Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft
File:                     SGjuTp_AEUegPCaatSEKj-cnp4s.mft (raw, json)
Hash identifier:          Lf1EDY7vSkCkr7l3sKDFBevkproEc5UYq6PbVoWS+Vw=
Subject key identifier:   FF:BA:23:E7:41:46:17:3D:4C:A6:A1:CB:74:23:55:54:C5:74:33:75
Authority key identifier: 48:68:EE:4E:9F:C0:11:47:A0:3C:26:9A:B5:21:0A:8F:E7:27:A7:8B
Certificate issuer:       /CN=A9131CF4/serialNumber=4868EE4E9FC01147A03C269AB5210A8FE727A78B
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft
Manifest number:          4D
Signing time:             Fri 27 Mar 2026 07:47:09 +0000
Manifest this update:     Fri 27 Mar 2026 07:47:08 +0000
Manifest next update:     Fri 03 Apr 2026 07:47:08 +0000
Files and hashes:         1: SGjuTp_AEUegPCaatSEKj-cnp4s.crl (hash: QoDmqlkYxPD3NwuRlIqQmp8N4qu2M3VX8HyuNdYmsNE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.crl
                          rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131CF4, serialNumber=4868EE4E9FC01147A03C269AB5210A8FE727A78B
        Validity
            Not Before: Mar 27 07:47:08 2026 GMT
            Not After : Apr  3 07:47:08 2026 GMT
        Subject: CN=69c635fd-c1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:43:ac:4a:eb:f3:96:97:6e:39:f0:87:b7:
                    5a:95:a8:e5:82:c4:2e:43:0c:05:2e:11:02:19:4b:
                    b3:63:b7:60:c2:5f:7b:f9:02:ef:84:8a:57:a6:bd:
                    93:6b:b8:fb:ee:37:7e:d9:86:86:49:d8:fc:9b:d6:
                    a6:4f:7d:88:eb:ae:d8:cf:19:fc:5e:4c:b3:8e:17:
                    d6:14:6a:9d:0c:b2:f8:5a:39:9a:37:77:a0:a0:22:
                    8e:71:92:01:a2:e1:9b:a1:ea:d8:4a:1d:8f:95:09:
                    75:3d:0e:94:2c:52:5d:5a:d3:f0:76:b7:b9:3e:46:
                    b5:d5:2e:c0:b9:26:23:41:46:94:77:0e:0e:42:4a:
                    58:ad:d9:43:03:4b:8a:f7:d5:d9:a6:74:72:06:8c:
                    6d:69:44:15:5a:2c:e1:8a:c5:e2:c6:3f:ce:91:93:
                    d7:db:9f:ed:71:a9:c3:b4:9a:87:38:47:c7:31:cf:
                    cc:bd:e3:b2:c9:38:4b:7c:84:9f:34:9a:5d:86:43:
                    96:4a:66:e8:c4:94:31:4e:f5:e6:e4:b7:79:08:74:
                    8b:dd:e0:a4:80:2b:7f:fa:03:d8:f3:31:f3:75:82:
                    88:a7:f2:0a:7f:d9:28:b4:19:18:b6:6d:0b:b2:a1:
                    62:84:48:75:ff:ef:36:4a:f8:df:88:a0:0b:c4:76:
                    15:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BA:23:E7:41:46:17:3D:4C:A6:A1:CB:74:23:55:54:C5:74:33:75
            X509v3 Authority Key Identifier:
                keyid:48:68:EE:4E:9F:C0:11:47:A0:3C:26:9A:B5:21:0A:8F:E7:27:A7:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ea:35:a5:3b:6b:6a:b9:6d:79:7f:c6:52:a4:59:0d:34:43:
         c0:e8:b0:fa:ab:c1:ea:5c:7a:fb:b2:89:44:48:1c:1e:56:c1:
         4b:c1:0d:7f:93:6c:4f:08:67:18:b0:03:a4:09:36:cd:05:ba:
         da:5b:a1:f7:0e:8f:83:6b:14:09:dd:8d:25:53:b6:1a:96:73:
         04:7c:a0:d7:c3:1a:03:0b:26:d8:af:8e:c9:24:35:92:b6:6c:
         f2:5a:ef:43:01:0b:63:c4:04:8f:77:e2:8f:88:6f:e6:f2:ab:
         ba:17:1e:10:76:f7:26:cd:fa:c3:a2:c7:59:01:d5:58:0d:2e:
         ee:f3:57:28:72:71:c7:56:73:d0:06:a1:d0:c2:ab:ec:2a:4a:
         e5:a6:54:6f:af:1b:5d:31:8f:39:f2:d4:a5:33:7b:18:a4:2f:
         10:a2:97:fc:57:d5:65:ae:3c:0b:59:5d:62:be:0c:31:1f:59:
         ae:66:ce:2d:e8:12:82:6b:4f:8a:c4:c6:ee:11:6f:68:56:4a:
         e5:ac:fd:e2:93:a6:7d:9d:a0:db:a1:76:12:d6:cb:fe:f2:d0:
         53:2f:6f:8c:0e:a8:03:94:0f:99:4f:1a:68:d0:36:cf:f2:48:
         a2:f1:38:cc:4a:d4:c4:f7:55:2c:6d:66:df:d5:95:ef:aa:19:
         3f:95:19:da
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MUNGNDExMC8GA1UEBRMoNDg2OEVFNEU5RkMwMTE0N0EwM0MyNjlBQjUyMTBBOEZF
NzI3QTc4QjAeFw0yNjAzMjcwNzQ3MDhaFw0yNjA0MDMwNzQ3MDhaMBgxFjAUBgNV
BAMTDTY5YzYzNWZkLWMxY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEc0OsSuvzlpduOfCHt1qVqOWCxC5DDAUuEQIZS7Njt2DCX3v5Au+EilemvZNr
uPvuN37ZhoZJ2Pyb1qZPfYjrrtjPGfxeTLOOF9YUap0MsvhaOZo3d6CgIo5xkgGi
4Zuh6thKHY+VCXU9DpQsUl1a0/B2t7k+RrXVLsC5JiNBRpR3Dg5CSlit2UMDS4r3
1dmmdHIGjG1pRBVaLOGKxeLGP86Rk9fbn+1xqcO0moc4R8cxz8y947LJOEt8hJ80
ml2GQ5ZKZujElDFO9ebkt3kIdIvd4KSAK3/6A9jzMfN1goin8gp/2Si0GRi2bQuy
oWKESHX/7zZK+N+IoAvEdhWZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/7oj50FG
Fz1MpqHLdCNVVMV0M3UwHwYDVR0jBBgwFoAUSGjuTp/AEUegPCaatSEKj+cnp4sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQ0Y0LzQ3QkZENERDQjcx
MTExRjBBNUMyODA3M0M0RjlBRTAyL1NHanVUcF9BRVVlZ1BDYWF0U0VLai1jbnA0
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU0dqdVRwX0FFVWVnUENhYXRTRUtqLWNucDRzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx
Q0Y0LzQ3QkZENERDQjcxMTExRjBBNUMyODA3M0M0RjlBRTAyL1NHanVUcF9BRVVl
Z1BDYWF0U0VLai1jbnA0cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAm6jWlO2tquW15f8ZSpFkNNEPA6LD6q8HqXHr7solESBweVsFLwQ1/k2xPCGcY
sAOkCTbNBbraW6H3Do+DaxQJ3Y0lU7YalnMEfKDXwxoDCybYr47JJDWStmzyWu9D
AQtjxASPd+KPiG/m8qu6Fx4QdvcmzfrDosdZAdVYDS7u81cocnHHVnPQBqHQwqvs
KkrlplRvrxtdMY858tSlM3sYpC8Qopf8V9VlrjwLWV1ivgwxH1muZs4t6BKCa0+K
xMbuEW9oVkrlrP3ik6Z9naDboXYS1sv+8tBTL2+MDqgDlA+ZTxpo0DbP8kii8TjM
StTE91UsbWbf1ZXvqhk/lRna
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:51 2026 by rpki-client