Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
File:                     FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft (raw, json)
Hash identifier:          OMI3XIOD+IoOAhaBOKUx5ZliW01vfEiporqwEiumtls=
Subject key identifier:   C0:40:51:F1:63:70:7C:02:8D:B0:B0:14:DE:FC:4E:83:A2:4D:73:43
Authority key identifier: 16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B
Certificate issuer:       /CN=A918BB4D/serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B
Certificate serial:       0742
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
Manifest number:          0742
Signing time:             Tue 24 Mar 2026 21:28:06 +0000
Manifest this update:     Tue 24 Mar 2026 21:28:05 +0000
Manifest next update:     Tue 31 Mar 2026 21:28:05 +0000
Files and hashes:         1: FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl (hash: Fz8JS/e5l81NwN91CFIOY15eOaIbsIOdUg71N02JeRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B
        Validity
            Not Before: Mar 24 21:28:05 2026 GMT
            Not After : Mar 31 21:28:05 2026 GMT
        Subject: CN=69c301e6-45b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2d:af:90:ab:5d:a4:61:ba:ab:15:26:2f:a9:
                    53:4d:6e:8e:3e:62:2d:f9:1c:cb:81:5c:77:66:4a:
                    2b:d0:b0:e5:86:44:51:a5:ad:9d:90:a7:c2:e5:b7:
                    60:ca:23:35:f6:0f:96:cc:f1:2a:b8:cb:91:c1:1e:
                    a5:12:83:98:bb:93:e3:ce:3b:3b:00:4a:d1:a5:b2:
                    0a:a3:ae:dc:7b:c0:7d:d5:2d:a8:57:ef:bf:7e:ac:
                    3b:77:46:2c:66:3c:01:52:bf:5d:45:ee:d4:43:8f:
                    69:b8:0a:c5:42:ea:de:bf:9d:d6:a5:bc:51:b3:1e:
                    5a:03:21:39:aa:0f:fa:74:a1:4a:aa:ca:77:a4:2a:
                    2e:fa:3e:7c:48:d7:60:a5:72:3d:4d:4b:4b:b5:37:
                    c5:d4:dd:56:ad:ef:d9:6a:f4:74:fc:af:23:d2:39:
                    4f:a2:46:a6:2c:b7:6c:62:6c:08:6f:ba:5b:02:37:
                    1e:2f:2b:c2:29:ac:45:25:7d:21:47:74:b7:0c:5d:
                    b9:e4:99:32:40:bd:d3:d8:79:39:ea:57:be:64:2c:
                    2a:7f:6e:a7:3d:68:05:7f:84:d9:cf:ef:56:55:8c:
                    e6:b5:9c:b0:6b:9d:cc:7d:15:4c:9f:1d:f8:4f:45:
                    70:a8:01:f9:8f:85:ff:0b:6a:b2:43:e6:12:80:b9:
                    8f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:40:51:F1:63:70:7C:02:8D:B0:B0:14:DE:FC:4E:83:A2:4D:73:43
            X509v3 Authority Key Identifier:
                keyid:16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b2:72:41:6f:cc:f9:45:0e:8a:19:2d:2b:ea:93:6d:95:23:
         f2:9b:a3:26:d1:ad:ce:8a:84:f7:f6:39:2f:f8:6f:c2:54:f1:
         73:6c:cb:01:4f:69:1a:e6:58:9f:15:90:c4:55:d8:e2:a3:f0:
         d9:3c:02:dd:25:38:9d:7a:d8:dc:61:3b:7d:7d:09:94:f2:46:
         f0:03:62:71:b5:d2:45:ac:54:2f:5a:97:91:ba:cd:3a:bc:bb:
         11:6b:11:e6:32:c6:13:0b:fe:d6:85:51:d9:85:cf:46:10:c8:
         01:6f:fa:b5:c8:40:a5:ef:b6:89:84:ec:b9:5b:1c:a0:9f:34:
         cf:69:c1:59:3d:77:1e:47:f9:92:3d:f1:93:c6:74:a0:ab:dd:
         fe:dc:d4:2d:93:9d:dd:20:35:ca:7f:b7:18:95:dc:09:c5:03:
         cd:c2:6d:fd:64:d9:da:6f:dc:ca:36:6c:e4:b9:01:10:b0:bb:
         26:3e:26:36:cb:b1:8a:02:f4:c8:ad:af:1d:28:32:d8:7b:9a:
         54:d2:39:4d:0f:61:41:95:bd:b3:f7:f5:a8:c4:dd:a6:43:a8:
         b3:37:6c:85:5e:88:9f:65:86:0f:d9:15:11:a6:5c:56:94:20:
         aa:a7:94:ee:2d:13:77:b6:bc:58:5c:7f:a0:21:bb:12:c8:38:
         87:a4:d3:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJCNEQxMTAvBgNVBAUTKDE2MzMyOUY1NzA1REU5QkMyMjM1QUM1N0Q3NTRGOTgw
NzhDN0Y1MkIwHhcNMjYwMzI0MjEyODA1WhcNMjYwMzMxMjEyODA1WjAYMRYwFAYD
VQQDEw02OWMzMDFlNi00NWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4i2vkKtdpGG6qxUmL6lTTW6OPmIt+RzLgVx3Zkor0LDlhkRRpa2dkKfC5bdg
yiM19g+WzPEquMuRwR6lEoOYu5Pjzjs7AErRpbIKo67ce8B91S2oV++/fqw7d0Ys
ZjwBUr9dRe7UQ49puArFQurev53WpbxRsx5aAyE5qg/6dKFKqsp3pCou+j58SNdg
pXI9TUtLtTfF1N1Wre/ZavR0/K8j0jlPokamLLdsYmwIb7pbAjceLyvCKaxFJX0h
R3S3DF255JkyQL3T2Hk56le+ZCwqf26nPWgFf4TZz+9WVYzmtZywa53MfRVMnx34
T0VwqAH5j4X/C2qyQ+YSgLmPRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBAUfFj
cHwCjbCwFN78ToOiTXNDMB8GA1UdIwQYMBaAFBYzKfVwXem8IjWsV9dU+YB4x/Ur
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DMDdFMUNEMDY1
MjIxMUVCODBGNkU5NEJDNEY5QUUwMi9Gak1wOVhCZDZid2lOYXhYMTFUNWdIakg5
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ZqTXA5WEJkNmJ3aU5heFgxMVQ1Z0hqSDlTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkI0RC9DMDdFMUNEMDY1MjIxMUVCODBGNkU5NEJDNEY5QUUwMi9Gak1wOVhCZDZi
d2lOYXhYMTFUNWdIakg5U3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT7JyQW/M+UUOihktK+qTbZUj8pujJtGtzoqE9/Y5L/hvwlTxc2zLAU9pGuZY
nxWQxFXY4qPw2TwC3SU4nXrY3GE7fX0JlPJG8ANicbXSRaxUL1qXkbrNOry7EWsR
5jLGEwv+1oVR2YXPRhDIAW/6tchApe+2iYTsuVscoJ80z2nBWT13Hkf5kj3xk8Z0
oKvd/tzULZOd3SA1yn+3GJXcCcUDzcJt/WTZ2m/cyjZs5LkBELC7Jj4mNsuxigL0
yK2vHSgy2HuaVNI5TQ9hQZW9s/f1qMTdpkOoszdshV6In2WGD9kVEaZcVpQgqqeU
7i0Td7a8WFx/oCG7Esg4h6TTCQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:26 2026 by rpki-client