Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
File:                     1ex0z8jA_QV81Og74-tX8GHcWPg.mft (raw, json)
Hash identifier:          At4N8coDfIX5EZ/fKVEOI3bOYKA/yAmH1lC1NZnG0CU=
Subject key identifier:   C6:6F:0E:06:4A:53:9B:2E:E8:0C:55:B0:41:FB:BA:88:F8:2A:03:96
Authority key identifier: D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8
Certificate issuer:       /CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
Manifest number:          013B
Signing time:             Wed 25 Mar 2026 04:37:03 +0000
Manifest this update:     Wed 25 Mar 2026 04:37:02 +0000
Manifest next update:     Wed 01 Apr 2026 04:37:02 +0000
Files and hashes:         1: 1ex0z8jA_QV81Og74-tX8GHcWPg.crl (hash: IiiyyKR77YaTX3t2ozJbK7EME99XSmWYEVfx4S17btA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl
                          rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D313B, serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8
        Validity
            Not Before: Mar 25 04:37:02 2026 GMT
            Not After : Apr  1 04:37:02 2026 GMT
        Subject: CN=69c3666f-f3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:83:ee:36:64:82:a6:5b:2b:6e:54:fc:58:
                    ef:f4:81:50:6d:c6:79:94:40:f2:10:12:46:86:35:
                    ef:f5:c1:e4:3e:4d:e1:b9:40:5a:e2:18:25:0a:de:
                    f3:ab:9d:6a:1e:24:38:d6:d0:89:9d:4f:d7:b1:9d:
                    4f:95:51:e5:08:82:a6:79:fe:80:b9:6a:ef:1c:e0:
                    7d:a2:2d:fe:73:f3:e3:ed:06:a0:de:af:6e:cf:30:
                    d5:d2:0b:32:b1:cf:d3:df:38:97:40:64:c5:84:31:
                    0d:df:9f:92:21:3a:4f:1d:30:4c:b1:9e:a2:33:8c:
                    c8:63:45:82:74:ae:64:cf:4b:dd:3e:da:e8:22:db:
                    3e:08:c2:4d:f6:86:79:3e:5e:1a:28:ec:97:41:0d:
                    fe:61:3f:f2:8b:1f:0b:1e:b8:5d:2a:cc:24:fe:69:
                    84:64:d0:57:ba:6e:b9:38:4e:b9:04:16:b6:0d:00:
                    6b:2c:b9:ed:09:d4:15:65:fc:74:c5:bc:b5:45:90:
                    61:5c:1f:13:7f:24:58:c4:d1:0c:d7:34:7c:b9:8e:
                    15:67:1c:60:5d:81:8f:94:81:52:1a:33:53:92:4a:
                    44:93:84:6e:74:88:20:80:6e:78:28:e4:c8:1a:b3:
                    cf:98:3c:e7:b2:11:a4:54:bc:7a:7e:86:67:28:17:
                    b4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6F:0E:06:4A:53:9B:2E:E8:0C:55:B0:41:FB:BA:88:F8:2A:03:96
            X509v3 Authority Key Identifier:
                keyid:D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b4:4b:bd:67:c0:56:17:97:34:8a:88:9e:f3:d1:28:f3:d5:
         39:92:ac:1f:33:91:ac:d0:49:22:8b:fb:ff:c4:3b:10:6b:f8:
         8a:2c:ed:65:d0:42:8a:e9:46:b5:7f:3d:50:a3:38:8c:6c:41:
         99:ab:45:9c:a7:39:9f:fe:c2:7b:c0:99:ff:b8:52:4c:d7:0a:
         3e:85:57:9d:5e:c8:e1:3d:2b:0f:8d:85:73:eb:53:73:b0:05:
         12:7f:72:03:f0:df:fc:f9:fa:d9:c3:a4:ce:0c:f6:87:c5:fa:
         2a:4d:93:73:5e:dc:ff:a1:6e:35:b0:9f:49:10:50:f4:7c:39:
         b4:f5:ca:a4:e0:f5:7e:37:af:3f:3f:ab:34:b4:3c:b8:99:b7:
         cd:d0:b7:6b:39:86:b2:5f:14:18:ad:7f:5c:29:d4:6c:02:68:
         b2:4c:f9:d2:42:e3:03:c1:b9:4b:69:8b:4a:6c:c0:b9:23:38:
         81:26:0d:a7:d1:07:61:87:09:94:07:27:d2:6f:3b:09:92:b8:
         8a:73:ac:3d:22:ca:69:7b:f2:20:80:b8:10:49:0f:bf:4b:47:
         c9:5e:13:85:9e:32:1f:b6:14:cf:31:97:56:28:53:e8:08:b9:
         f2:58:67:f9:7f:9a:41:66:d0:d2:68:75:ae:f7:a3:cc:dc:da:
         53:8b:cf:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDMxM0IxMTAvBgNVBAUTKEQ1RUM3NENGQzhDMEZEMDU3Q0Q0RTgzQkUzRUI1N0Yw
NjFEQzU4RjgwHhcNMjYwMzI1MDQzNzAyWhcNMjYwNDAxMDQzNzAyWjAYMRYwFAYD
VQQDEw02OWMzNjY2Zi1mM2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApfKD7jZkgqZbK25U/Fjv9IFQbcZ5lEDyEBJGhjXv9cHkPk3huUBa4hglCt7z
q51qHiQ41tCJnU/XsZ1PlVHlCIKmef6AuWrvHOB9oi3+c/Pj7Qag3q9uzzDV0gsy
sc/T3ziXQGTFhDEN35+SITpPHTBMsZ6iM4zIY0WCdK5kz0vdPtroIts+CMJN9oZ5
Pl4aKOyXQQ3+YT/yix8LHrhdKswk/mmEZNBXum65OE65BBa2DQBrLLntCdQVZfx0
xby1RZBhXB8TfyRYxNEM1zR8uY4VZxxgXYGPlIFSGjNTkkpEk4RudIgggG54KOTI
GrPPmDznshGkVLx6foZnKBe0WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMZvDgZK
U5su6AxVsEH7uoj4KgOWMB8GA1UdIwQYMBaAFNXsdM/IwP0FfNToO+PrV/Bh3Fj4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9ENUJGRUMxNDQ3
REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9RVjgxT2c3NC10WDhHSGNX
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFleDB6OGpBX1FWODFPZzc0LXRYOEdIY1dQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzEzQi9ENUJGRUMxNDQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9R
VjgxT2c3NC10WDhHSGNXUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK7RLvWfAVheXNIqInvPRKPPVOZKsHzORrNBJIov7/8Q7EGv4iiztZdBCiulG
tX89UKM4jGxBmatFnKc5n/7Ce8CZ/7hSTNcKPoVXnV7I4T0rD42Fc+tTc7AFEn9y
A/Df/Pn62cOkzgz2h8X6Kk2Tc17c/6FuNbCfSRBQ9Hw5tPXKpOD1fjevPz+rNLQ8
uJm3zdC3azmGsl8UGK1/XCnUbAJoskz50kLjA8G5S2mLSmzAuSM4gSYNp9EHYYcJ
lAcn0m87CZK4inOsPSLKaXvyIIC4EEkPv0tHyV4ThZ4yH7YUzzGXVihT6Ai58lhn
+X+aQWbQ0mh1rvejzNzaU4vPNQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:59 2026 by rpki-client