Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
File:                     fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json)
Hash identifier:          lMdGEwlDgaxXt7N2BDSzFMW9yNUG70NI5iGqOZh+h8k=
Subject key identifier:   41:64:7B:07:54:F8:71:A2:24:8D:46:64:A9:FE:61:DD:0A:D1:95:49
Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
Certificate issuer:       /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Certificate serial:       0BEF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
Manifest number:          0BEC
Signing time:             Tue 24 Mar 2026 18:41:25 +0000
Manifest this update:     Tue 24 Mar 2026 18:41:25 +0000
Manifest next update:     Tue 31 Mar 2026 18:41:25 +0000
Files and hashes:         1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: CP+0yn9FrzMYrQ4ECTsIzmExKifvDb+nT8yjPDMQ4R0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl
                          rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3055 (0xbef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
        Validity
            Not Before: Mar 24 18:41:25 2026 GMT
            Not After : Mar 31 18:41:25 2026 GMT
        Subject: CN=69c2dad5-7145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:85:42:5c:11:ba:f0:ff:2e:68:5e:a4:8b:ed:
                    52:72:94:38:14:9d:89:e2:c3:5e:d1:e9:15:a5:80:
                    47:63:de:f2:e2:ed:4d:5d:64:fb:0c:5c:5c:bf:53:
                    5e:3e:c9:08:9e:42:95:c1:a0:e4:86:d6:69:34:0b:
                    70:77:d6:5c:93:b5:34:a6:a9:c5:75:44:36:3d:ff:
                    24:8e:b3:6a:34:0d:7e:44:8d:b6:df:13:df:82:37:
                    d6:f8:42:23:bd:6e:5a:60:77:20:d2:c2:be:3f:2e:
                    99:bb:2e:91:77:bd:c6:d6:48:72:42:20:65:91:d5:
                    ff:75:2e:45:9b:6e:eb:12:81:36:34:5b:21:40:c0:
                    4f:e9:a0:97:b1:99:75:b7:07:56:37:db:73:79:1b:
                    c4:73:b8:32:2d:e1:d7:fe:7e:e7:4b:47:ef:49:bc:
                    a6:d4:62:4e:72:7a:e6:b8:72:11:cf:40:8a:1f:d8:
                    27:fd:c9:00:76:86:58:1a:2f:5b:b8:5a:b2:3b:7d:
                    c5:70:29:23:83:52:1e:ab:a7:ac:e0:da:40:64:04:
                    fe:e3:24:fc:df:f1:41:91:49:32:8b:74:8e:06:83:
                    db:89:91:cc:a7:59:34:ca:89:f2:e7:ea:f4:72:bb:
                    c4:64:84:23:c9:06:20:e3:0d:58:92:0e:0e:c9:f8:
                    fe:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:64:7B:07:54:F8:71:A2:24:8D:46:64:A9:FE:61:DD:0A:D1:95:49
            X509v3 Authority Key Identifier:
                keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:a9:8d:f4:74:7a:98:07:4d:3e:1c:bc:16:c2:c2:42:9e:c8:
         ba:54:82:97:36:16:50:83:20:40:85:fc:57:db:49:3e:a1:f7:
         cd:f4:e3:04:b0:3c:d0:26:03:cb:94:51:86:06:5d:aa:ca:f3:
         b9:c1:83:4c:78:f9:1d:04:87:d6:dc:4e:ba:eb:dc:dd:3d:70:
         1f:36:2d:a7:2d:de:ad:75:78:34:13:4b:dd:a7:aa:7c:97:b3:
         d4:0b:03:31:21:0a:e8:f4:07:be:8d:e6:83:e2:19:3d:4c:0e:
         1c:5b:8f:76:ab:aa:20:ab:ed:55:10:68:70:91:cf:c3:1d:08:
         ff:43:20:f2:6f:aa:f8:83:33:c6:79:78:23:4c:0b:3e:34:2f:
         1b:65:1d:05:53:3d:1e:57:a1:48:09:32:ca:89:ca:27:5e:7a:
         75:d2:2a:de:79:b1:da:56:cc:b5:c8:0d:81:c4:0a:3f:20:e4:
         ab:68:d9:20:7c:3e:8c:73:e6:69:f3:27:6c:c6:ab:47:11:8d:
         d0:18:bc:48:c7:72:14:97:17:c0:23:22:a9:6a:61:d8:7e:53:
         36:a9:ff:69:ac:3d:f7:09:36:54:2c:d0:50:07:04:24:5f:75:
         ce:58:96:68:c0:09:82:34:c4:2e:91:68:1d:ab:3f:7a:94:13:
         19:06:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:34:55 2026 by rpki-client