Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
File:                     G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json)
Hash identifier:          Ae4Q59A4JcoOnY1D59ypAGQcsimL0GA9AZ9hMw6/ac8=
Subject key identifier:   5E:84:07:04:64:D0:96:1B:64:66:01:B0:AE:8C:00:18:9F:CE:DA:03
Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30
Certificate issuer:       /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
Certificate serial:       0CD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
Manifest number:          1579
Signing time:             Thu 26 Mar 2026 18:20:18 +0000
Manifest this update:     Thu 26 Mar 2026 18:20:17 +0000
Manifest next update:     Thu 02 Apr 2026 18:20:17 +0000
Files and hashes:         1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: /OLk2I6+8yRT0uM6CENBwUPynPYIjpARO12BEPDVJYg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl
                          rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3281 (0xcd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B0EA, serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
        Validity
            Not Before: Mar 26 18:20:17 2026 GMT
            Not After : Apr  2 18:20:17 2026 GMT
        Subject: CN=69c578e1-69f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:44:ae:2b:41:55:fa:f6:43:5e:a6:bf:14:
                    04:89:34:1c:3d:9c:a2:2b:55:72:c7:c2:50:4e:a9:
                    52:77:f3:d2:2d:48:48:61:2c:a5:17:28:15:7b:d3:
                    b7:02:b8:af:22:93:87:c6:c6:c3:60:fb:fb:4d:5c:
                    f9:ed:08:fe:cf:a5:3c:38:f6:8b:f2:4e:64:46:1c:
                    68:42:f7:55:83:38:60:27:5b:b9:c2:10:7f:42:4b:
                    25:c8:e1:5e:49:6e:66:1c:b9:b8:0e:4f:f4:9f:5b:
                    25:0d:97:65:31:8e:fd:d2:2f:3e:b0:69:b1:a4:0c:
                    d3:79:55:4a:d9:ce:d5:78:fe:10:b5:90:5e:a7:73:
                    6e:fe:3c:fd:55:0c:ed:a3:64:54:a9:51:a2:ea:88:
                    95:a5:d3:85:9c:26:44:21:75:22:59:e9:ea:4b:6c:
                    7c:aa:ff:4e:e2:1a:97:6a:a6:74:64:18:85:b1:d7:
                    7f:67:6a:37:f0:09:aa:9f:5e:a6:ac:15:f1:03:04:
                    22:8b:d1:57:31:36:1a:d3:8e:f9:c5:3c:33:86:62:
                    a0:89:67:f5:d9:94:94:c8:28:01:3f:bd:c0:05:f6:
                    56:49:f6:14:7a:06:e4:e6:01:37:ed:16:f7:26:1d:
                    33:b6:95:c6:2e:db:0c:7a:f8:f9:36:4e:26:fe:08:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:84:07:04:64:D0:96:1B:64:66:01:B0:AE:8C:00:18:9F:CE:DA:03
            X509v3 Authority Key Identifier:
                keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:76:2f:29:82:31:e0:6d:bb:aa:b2:be:c8:f6:04:28:1b:da:
         46:2f:56:0a:59:fb:0a:a5:06:ba:b8:0d:d1:65:d7:25:42:7a:
         a7:04:db:26:37:44:d6:58:92:63:7f:e4:84:33:4e:98:27:62:
         65:51:e5:00:8b:84:24:0e:4b:1d:de:61:95:07:4a:d0:63:45:
         8b:ba:d2:fd:cd:27:aa:4b:76:b8:2c:14:1f:35:a2:33:73:c2:
         a5:d8:ac:90:d2:cb:b1:68:e1:14:ab:63:7c:1c:ba:c1:4e:02:
         0c:eb:79:a5:4b:6c:dc:c0:ee:d2:d6:da:5d:92:05:d8:01:24:
         63:75:b6:3e:db:f1:61:78:eb:3c:36:ef:2c:32:9e:b7:aa:3c:
         ae:5c:11:a1:70:81:34:82:9e:2f:d5:69:27:2e:88:6b:27:23:
         55:41:ca:fe:58:c5:a7:9c:12:7a:9f:29:49:0f:40:bd:dd:ca:
         39:7b:85:9f:fd:10:3f:13:8c:16:80:42:e6:a7:91:1a:95:82:
         a7:fa:26:22:69:96:93:3e:17:91:8e:aa:58:39:bd:d6:9b:e5:
         00:8a:8a:2f:00:d7:05:de:20:a1:d9:44:44:79:2d:c7:07:a1:
         ad:28:57:f0:d5:51:b0:fd:70:99:58:80:4f:0b:2f:5f:17:46:
         c4:b9:b9:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIwRUExMTAvBgNVBAUTKDFCNDNGMzU1NjU2RDEwOEUzMEQxODQzNERFQjU3OTND
RjZBMDFBMzAwHhcNMjYwMzI2MTgyMDE3WhcNMjYwNDAyMTgyMDE3WjAYMRYwFAYD
VQQDEw02OWM1NzhlMS02OWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy/REritBVfr2Q16mvxQEiTQcPZyiK1Vyx8JQTqlSd/PSLUhIYSylFygVe9O3
ArivIpOHxsbDYPv7TVz57Qj+z6U8OPaL8k5kRhxoQvdVgzhgJ1u5whB/QkslyOFe
SW5mHLm4Dk/0n1slDZdlMY790i8+sGmxpAzTeVVK2c7VeP4QtZBep3Nu/jz9VQzt
o2RUqVGi6oiVpdOFnCZEIXUiWenqS2x8qv9O4hqXaqZ0ZBiFsdd/Z2o38Amqn16m
rBXxAwQii9FXMTYa0475xTwzhmKgiWf12ZSUyCgBP73ABfZWSfYUegbk5gE37Rb3
Jh0ztpXGLtsMevj5Nk4m/gi5iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6EBwRk
0JYbZGYBsK6MABifztoDMB8GA1UdIwQYMBaAFBtD81VlbRCOMNGENN61eTz2oBow
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC
NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJNHcwWVEwM3JWNVBQYWdH
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cwUHpWV1Z0RUk0dzBZUTAzclY1UFBhZ0dqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJ
NHcwWVEwM3JWNVBQYWdHakEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAx3YvKYIx4G27qrK+yPYEKBvaRi9WCln7CqUGurgN0WXXJUJ6pwTbJjdE1liS
Y3/khDNOmCdiZVHlAIuEJA5LHd5hlQdK0GNFi7rS/c0nqkt2uCwUHzWiM3PCpdis
kNLLsWjhFKtjfBy6wU4CDOt5pUts3MDu0tbaXZIF2AEkY3W2PtvxYXjrPDbvLDKe
t6o8rlwRoXCBNIKeL9VpJy6IaycjVUHK/ljFp5wSep8pSQ9Avd3KOXuFn/0QPxOM
FoBC5qeRGpWCp/omImmWkz4XkY6qWDm91pvlAIqKLwDXBd4godlERHktxwehrShX
8NVRsP1wmViATwsvXxdGxLm5eQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:09:18 2026 by rpki-client