Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
File:                     -nL57HMUa01gWMiKYGr6AzMOA1E.mft (raw, json)
Hash identifier:          tlO8kJ0b+SSNIS0po1BcognYz2BPv24HrlyOxCuip+8=
Subject key identifier:   FD:28:C5:4F:14:60:AC:46:25:31:E9:6A:4A:99:51:55:91:2A:43:2B
Authority key identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51
Certificate issuer:       /CN=A91B2D56/serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
Manifest number:          42
Signing time:             Wed 25 Mar 2026 07:33:56 +0000
Manifest this update:     Wed 25 Mar 2026 07:33:55 +0000
Manifest next update:     Wed 01 Apr 2026 07:33:55 +0000
Files and hashes:         1: -nL57HMUa01gWMiKYGr6AzMOA1E.crl (hash: nT0BJdZUPv2bJ03y0Pq9ujpXmpWFz2vY2O055JtOqkg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D56, serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
        Validity
            Not Before: Mar 25 07:33:55 2026 GMT
            Not After : Apr  1 07:33:55 2026 GMT
        Subject: CN=69c38fe4-20f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:7e:90:75:78:b8:c0:ad:5a:7f:44:bd:e1:
                    e6:c9:8b:65:f9:8a:b9:6d:86:8d:f7:34:42:8d:bf:
                    b5:9c:79:27:50:2c:07:cc:c4:4f:bc:07:3a:1f:12:
                    bd:84:82:73:99:41:a6:b1:2a:6f:d2:a2:87:d8:c4:
                    72:2d:a4:54:75:00:f7:51:50:ce:71:a6:f2:d6:7a:
                    b4:d5:25:9f:14:35:13:f5:66:28:f1:4c:45:74:fd:
                    12:25:fe:4e:5b:75:45:25:79:cc:88:63:1b:00:02:
                    0e:49:98:b4:49:d8:6e:8d:e7:e3:7d:e4:fa:5e:89:
                    39:3f:37:2e:c2:44:5a:26:97:84:d9:77:be:17:fa:
                    1e:1a:c5:ee:cf:99:3e:fe:2a:be:98:d6:ae:e4:8a:
                    45:31:90:da:61:6c:d1:d3:c6:53:17:e9:d8:c9:9f:
                    16:98:d0:8e:d4:b5:99:49:62:2c:f7:20:9f:b9:c7:
                    71:85:0e:61:ef:4a:e0:20:36:c7:99:ea:cd:aa:df:
                    85:0f:10:58:b9:aa:21:d5:1f:e8:06:69:4b:9c:8f:
                    cf:05:4e:eb:59:1e:a4:36:ee:7d:27:65:bf:c3:27:
                    88:7a:88:f6:39:76:9d:88:f3:e6:d9:05:98:54:95:
                    3b:bc:8f:7e:94:1e:a6:55:11:6e:69:b6:c7:eb:cb:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:28:C5:4F:14:60:AC:46:25:31:E9:6A:4A:99:51:55:91:2A:43:2B
            X509v3 Authority Key Identifier:
                keyid:FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c4:83:f8:07:8c:76:b3:89:6f:87:5b:a7:29:58:15:5d:f2:
         59:6f:90:4c:1a:0c:55:16:04:cc:c3:0a:99:43:1d:4c:c4:77:
         c1:f7:49:5d:69:90:85:72:b9:b5:a2:9b:71:a8:39:1e:1d:dc:
         e0:7b:6e:e9:18:6d:c5:6a:16:17:4b:97:78:46:56:b4:e8:06:
         76:98:8b:73:f6:e3:ac:68:72:ca:40:eb:c5:5a:d4:cb:f6:a4:
         b0:44:74:dc:26:98:7e:24:c8:4f:7a:78:2b:11:b1:c7:73:dc:
         62:87:25:1f:4e:1c:38:66:04:8b:5c:80:48:de:48:1d:f9:57:
         b7:31:24:39:10:a2:03:96:4c:0a:49:7e:14:ee:ff:4b:b5:09:
         06:44:06:23:ac:0d:03:f6:7d:05:eb:4b:1c:ab:72:24:d3:d8:
         8b:83:8b:20:b8:45:d6:28:fb:9c:2a:19:cc:52:ad:e6:72:9f:
         4a:ee:04:dc:24:51:1e:8c:18:d5:d3:4a:b5:e0:0e:be:94:1e:
         7b:eb:6e:88:38:1e:4e:7a:5e:82:c8:85:d5:2e:cf:07:c4:23:
         d1:55:5c:a4:b8:4d:8e:63:a5:50:8c:0f:ac:9c:2a:86:f9:8d:
         cf:24:96:ef:76:fc:ca:ae:ce:5e:74:e3:f9:9d:58:56:2e:91:
         d8:3f:a1:2f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MkQ1NjExMC8GA1UEBRMoRkE3MkY5RUM3MzE0NkI0RDYwNThDODhBNjA2QUZBMDMz
MzBFMDM1MTAeFw0yNjAzMjUwNzMzNTVaFw0yNjA0MDEwNzMzNTVaMBgxFjAUBgNV
BAMTDTY5YzM4ZmU0LTIwZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCy436QdXi4wK1af0S94ebJi2X5irltho33NEKNv7WceSdQLAfMxE+8BzofEr2E
gnOZQaaxKm/SoofYxHItpFR1APdRUM5xpvLWerTVJZ8UNRP1ZijxTEV0/RIl/k5b
dUUlecyIYxsAAg5JmLRJ2G6N5+N95PpeiTk/Ny7CRFoml4TZd74X+h4axe7PmT7+
Kr6Y1q7kikUxkNphbNHTxlMX6djJnxaY0I7UtZlJYiz3IJ+5x3GFDmHvSuAgNseZ
6s2q34UPEFi5qiHVH+gGaUucj88FTutZHqQ27n0nZb/DJ4h6iPY5dp2I8+bZBZhU
lTu8j36UHqZVEW5ptsfry99hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/SjFTxRg
rEYlMelqSplRVZEqQyswHwYDVR0jBBgwFoAU+nL57HMUa01gWMiKYGr6AzMOA1Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0Y2OTIzNjdBQzUy
MjExRjA5NUQxQjIxN0M0RjlBRTAyLy1uTDU3SE1VYTAxZ1dNaUtZR3I2QXpNT0Ex
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLW5MNTdITVVhMDFnV01pS1lHcjZBek1PQTFFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy
RDU2L0Y2OTIzNjdBQzUyMjExRjA5NUQxQjIxN0M0RjlBRTAyLy1uTDU3SE1VYTAx
Z1dNaUtZR3I2QXpNT0ExRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCIxIP4B4x2s4lvh1unKVgVXfJZb5BMGgxVFgTMwwqZQx1MxHfB90ldaZCFcrm1
optxqDkeHdzge27pGG3FahYXS5d4Rla06AZ2mItz9uOsaHLKQOvFWtTL9qSwRHTc
Jph+JMhPengrEbHHc9xihyUfThw4ZgSLXIBI3kgd+Ve3MSQ5EKIDlkwKSX4U7v9L
tQkGRAYjrA0D9n0F60scq3Ik09iLg4sguEXWKPucKhnMUq3mcp9K7gTcJFEejBjV
00q14A6+lB57626IOB5Oel6CyIXVLs8HxCPRVVykuE2OY6VQjA+snCqG+Y3PJJbv
dvzKrs5edOP5nVhWLpHYP6Ev
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:07 2026 by rpki-client