Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
File:                     0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft (raw, json)
Hash identifier:          AHicEjtX8SNLfcxeAZObEmQZglRFpxTMmU0UMSNKP/c=
Subject key identifier:   B2:76:2F:96:C5:6B:DE:88:C3:F6:5B:21:9C:1C:30:05:5C:11:EC:0F
Authority key identifier: D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29
Certificate issuer:       /CN=A91C9019/serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929
Certificate serial:       02AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
Manifest number:          02AB
Signing time:             Wed 25 Mar 2026 01:06:06 +0000
Manifest this update:     Wed 25 Mar 2026 01:06:06 +0000
Manifest next update:     Wed 01 Apr 2026 01:06:06 +0000
Files and hashes:         1: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl (hash: PauFPmrU/MjkxN51AlNpI+j3Iz4V7tcp4r6mSFWjSEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl
                          rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9019, serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929
        Validity
            Not Before: Mar 25 01:06:06 2026 GMT
            Not After : Apr  1 01:06:06 2026 GMT
        Subject: CN=69c334fe-f1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:9a:23:30:f2:0a:1b:e1:3a:4f:31:f0:10:
                    38:a7:06:18:02:e3:26:cf:6f:59:c4:ec:69:2a:0e:
                    92:eb:09:4e:3d:9a:cf:90:b1:8d:b9:45:ca:ce:d4:
                    76:1b:68:0c:01:2e:14:7e:1f:2f:83:30:40:1d:04:
                    5f:72:42:34:6a:ec:b9:85:30:6e:9e:d1:73:20:20:
                    fe:09:c0:2a:21:08:b0:0c:09:33:fc:ab:a4:1e:3e:
                    e8:90:1e:01:a8:24:d4:d1:a4:2c:3a:13:92:bf:55:
                    3c:d7:29:49:74:29:5c:b7:a3:ac:0c:fa:af:9c:2b:
                    21:f1:dc:b7:2a:38:a3:85:25:0d:0a:21:9b:91:f0:
                    c9:68:ec:ca:15:07:23:5d:8c:61:a2:80:68:a9:b1:
                    7d:a4:6a:e3:57:76:45:1d:ee:91:0c:cd:f9:fb:3c:
                    20:54:2d:74:85:0d:09:a7:c1:a8:0d:9c:6e:10:bd:
                    8c:0a:b6:e3:55:7f:bc:98:90:39:ba:36:1e:e6:86:
                    b3:d0:24:ce:7d:45:74:c7:41:a7:22:26:ef:ff:b1:
                    37:41:ae:53:f5:63:82:e3:d8:46:0e:c3:be:86:4e:
                    ae:af:0f:79:95:92:d0:2b:cd:ef:19:6e:79:22:21:
                    ca:7e:68:a9:dc:c7:0a:a6:87:03:0d:5f:ad:e4:c7:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:76:2F:96:C5:6B:DE:88:C3:F6:5B:21:9C:1C:30:05:5C:11:EC:0F
            X509v3 Authority Key Identifier:
                keyid:D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:0e:09:5e:0c:ba:a7:02:17:ca:da:17:76:2e:05:94:33:95:
         13:f7:9a:27:b2:ee:6b:27:fd:85:c2:ad:0c:3b:4a:11:69:0e:
         ff:8b:ed:f6:e6:13:aa:d3:76:be:a3:14:09:fb:33:f8:3e:a0:
         8b:4e:10:3d:0e:58:2a:20:71:00:ff:f9:08:9f:99:99:eb:7d:
         07:8c:5e:a9:d2:a8:1b:21:70:6f:b3:d4:dc:ae:a1:7e:f3:52:
         0d:c7:09:48:a6:36:c9:e9:d0:e6:be:89:74:c8:99:03:89:21:
         f2:4d:f4:4f:fd:87:8f:f4:38:31:09:8a:cb:8f:e0:3d:e8:8c:
         a5:54:08:07:02:79:76:40:2d:58:fb:06:fb:cc:4d:86:51:ec:
         8b:c9:ed:2f:72:b5:d6:43:c9:9d:68:a8:ce:fe:c3:49:e7:e5:
         f4:c2:c8:ef:d2:e7:eb:47:bb:60:eb:5f:04:07:3a:bc:83:4d:
         52:f1:b4:71:40:ce:6d:de:d6:c4:1b:43:ba:d4:42:8d:fe:9b:
         45:7c:9f:af:87:17:14:ef:64:22:f3:e8:f7:61:a9:f8:06:45:
         f2:bd:a2:88:ca:97:b2:18:95:e2:7c:68:85:5f:5d:b0:cb:a9:
         57:e6:73:8a:9a:fb:80:fd:18:91:d9:1c:3e:68:ba:4b:5e:8a:
         8f:f2:47:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkwMTkxMTAvBgNVBAUTKEQwMDJBQkVBQTVCMkNEQzQ4RkVBMDk4M0IwNEE4RUMy
ODYwQ0Y5MjkwHhcNMjYwMzI1MDEwNjA2WhcNMjYwNDAxMDEwNjA2WjAYMRYwFAYD
VQQDEw02OWMzMzRmZS1mMWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1liaIzDyChvhOk8x8BA4pwYYAuMmz29ZxOxpKg6S6wlOPZrPkLGNuUXKztR2
G2gMAS4Ufh8vgzBAHQRfckI0auy5hTBuntFzICD+CcAqIQiwDAkz/KukHj7okB4B
qCTU0aQsOhOSv1U81ylJdClct6OsDPqvnCsh8dy3KjijhSUNCiGbkfDJaOzKFQcj
XYxhooBoqbF9pGrjV3ZFHe6RDM35+zwgVC10hQ0Jp8GoDZxuEL2MCrbjVX+8mJA5
ujYe5oaz0CTOfUV0x0GnIibv/7E3Qa5T9WOC49hGDsO+hk6urw95lZLQK83vGW55
IiHKfmip3McKpocDDV+t5MeNWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJ2L5bF
a96Iw/ZbIZwcMAVcEewPMB8GA1UdIwQYMBaAFNACq+qlss3Ej+oJg7BKjsKGDPkp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAxOS8yOEFFNDNEODM0
NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpjU1A2Z21Ec0VxT3dvWU0t
U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBBS3I2cVd5emNTUDZnbURzRXFPd29ZTS1Tay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTAxOS8yOEFFNDNEODM0NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpj
U1A2Z21Ec0VxT3dvWU0tU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzA4JXgy6pwIXytoXdi4FlDOVE/eaJ7Luayf9hcKtDDtKEWkO/4vt9uYTqtN2
vqMUCfsz+D6gi04QPQ5YKiBxAP/5CJ+Zmet9B4xeqdKoGyFwb7PU3K6hfvNSDccJ
SKY2yenQ5r6JdMiZA4kh8k30T/2Hj/Q4MQmKy4/gPeiMpVQIBwJ5dkAtWPsG+8xN
hlHsi8ntL3K11kPJnWiozv7DSefl9MLI79Ln60e7YOtfBAc6vINNUvG0cUDObd7W
xBtDutRCjf6bRXyfr4cXFO9kIvPo92Gp+AZF8r2iiMqXshiV4nxohV9dsMupV+Zz
ipr7gP0YkdkcPmi6S16Kj/JH0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:51 2026 by rpki-client