Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
File:                     d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json)
Hash identifier:          BdJF+LhnWLZehs+JEj0Qx6RzvB0k+lrJUHlBfsPTg7g=
Subject key identifier:   19:20:40:DA:F1:A2:DD:E0:5B:88:A9:5B:0B:AD:4F:E6:E6:CE:6F:85
Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF
Certificate issuer:       /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF
Certificate serial:       351F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
Manifest number:          351F
Signing time:             Thu 26 Mar 2026 15:05:49 +0000
Manifest this update:     Thu 26 Mar 2026 15:05:48 +0000
Manifest next update:     Thu 02 Apr 2026 15:05:48 +0000
Files and hashes:         1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: 3AVUx0MPQ+KHN8vPtoiAu7x97bR4PZiZxpWDTw6Wm4E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl
                          rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 15:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13599 (0x351f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D23, serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF
        Validity
            Not Before: Mar 26 15:05:48 2026 GMT
            Not After : Apr  2 15:05:48 2026 GMT
        Subject: CN=69c54b4c-9de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:81:7a:0b:df:eb:9f:06:95:44:1b:84:eb:
                    d2:ce:4c:53:67:ea:60:99:96:d7:43:cf:a1:31:e6:
                    43:69:ef:03:85:01:51:f2:0f:00:e8:03:2e:b7:91:
                    23:71:76:a7:45:cd:21:2d:6f:dd:1c:ad:db:93:21:
                    af:1f:ea:60:13:ed:7f:e7:5e:ba:27:ef:0d:27:68:
                    4b:e9:8d:1a:09:f9:ee:bb:cf:dd:dd:02:45:ea:3b:
                    d5:e2:9c:9f:11:ce:a8:f4:7e:78:e9:cf:e5:4b:79:
                    66:e7:91:bb:c7:0e:a9:71:90:55:b4:88:34:81:24:
                    12:85:54:bd:c1:8d:25:3f:13:9c:d3:e8:d6:47:13:
                    b6:85:d8:db:cc:9f:42:81:bd:e1:5f:71:6c:fd:74:
                    16:e3:ad:99:81:ee:ca:22:d5:d0:32:96:0e:36:14:
                    bb:80:a8:00:af:11:41:1a:3d:5d:f9:e3:dd:18:04:
                    2c:ab:84:9e:9e:f9:f6:c3:b8:ea:8c:5d:dc:03:f8:
                    d0:31:2d:43:bf:81:a4:68:af:4e:4a:b5:19:ab:d9:
                    79:b0:eb:89:29:10:7b:2b:dc:0f:b1:31:04:da:1f:
                    ba:28:69:ba:f4:ac:b1:6b:20:b3:17:13:d9:76:ac:
                    50:1b:f3:8b:4c:be:86:68:c9:4e:bd:23:2b:7b:58:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:20:40:DA:F1:A2:DD:E0:5B:88:A9:5B:0B:AD:4F:E6:E6:CE:6F:85
            X509v3 Authority Key Identifier:
                keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:44:ed:62:11:48:67:86:e5:1e:a4:6a:ba:99:51:06:3b:b7:
         ef:f4:c5:45:6a:c5:f6:9a:e6:15:8e:5e:cb:b3:6f:9d:d0:89:
         d0:83:40:3e:e7:3d:37:1e:7f:c0:a9:d6:10:1b:c2:e2:2f:70:
         73:30:71:a3:78:07:64:d9:45:62:c7:b6:e1:72:f2:44:4f:6d:
         4b:62:c8:84:d7:51:e3:57:ca:a0:1e:bf:de:65:e0:be:8e:00:
         88:fe:c0:c1:cc:83:4d:1c:30:1e:d8:68:45:54:21:21:03:09:
         8b:72:e2:3c:04:c1:23:3e:44:06:6f:fe:54:ab:35:36:af:76:
         18:1d:53:42:7c:82:ee:29:56:07:3c:e2:2f:49:e1:a8:e8:f1:
         89:e4:65:ee:31:07:b8:ac:29:67:56:d7:45:e8:99:d4:05:f2:
         76:10:6d:f3:31:27:46:e3:17:7e:a8:ba:c2:b2:fb:c3:d4:0e:
         83:d7:79:50:c0:c5:87:53:df:ae:de:1c:94:0a:39:ce:be:55:
         27:6a:4a:95:9d:c8:01:ca:79:6e:12:d2:49:3d:dd:1d:95:7f:
         05:b2:90:8c:57:f7:ca:da:5f:45:9f:99:3b:ee:fd:0d:9d:08:
         eb:e0:3e:e7:0c:9f:11:07:e7:41:22:3e:f6:35:89:65:ad:31:
         62:d0:b7:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTREMjMxMTAvBgNVBAUTKDc3RkVEQjUyQUMxMjg5NTA0OUUzNDAyN0UxMTI2QTZG
RDE1MTFFRUYwHhcNMjYwMzI2MTUwNTQ4WhcNMjYwNDAyMTUwNTQ4WjAYMRYwFAYD
VQQDEw02OWM1NGI0Yy05ZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA21uBegvf658GlUQbhOvSzkxTZ+pgmZbXQ8+hMeZDae8DhQFR8g8A6AMut5Ej
cXanRc0hLW/dHK3bkyGvH+pgE+1/5166J+8NJ2hL6Y0aCfnuu8/d3QJF6jvV4pyf
Ec6o9H546c/lS3lm55G7xw6pcZBVtIg0gSQShVS9wY0lPxOc0+jWRxO2hdjbzJ9C
gb3hX3Fs/XQW462Zge7KItXQMpYONhS7gKgArxFBGj1d+ePdGAQsq4Senvn2w7jq
jF3cA/jQMS1Dv4GkaK9OSrUZq9l5sOuJKRB7K9wPsTEE2h+6KGm69KyxayCzFxPZ
dqxQG/OLTL6GaMlOvSMre1huCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBkgQNrx
ot3gW4ipWwutT+bmzm+FMB8GA1UdIwQYMBaAFHf+21KsEolQSeNAJ+ESam/RUR7v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyMy8wNDY5MDk3ODFE
QTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lWQko0MEFuNFJKcWI5RlJI
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RfN2JVcXdTaVZCSjQwQW40UkpxYjlGUkh1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEQyMy8wNDY5MDk3ODFEQTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lW
Qko0MEFuNFJKcWI5RlJIdTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGUTtYhFIZ4blHqRquplRBju37/TFRWrF9prmFY5ey7NvndCJ0INAPuc9Nx5/
wKnWEBvC4i9wczBxo3gHZNlFYse24XLyRE9tS2LIhNdR41fKoB6/3mXgvo4AiP7A
wcyDTRwwHthoRVQhIQMJi3LiPATBIz5EBm/+VKs1Nq92GB1TQnyC7ilWBzziL0nh
qOjxieRl7jEHuKwpZ1bXReiZ1AXydhBt8zEnRuMXfqi6wrL7w9QOg9d5UMDFh1Pf
rt4clAo5zr5VJ2pKlZ3IAcp5bhLSST3dHZV/BbKQjFf3ytpfRZ+ZO+79DZ0I6+A+
5wyfEQfnQSI+9jWJZa0xYtC3Cw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:36 2026 by rpki-client