Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
File:                     AGzRlAGFL6t1v25TlZr665WsJfI.mft (raw, json)
Hash identifier:          IR2r6Yl9rFJl0AO1ES18CJeJWfIDFND4g2ifoRKMDNY=
Subject key identifier:   64:80:C2:F0:66:81:08:0D:00:33:6F:B2:B6:79:21:F7:E7:86:D5:A5
Authority key identifier: 00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2
Certificate issuer:       /CN=A919CE1D/serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
Manifest number:          82
Signing time:             Wed 25 Mar 2026 06:54:07 +0000
Manifest this update:     Wed 25 Mar 2026 06:54:06 +0000
Manifest next update:     Wed 01 Apr 2026 06:54:06 +0000
Files and hashes:         1: AGzRlAGFL6t1v25TlZr665WsJfI.crl (hash: Y4tSs6yYa06uNX2GXJqlTxmPrNT4lTtqCJNT71UGrDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl
                          rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CE1D, serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2
        Validity
            Not Before: Mar 25 06:54:06 2026 GMT
            Not After : Apr  1 06:54:06 2026 GMT
        Subject: CN=69c3868e-0a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:b8:37:47:b5:a8:46:b7:25:84:76:5d:a9:
                    e4:05:e8:f1:94:7e:1a:5f:c5:4e:2c:8e:a4:53:93:
                    e4:6b:56:4f:28:3c:a2:ee:d6:64:02:5e:d9:2f:48:
                    91:a7:1e:f3:4f:62:d0:8b:cd:bf:7f:7c:4b:ef:83:
                    62:31:b0:41:60:18:ba:ca:a0:9e:bd:e4:3f:f8:15:
                    5c:f5:75:42:7b:db:dd:a0:8f:ff:6f:a4:58:e8:c6:
                    de:ae:57:55:1b:66:d9:23:4c:db:f9:ba:46:95:ec:
                    58:44:63:91:01:c2:cd:43:b1:39:3f:05:26:15:7e:
                    de:43:7e:0b:ff:4d:59:10:fa:f5:15:99:26:d2:62:
                    b9:4b:13:e9:09:e0:7f:99:f9:cc:4d:93:8a:63:0e:
                    8b:09:55:3a:26:93:1b:33:14:84:eb:fd:f3:95:2c:
                    21:55:0a:d0:10:2f:04:55:5b:a2:5f:35:b5:df:63:
                    07:cd:e6:68:1d:63:81:a9:1f:77:37:4e:15:e9:aa:
                    90:e4:05:5a:97:85:9d:e8:c2:c0:c4:c7:5a:60:54:
                    19:e0:77:2a:62:fb:ba:19:12:fd:7b:99:8c:00:0a:
                    06:30:be:d4:69:cc:95:24:53:29:1d:00:da:51:a7:
                    27:a0:ad:3a:f7:08:99:c3:84:b5:6c:91:2b:7b:fe:
                    22:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:80:C2:F0:66:81:08:0D:00:33:6F:B2:B6:79:21:F7:E7:86:D5:A5
            X509v3 Authority Key Identifier:
                keyid:00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:52:da:5f:51:e5:47:f8:0a:38:2d:9b:ef:30:4e:a8:2e:76:
         de:1e:89:77:46:bc:fa:08:48:e3:5d:64:f7:d5:38:48:f3:4f:
         ea:05:62:fc:f9:b2:3b:f1:6d:05:41:93:d2:d2:27:d8:77:64:
         47:5e:91:ef:f5:28:ed:62:c0:33:f2:dc:61:f2:06:e0:51:ab:
         03:6f:4a:d8:dd:ab:d9:14:46:ec:97:56:2c:8e:d7:ec:ae:5d:
         79:25:97:5d:2b:12:01:26:4e:f8:b3:f9:fe:84:4a:5b:c0:84:
         78:c7:e3:d4:b9:a2:68:86:0c:de:6a:de:34:d7:e7:dc:81:8a:
         ff:6c:8b:97:ee:e4:44:d7:19:fd:6c:ae:c3:84:5a:45:81:be:
         14:76:eb:b4:27:73:51:b8:d7:7e:4c:ba:0e:ad:24:de:83:e8:
         7d:2f:84:86:25:60:00:fc:08:8e:6b:90:31:cb:8f:77:84:2a:
         7d:a4:fd:79:1e:11:91:ed:b8:3f:b4:3e:93:da:f4:79:ee:c8:
         45:3c:ef:72:1b:68:2a:0d:f3:7e:a5:04:ff:d5:6f:9f:f5:8a:
         62:0e:35:8d:1d:52:8c:60:64:81:ff:a8:48:aa:00:b1:71:ce:
         db:b4:6d:ff:69:42:1a:5a:79:ea:c2:67:e8:68:7e:ee:1e:7e:
         d5:3b:d6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:19:15 2026 by rpki-client