1:9e:c9:
                    10:19:c7:81:8b:25:e2:cd:8d:20:81:1e:fd:ae:e0:
                    86:e2:6e:eb:ac:01:cc:c6:ab:73:af:9d:33:e4:7e:
                    d0:17:a4:c6:76:f3:3d:ce:6b:3e:27:7d:70:10:6c:
                    9c:72:7f:64:aa:28:7b:e2:85:03:cc:0d:7a:e4:26:
                    ff:73:3d:5b:72:e9:4f:a7:67:db:a3:af:9a:44:b9:
                    8a:96:2d:db:7f:cb:63:35:e7:84:8f:80:2c:4d:90:
                    62:99:9d:8a:bb:3b:c4:c9:b5:55:30:12:e2:be:2c:
                    80:ad:e2:00:e6:da:db:4b:54:d5:be:94:a6:4e:49:
                    04:ad:fa:62:bc:43:07:77:87:18:35:85:4d:17:3c:
                    20:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6F:4B:91:CB:A8:CD:5E:CD:16:FB:26:D7:DF:08:3D:C6:8E:F0:4E
            X509v3 Authority Key Identifier:
                keyid:A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:09:b0:5f:e8:35:d6:d1:c4:7d:a6:f7:fc:3c:0c:0a:3e:26:
         52:bc:ea:e9:4e:d8:d8:3b:e0:b4:13:08:3e:37:d8:34:9e:8a:
         40:79:14:d6:e9:77:f4:c9:fd:6d:5d:aa:d5:78:d4:01:d2:53:
         ac:52:ee:67:e7:96:58:f9:c3:95:5d:e7:b2:85:44:02:dc:75:
         8b:c4:02:5d:0b:37:b3:e0:95:e8:59:73:82:cc:f2:36:a9:11:
         43:cc:ea:16:76:f0:0a:44:19:ff:33:89:00:0e:3f:b3:b6:ae:
         03:8d:9a:5a:b7:2a:e1:ed:43:a8:78:42:86:38:a2:a0:74:11:
         af:9e:e3:d4:07:5a:24:7c:55:28:b1:d3:cf:0e:df:d0:e9:78:
         6e:5f:65:ee:02:29:d0:08:01:49:16:cf:f0:23:a3:e8:89:00:
         f0:e0:1e:54:57:08:fe:d5:65:da:2a:89:09:81:16:77:04:a8:
         7a:a1:e7:f1:c8:83:0e:b0:32:4a:05:00:75:a2:a1:e2:74:f0:
         c4:4f:a6:f0:fc:30:ed:08:5d:f6:3a:9e:ff:a9:48:a1:56:04:
         2d:7b:58:70:3d:09:cf:be:5e:4b:31:06:61:9c:46:63:be:04:
         89:6f:9e:d2:6a:9b:96:e0:56:90:75:bb:ed:cc:47:04:b1:b0:
         4d:a2:6b:27
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RDRFMjExMC8GA1UEBRMoQTdGNzdGMjA0N0QzNTY4QzA0M0EzMzhDNzkzMkIwQTIz
QzhGNjg3MTAeFw0yNjAzMDMwNzU5MDlaFw0yNjAzMTAwNzU5MDlaMBgxFjAUBgNV
BAMTDTY5YTY5NGNkLThlMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCM2XLBY6KVwLaXch5UcSxPIxQrdsQSTVyB+0D802k1Gexrg3IcmUUqmHbqlE92
acc94UFUz/9VWe4BZxGtxHD09wtXfR9YUsXbvJLdU/QPyugL8gNwoRJsGfa3j14r
0rzZDz0TCkqKdUvKE/cQiqmendS6dNGeyRAZx4GLJeLNjSCBHv2u4IbibuusAczG
q3OvnTPkftAXpMZ28z3Oaz4nfXAQbJxyf2SqKHvihQPMDXrkJv9zPVty6U+nZ9uj
r5pEuYqWLdt/y2M154SPgCxNkGKZnYq7O8TJtVUwEuK+LICt4gDm2ttLVNW+lKZO
SQSt+mK8Qwd3hxg1hU0XPCCBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+29Lkcuo
zV7NFvsm198IPcaO8E4wHwYDVR0jBBgwFoAUp/d/IEfTVowEOjOMeTKwojyPaHEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENEUyLzE0RDJFN0JBQUVE
QTExRjA5RDQzRTIyRUM0RjlBRTAyL3BfZF9JRWZUVm93RU9qT01lVEt3b2p5UGFI
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcF9kX0lFZlRWb3dFT2pPTWVUS3dvanlQYUhFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE
NEUyLzE0RDJFN0JBQUVEQTExRjA5RDQzRTIyRUM0RjlBRTAyL3BfZF9JRWZUVm93
RU9qT01lVEt3b2p5UGFIRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBaCbBf6DXW0cR9pvf8PAwKPiZSvOrpTtjYO+C0Ewg+N9g0nopAeRTW6Xf0yf1t
XarVeNQB0lOsUu5n55ZY+cOVXeeyhUQC3HWLxAJdCzez4JXoWXOCzPI2qRFDzOoW
dvAKRBn/M4kADj+ztq4DjZpatyrh7UOoeEKGOKKgdBGvnuPUB1okfFUosdPPDt/Q
6XhuX2XuAinQCAFJFs/wI6PoiQDw4B5UVwj+1WXaKokJgRZ3BKh6oefxyIMOsDJK
BQB1oqHidPDET6bw/DDtCF32Op7/qUihVgQte1hwPQnPvl5LMQZhnEZjvgSJb57S
apuW4FaQdbvtzEcEsbBNomsn
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:20 2026 by rpki-client