Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
File:                     Ym10UmNzXXYYZJvVMYyB-6it3MA.mft (raw, json)
Hash identifier:          gEtVezlbqu+LfxHVzTGiNQSIV2YQrsYKkeComj6kfnI=
Subject key identifier:   A6:04:CF:FB:C9:B7:B2:EB:53:CB:0E:33:52:2F:D3:D2:6E:6D:E1:7D
Authority key identifier: 62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0
Certificate issuer:       /CN=A916B7FC/serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
Manifest number:          C3
Signing time:             Fri 27 Mar 2026 06:28:41 +0000
Manifest this update:     Fri 27 Mar 2026 06:28:40 +0000
Manifest next update:     Fri 03 Apr 2026 06:28:40 +0000
Files and hashes:         1: Ym10UmNzXXYYZJvVMYyB-6it3MA.crl (hash: yAjOO+qvpU4V0O25SuuPKY+JiEasYN1jL3uKQtoFjng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl
                          rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B7FC, serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0
        Validity
            Not Before: Mar 27 06:28:40 2026 GMT
            Not After : Apr  3 06:28:40 2026 GMT
        Subject: CN=69c62399-bc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bf:d0:8f:ca:d1:c3:4c:4b:ce:d3:1f:d3:83:
                    02:1b:f7:e2:c9:a3:09:73:49:15:fb:5f:8d:09:9f:
                    95:91:bb:cb:33:dc:02:bb:a8:5f:9f:a1:b2:c1:2c:
                    77:b9:94:a1:dd:c9:99:60:43:c9:7b:21:48:13:53:
                    8e:5b:a8:6c:ab:35:6e:1d:5e:df:60:b4:82:c4:61:
                    c3:5f:2e:77:02:05:b8:d5:b8:3c:f5:af:dc:6a:dc:
                    32:66:6e:11:3c:17:f9:e2:74:c2:e6:ea:cb:ff:f5:
                    96:2e:43:c0:46:30:0b:db:89:b8:57:0f:28:bf:7d:
                    91:4b:68:c6:d4:6e:5e:4b:fa:10:a6:1e:c7:4c:f1:
                    93:87:6d:a0:7e:2b:cd:cb:37:b5:45:b7:1a:4e:10:
                    61:dd:59:96:b3:c3:7b:0d:9e:f8:de:80:69:4e:10:
                    5a:ad:06:4a:c4:d5:e2:2a:ac:f1:97:fd:4e:5d:63:
                    87:3d:9d:53:a8:83:cc:80:97:eb:b6:de:50:10:46:
                    db:45:1d:2d:ce:45:66:16:52:b9:a6:70:74:fc:08:
                    b9:9b:eb:e8:28:da:83:7a:24:68:27:5a:ec:31:34:
                    d6:c3:d4:f7:23:15:52:63:b6:cd:90:b5:e5:41:57:
                    6f:0c:71:21:1d:c9:d0:86:25:61:23:67:d3:cd:4c:
                    d7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:04:CF:FB:C9:B7:B2:EB:53:CB:0E:33:52:2F:D3:D2:6E:6D:E1:7D
            X509v3 Authority Key Identifier:
                keyid:62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b7:f1:19:85:ae:bd:02:24:6a:ba:ac:1c:51:57:77:2f:60:
         a9:7a:6f:4a:0e:93:3f:6c:08:be:d8:d6:9b:cc:fd:54:b0:4e:
         42:c6:d2:95:11:68:62:89:70:16:6f:20:96:62:16:71:56:9a:
         69:0d:5d:83:38:07:88:29:1b:f4:64:41:d9:cb:eb:db:44:a3:
         58:e4:61:b3:95:2b:fb:43:ba:74:da:33:44:a5:44:a0:70:0d:
         0f:b5:56:d6:98:12:5c:21:45:b8:56:b9:fe:a4:23:d1:06:c2:
         a8:50:e5:43:fe:27:ad:58:f0:df:4c:e7:67:28:8e:1f:5e:60:
         b0:2c:4d:04:40:28:c3:34:ae:2b:cd:a5:e4:e8:4c:e2:07:14:
         8f:88:60:e5:cf:01:99:33:ec:16:49:66:91:00:4b:db:b9:e6:
         ea:0d:49:1c:96:de:6d:6d:f7:77:36:21:da:58:a1:95:b8:d3:
         e7:90:ba:37:fb:d5:88:38:f3:60:dc:eb:e4:80:23:01:a3:67:
         aa:86:e8:93:9a:b1:05:e0:3a:c1:61:bf:a0:f2:09:0f:fe:13:
         6e:0d:0d:1d:7c:8d:0b:ad:53:19:96:0f:0e:ec:fd:8d:21:de:
         55:ed:5e:90:c9:09:db:51:c8:39:5f:5c:62:0b:91:73:7c:9c:
         1a:f7:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:27 2026 by rpki-client