Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
File:                     Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft (raw, json)
Hash identifier:          d5YcWnGNUu5wife66rq0TOIpnMN/VJavGst07KqTSSQ=
Subject key identifier:   A1:BD:D8:7E:6B:A6:17:B7:96:4E:04:1D:5E:FD:65:F6:41:F4:99:26
Authority key identifier: 31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D
Certificate issuer:       /CN=A913270F/serialNumber=31BFC1373FB37C139A2EE7C3A96DFEC4E7E3791D
Certificate serial:       2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
Manifest number:          2A
Signing time:             Wed 25 Mar 2026 07:56:51 +0000
Manifest this update:     Wed 25 Mar 2026 07:56:50 +0000
Manifest next update:     Wed 01 Apr 2026 07:56:50 +0000
Files and hashes:         1: Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl (hash: VQVm7Twkynuhn7fcJuoViYS9/UCBj41/fDxIC3GXWIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl
                          rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913270F, serialNumber=31BFC1373FB37C139A2EE7C3A96DFEC4E7E3791D
        Validity
            Not Before: Mar 25 07:56:50 2026 GMT
            Not After : Apr  1 07:56:50 2026 GMT
        Subject: CN=69c39543-800f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:73:cd:43:1a:8e:12:9b:74:96:67:60:87:46:
                    b1:e6:86:c4:f9:84:5f:cb:44:32:e2:22:70:7e:84:
                    d3:6a:88:86:0c:92:0c:9b:75:99:66:27:ad:36:3d:
                    dc:aa:59:76:18:b4:5b:e5:d0:07:ea:97:90:cd:ca:
                    df:b8:05:fe:98:5b:70:ab:cd:63:0a:48:1b:fb:69:
                    1b:93:a0:17:58:a7:ce:38:c0:ba:7a:64:95:b9:a4:
                    85:e2:a9:82:64:a3:34:0b:51:76:64:61:89:90:d7:
                    30:d3:1d:14:d9:06:05:93:ab:bc:e7:1b:0b:b6:83:
                    3f:ec:bf:61:40:64:61:76:f3:e6:0f:7c:de:32:ee:
                    c4:76:38:dc:62:34:38:44:83:b9:91:2b:ea:b8:42:
                    e7:63:8b:d2:ce:44:ff:87:8d:d9:f4:8b:cb:3a:86:
                    60:cf:96:40:e6:b0:a2:ef:32:14:73:98:95:1a:5a:
                    7d:c2:89:5b:01:f9:e2:37:b4:75:45:e6:a6:d6:c6:
                    ce:81:ce:f7:10:ed:79:af:de:3c:59:00:47:65:2e:
                    a9:53:7c:28:3c:02:fd:87:71:98:65:08:0d:ae:d1:
                    40:bd:b8:37:1d:fe:51:1b:db:36:1f:b0:2f:5e:ef:
                    e2:b0:93:ad:c3:73:6f:ce:e0:f6:64:c9:4d:01:81:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BD:D8:7E:6B:A6:17:B7:96:4E:04:1D:5E:FD:65:F6:41:F4:99:26
            X509v3 Authority Key Identifier:
                keyid:31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:3e:62:75:6f:8b:2f:e1:93:4a:52:e8:05:42:6c:a9:61:a7:
         bd:9d:cf:c1:d5:b8:3c:8a:f2:27:88:7e:f1:1f:af:81:3a:4f:
         44:d2:80:78:e9:14:ea:d9:45:ab:a7:5c:32:b1:2b:5e:5e:4c:
         2e:d7:52:18:ef:f4:2b:d9:a1:0f:5a:b3:39:6d:5c:49:c2:c8:
         cf:e6:f7:08:c9:27:3a:42:2a:72:ee:9a:05:d4:04:c4:db:b2:
         c7:41:8d:fe:11:a2:a0:6a:b3:b5:72:50:a3:d4:44:a4:16:62:
         ce:23:fb:55:d6:30:ab:ba:44:ac:ed:77:b8:3b:91:fc:8b:8a:
         15:ea:78:4c:61:7c:3c:6a:8a:18:09:05:ea:07:2e:f5:44:94:
         d3:df:3b:8f:02:d2:91:09:dc:02:8d:65:e1:72:6f:11:49:1a:
         38:b1:f0:a6:09:d5:66:72:a9:83:67:63:54:26:d4:b4:49:60:
         57:22:be:60:4c:56:8b:0a:2d:f2:fc:3d:12:16:77:a7:8d:8a:
         25:4c:af:d2:cf:16:26:62:71:98:2e:b0:4a:1c:5c:8a:11:09:
         d5:28:d0:bd:45:c3:e7:77:f7:cf:64:d0:fd:f4:97:09:1c:09:
         df:b8:33:7a:67:e1:8a:b6:ef:cd:bc:2d:54:ee:90:83:8b:64:
         f8:79:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:05 2026 by rpki-client