Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
File:                     446z9aUQfjDwynHd6nWxcNCwMlY.mft (raw, json)
Hash identifier:          gk8L72rvC3mVGHCO03q2CnaNrN7lHN80hDFShqKY534=
Subject key identifier:   71:23:7B:93:98:13:22:23:65:71:40:D1:27:10:A7:4C:05:08:5F:08
Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56
Certificate issuer:       /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
Manifest number:          0167
Signing time:             Wed 25 Mar 2026 04:18:06 +0000
Manifest this update:     Wed 25 Mar 2026 04:18:05 +0000
Manifest next update:     Wed 01 Apr 2026 04:18:05 +0000
Files and hashes:         1: 446z9aUQfjDwynHd6nWxcNCwMlY.crl (hash: A43DjgZ0+CWUN7dHNHuwFLV44BTFoBVzTkWMEvoCajc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
        Validity
            Not Before: Mar 25 04:18:05 2026 GMT
            Not After : Apr  1 04:18:05 2026 GMT
        Subject: CN=69c361fe-8531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:5f:04:8c:f5:1c:b1:71:0f:30:4d:43:e9:
                    28:47:ae:2c:fc:2b:9c:81:55:88:5c:fe:7c:25:cb:
                    c5:b4:38:3a:9f:e3:c4:52:9f:78:46:02:ce:2d:dd:
                    9f:ab:08:31:b3:56:37:01:0d:b2:1c:8e:05:3a:9e:
                    c2:85:19:64:7e:b9:3e:e1:60:14:cc:71:31:99:5f:
                    63:bf:bc:4c:81:80:96:99:5b:ae:c0:0f:09:65:21:
                    41:5c:fc:cd:84:48:e8:2f:a5:f7:4c:27:f0:2b:7f:
                    2a:e2:2f:9d:8a:da:80:f6:b1:65:c0:28:ad:72:97:
                    f7:44:f8:51:37:3c:2e:61:d5:46:ce:c5:0e:8c:da:
                    4b:85:62:80:8d:b7:8c:b4:39:2c:63:1f:27:85:3b:
                    9c:c8:15:a1:e5:ff:21:ef:e8:12:cf:58:09:7f:60:
                    eb:20:7a:60:91:00:2d:00:61:73:ef:b4:29:df:ad:
                    01:ac:63:f5:b3:46:91:3a:c6:a0:e9:f8:3f:96:86:
                    90:35:bc:10:6c:d0:4c:f0:4c:02:bd:98:1d:e9:15:
                    5a:d4:30:98:32:b2:e5:66:e1:23:35:c7:7e:6f:de:
                    d3:c7:8d:d9:ed:e4:21:d4:4d:2a:f0:7a:20:b9:4f:
                    cb:45:5b:13:2e:a5:b5:3b:c3:61:f2:ba:a1:4a:d7:
                    05:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:23:7B:93:98:13:22:23:65:71:40:D1:27:10:A7:4C:05:08:5F:08
            X509v3 Authority Key Identifier:
                keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:17:f1:45:f5:1d:df:d8:5c:fb:18:42:be:4d:4f:2e:cb:26:
         51:4b:1e:c2:2c:be:00:dc:57:ef:63:e4:7c:d7:d1:33:32:ee:
         b6:67:79:7c:46:48:4e:0e:20:99:40:d3:41:fa:c0:a6:6f:bc:
         87:70:d4:81:0a:10:ba:6e:97:2d:d0:0a:c7:02:37:9b:b6:2c:
         b1:ea:b3:8f:1a:22:26:c8:c5:b7:e0:af:74:9b:0b:27:df:fd:
         76:5c:2f:6c:a1:44:4b:15:02:d4:64:0c:a8:57:e6:df:ba:ab:
         4d:4a:aa:24:3b:09:7a:9e:84:50:6c:ef:e4:6e:b3:d6:15:ea:
         5c:f7:e0:62:11:b2:34:95:a4:3a:37:30:dd:a4:ae:d3:e6:80:
         44:c7:6b:ec:34:1f:3c:63:68:9c:1d:05:40:c8:51:8a:c1:7e:
         61:45:1e:19:2d:a1:77:b3:74:db:62:80:f4:25:9e:d9:20:a0:
         1e:d0:2e:0b:97:c8:52:64:c8:13:9b:a1:40:65:5b:08:bd:8f:
         a9:5f:5f:bd:8f:6b:33:b6:39:e5:c2:fa:80:89:86:a6:8c:38:
         ea:e0:02:ae:53:93:df:85:a1:a0:81:15:86:11:95:f1:20:fd:
         2c:ee:d3:5d:b9:cf:2c:5e:97:1c:da:e9:18:02:55:9f:bd:cc:
         ae:ed:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:02:18 2026 by rpki-client