Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
File:                     RmieTZ937kzGyKiOZ57P7zdS9Dc.mft (raw, json)
Hash identifier:          /O/iP5gU2mOMsxEK3uF/i2OI9dfLqiSQP7NK4N6FTt0=
Subject key identifier:   93:40:2E:C5:A5:49:60:5B:9E:E1:11:BF:41:A4:01:3A:99:C6:B6:47
Authority key identifier: 46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37
Certificate issuer:       /CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
Certificate serial:       0CB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
Manifest number:          0CB1
Signing time:             Thu 26 Mar 2026 18:21:15 +0000
Manifest this update:     Thu 26 Mar 2026 18:21:14 +0000
Manifest next update:     Thu 02 Apr 2026 18:21:14 +0000
Files and hashes:         1: RmieTZ937kzGyKiOZ57P7zdS9Dc.crl (hash: qooY7Wy1AgcoIIuNyaJxk/0tDYbET4ALb/mAxDyV9aQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl
                          rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3250 (0xcb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC4F3, serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
        Validity
            Not Before: Mar 26 18:21:14 2026 GMT
            Not After : Apr  2 18:21:14 2026 GMT
        Subject: CN=69c5791a-f12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:7b:de:63:a5:ef:84:4c:c9:32:cc:50:ff:
                    1b:08:5b:bb:0b:fd:13:9d:8a:c3:2f:d9:82:39:4e:
                    3f:be:8b:52:c1:56:13:a3:6d:20:37:bb:7a:84:84:
                    51:a5:df:ef:8b:ad:35:a9:6d:ca:7e:4b:b8:35:50:
                    c5:d7:79:05:6a:29:e1:c4:29:7d:16:ac:ed:31:6e:
                    bb:47:42:b6:50:cf:ef:44:c3:a7:20:89:fc:b5:a9:
                    2f:6a:c2:fd:4d:18:85:14:f2:63:0c:a9:dd:d0:1e:
                    69:92:36:a9:90:7e:91:11:db:b5:43:ff:22:d0:fd:
                    a2:9c:85:00:74:43:5f:d5:df:7b:da:cf:19:0d:17:
                    8f:ad:0b:ea:af:5e:f4:f1:be:ad:7b:cd:5d:78:9d:
                    2a:be:b5:59:05:46:96:57:45:ef:2e:05:c5:ec:7a:
                    07:9f:35:00:d8:cd:df:c4:c1:8b:ad:94:45:f1:20:
                    c1:47:47:11:5a:c9:ae:2d:56:50:17:8b:87:8f:f0:
                    85:45:5e:53:87:1a:a7:1c:69:d2:b4:28:3d:25:92:
                    8c:50:61:72:3b:2a:f3:8d:b6:c6:e2:38:5e:3e:0d:
                    66:36:c9:2e:ed:d6:d8:5f:2d:f3:ef:21:1f:70:44:
                    b8:e7:8f:93:04:45:c3:88:ff:9d:60:0f:50:6a:aa:
                    3e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:40:2E:C5:A5:49:60:5B:9E:E1:11:BF:41:A4:01:3A:99:C6:B6:47
            X509v3 Authority Key Identifier:
                keyid:46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:af:79:b2:9b:3c:2c:6b:a9:f0:ad:7f:1f:28:0c:f8:86:1f:
         ed:53:ee:11:f6:f2:18:93:59:e5:e4:0a:2a:2e:ec:97:ea:98:
         4e:9b:a2:78:47:d5:e6:18:6f:d3:58:49:c5:a9:29:86:5f:e5:
         ac:95:d7:93:07:b1:b5:0a:2c:d6:6d:f8:b6:7e:a6:49:5e:64:
         ad:c6:ea:d1:98:8e:96:e3:ae:c3:03:1e:58:87:ce:52:03:6f:
         04:46:e2:c5:f8:65:a9:6d:4d:a9:38:98:8a:2b:e5:cc:58:ae:
         6c:2a:38:9d:27:cb:57:7c:1e:08:94:3e:4c:be:6d:99:f1:ac:
         2a:06:ba:80:e0:e2:4a:4d:51:f0:93:d2:11:09:80:55:0f:73:
         01:7b:c9:b6:0b:18:64:d2:ee:cf:80:8e:b9:95:37:29:9d:a2:
         67:b5:76:e2:1d:5d:b4:43:b0:e2:51:f0:97:0f:9b:77:24:91:
         9c:47:64:3b:27:e5:26:77:33:98:0b:a9:f7:e9:a7:32:b7:14:
         2f:0d:92:cc:a6:2a:8e:bc:61:b6:da:07:c3:33:4a:1b:25:00:
         65:7a:27:98:e3:b6:fb:fb:76:4e:da:72:80:78:b6:db:36:c1:
         c1:19:53:f3:fb:4a:05:79:bd:91:89:b2:2d:62:20:7a:9e:43:
         11:53:93:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUM0RjMxMTAvBgNVBAUTKDQ2Njg5RTREOUY3N0VFNENDNkM4QTg4RTY3OUVDRkVG
Mzc1MkY0MzcwHhcNMjYwMzI2MTgyMTE0WhcNMjYwNDAyMTgyMTE0WjAYMRYwFAYD
VQQDEw02OWM1NzkxYS1mMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyT973mOl74RMyTLMUP8bCFu7C/0TnYrDL9mCOU4/votSwVYTo20gN7t6hIRR
pd/vi601qW3Kfku4NVDF13kFainhxCl9FqztMW67R0K2UM/vRMOnIIn8takvasL9
TRiFFPJjDKnd0B5pkjapkH6REdu1Q/8i0P2inIUAdENf1d972s8ZDRePrQvqr170
8b6te81deJ0qvrVZBUaWV0XvLgXF7HoHnzUA2M3fxMGLrZRF8SDBR0cRWsmuLVZQ
F4uHj/CFRV5ThxqnHGnStCg9JZKMUGFyOyrzjbbG4jhePg1mNsku7dbYXy3z7yEf
cES454+TBEXDiP+dYA9Qaqo+FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNALsWl
SWBbnuERv0GkATqZxrZHMB8GA1UdIwQYMBaAFEZonk2fd+5Mxsiojmeez+83UvQ3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGMy9DRkM2RENCODBD
MDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdrekd5S2lPWjU3UDd6ZFM5
RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JtaWVUWjkzN2t6R3lLaU9aNTdQN3pkUzlEYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzRGMy9DRkM2RENCODBDMDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdr
ekd5S2lPWjU3UDd6ZFM5RGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANa95sps8LGup8K1/HygM+IYf7VPuEfbyGJNZ5eQKKi7sl+qYTpuieEfV5hhv
01hJxakphl/lrJXXkwextQos1m34tn6mSV5krcbq0ZiOluOuwwMeWIfOUgNvBEbi
xfhlqW1NqTiYiivlzFiubCo4nSfLV3weCJQ+TL5tmfGsKga6gODiSk1R8JPSEQmA
VQ9zAXvJtgsYZNLuz4COuZU3KZ2iZ7V24h1dtEOw4lHwlw+bdySRnEdkOyflJncz
mAup9+mnMrcULw2SzKYqjrxhttoHwzNKGyUAZXonmOO2+/t2TtpygHi22zbBwRlT
8/tKBXm9kYmyLWIgep5DEVOTVw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:23 2026 by rpki-client