Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
File:                     sceOjrQ5MbA-kLu1U1edee0Z_VA.mft (raw, json)
Hash identifier:          No+LglmLNEy5LBMYg87G7Ej/uSG/cUtrgoZpOV7p/Gw=
Subject key identifier:   26:80:7B:11:C6:10:F4:E5:69:60:89:9C:EB:79:93:50:ED:A0:F5:23
Authority key identifier: B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50
Certificate issuer:       /CN=A9126BDE/serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
Manifest number:          3A
Signing time:             Fri 27 Mar 2026 08:04:33 +0000
Manifest this update:     Fri 27 Mar 2026 08:04:32 +0000
Manifest next update:     Fri 03 Apr 2026 08:04:32 +0000
Files and hashes:         1: sceOjrQ5MbA-kLu1U1edee0Z_VA.crl (hash: SVViSRosqe3taOLHr2Cgw+GR8Az5S8hhK0ihHtX5mXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl
                          rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 08:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126BDE, serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
        Validity
            Not Before: Mar 27 08:04:32 2026 GMT
            Not After : Apr  3 08:04:32 2026 GMT
        Subject: CN=69c63a10-dccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:b3:aa:f8:83:5e:49:7f:f8:b1:cb:2d:53:
                    60:76:8d:f5:9a:e1:92:01:ec:24:de:b5:45:84:13:
                    74:a2:0c:53:19:2a:10:27:88:84:b3:95:c7:e9:0b:
                    0c:fd:c0:9c:5d:ae:01:70:9c:24:de:55:27:5b:3b:
                    d4:be:aa:37:35:10:06:86:07:73:45:80:c4:e4:8d:
                    a5:cc:78:f0:f9:e1:0f:50:67:ec:d4:65:ec:dd:ba:
                    00:cf:f3:22:5b:87:cd:90:14:e3:e0:cd:d9:b2:1e:
                    1e:dc:ff:80:b1:ad:5d:48:be:2c:0a:7d:a6:bb:1f:
                    42:f2:86:42:a6:d0:40:77:dc:fa:33:5b:7c:df:4e:
                    2f:0b:fd:15:37:57:9f:e8:d7:d8:b5:f0:19:ed:7e:
                    b2:80:da:7c:1b:fe:11:cb:d7:bd:c7:27:ab:c7:d2:
                    55:49:3c:f2:ad:ca:d1:68:2f:98:d2:48:3b:39:1e:
                    21:8b:e9:3a:04:0a:3a:7c:62:8d:55:70:36:71:c9:
                    f7:14:23:05:09:04:a3:0f:58:70:fa:75:98:3c:ca:
                    15:69:69:07:38:9f:cf:ed:25:88:7d:8a:ea:0e:50:
                    4d:64:a5:db:df:71:59:dd:90:7a:1f:0b:80:b9:db:
                    66:1b:78:46:4b:1b:cb:64:df:04:58:28:38:6b:0d:
                    d9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:80:7B:11:C6:10:F4:E5:69:60:89:9C:EB:79:93:50:ED:A0:F5:23
            X509v3 Authority Key Identifier:
                keyid:B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b4:1b:0e:d2:2e:f8:ee:c0:a9:2a:6d:8f:97:bd:4e:1a:82:
         82:7a:27:de:6b:7f:87:9b:ce:c6:33:7d:a5:52:83:fd:97:9c:
         ca:19:54:1a:f8:93:bc:af:73:c5:69:6b:c4:0d:be:ba:56:c4:
         35:88:da:8e:80:04:e5:2b:d2:5c:37:af:f8:d8:27:19:40:6c:
         4b:f8:73:33:13:b6:15:0c:59:da:64:65:23:8f:ab:8e:5f:1f:
         b9:82:a1:36:d2:65:ab:a0:9e:93:e1:9b:98:da:9a:cc:aa:1a:
         2d:a6:82:33:ea:8d:3f:35:82:ad:a2:2a:25:b9:d6:f8:9d:0e:
         43:b8:7d:0b:6b:e0:15:c8:49:71:0f:89:04:de:2f:7f:88:ba:
         bf:40:1b:aa:28:81:9f:a6:ef:44:d6:7c:1c:f6:74:73:d1:d2:
         0b:a3:74:21:96:a4:e7:81:4e:6a:10:bf:22:4a:34:d8:27:52:
         12:17:cc:88:1c:35:ae:86:4f:7a:0f:94:5c:6c:c8:30:a7:20:
         eb:11:23:c1:b8:98:79:c3:50:d1:e9:61:b9:7b:42:e8:c6:5c:
         f9:44:84:0b:3b:af:1a:ab:26:58:87:60:2b:32:f4:b1:3b:cc:
         dd:4a:84:7a:bb:31:ab:cb:c5:33:18:ee:47:bc:0f:7c:5f:7a:
         8a:83:ec:38
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NkJERTExMC8GA1UEBRMoQjFDNzhFOEVCNDM5MzFCMDNFOTBCQkI1NTM1NzlENzlF
RDE5RkQ1MDAeFw0yNjAzMjcwODA0MzJaFw0yNjA0MDMwODA0MzJaMBgxFjAUBgNV
BAMTDTY5YzYzYTEwLWRjY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDBtbOq+INeSX/4scstU2B2jfWa4ZIB7CTetUWEE3SiDFMZKhAniISzlcfpCwz9
wJxdrgFwnCTeVSdbO9S+qjc1EAaGB3NFgMTkjaXMePD54Q9QZ+zUZezdugDP8yJb
h82QFOPgzdmyHh7c/4CxrV1IviwKfaa7H0LyhkKm0EB33PozW3zfTi8L/RU3V5/o
19i18BntfrKA2nwb/hHL173HJ6vH0lVJPPKtytFoL5jSSDs5HiGL6ToECjp8Yo1V
cDZxyfcUIwUJBKMPWHD6dZg8yhVpaQc4n8/tJYh9iuoOUE1kpdvfcVndkHofC4C5
22YbeEZLG8tk3wRYKDhrDdlrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJoB7EcYQ
9OVpYImc63mTUO2g9SMwHwYDVR0jBBgwFoAUsceOjrQ5MbA+kLu1U1edee0Z/VAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QkRFLzQzNUJGMUFDRDNG
QzExRjBCOUY5NjQzMkM0RjlBRTAyL3NjZU9qclE1TWJBLWtMdTFVMWVkZWUwWl9W
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvc2NlT2pyUTVNYkEta0x1MVUxZWRlZTBaX1ZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2
QkRFLzQzNUJGMUFDRDNGQzExRjBCOUY5NjQzMkM0RjlBRTAyL3NjZU9qclE1TWJB
LWtMdTFVMWVkZWUwWl9WQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCAtBsO0i747sCpKm2Pl71OGoKCeifea3+Hm87GM32lUoP9l5zKGVQa+JO8r3PF
aWvEDb66VsQ1iNqOgATlK9JcN6/42CcZQGxL+HMzE7YVDFnaZGUjj6uOXx+5gqE2
0mWroJ6T4ZuY2prMqhotpoIz6o0/NYKtoioludb4nQ5DuH0La+AVyElxD4kE3i9/
iLq/QBuqKIGfpu9E1nwc9nRz0dILo3QhlqTngU5qEL8iSjTYJ1ISF8yIHDWuhk96
D5RcbMgwpyDrESPBuJh5w1DR6WG5e0Loxlz5RIQLO68aqyZYh2ArMvSxO8zdSoR6
uzGry8UzGO5HvA98X3qKg+w4
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:37 2026 by rpki-client