Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
File:                     utY-wFoDGPl_MVby4gWcYZPOOAo.mft (raw, json)
Hash identifier:          +8MjHVVy3XBAlkqrsPJ/webEMfnLZdaDVO/nqBBIwbY=
Subject key identifier:   85:11:76:07:B0:F8:BD:18:A5:2F:D9:75:FE:FF:CC:13:17:D7:D0:0E
Authority key identifier: BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
Certificate issuer:       /CN=A91D5A49/serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Certificate serial:       027B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
Manifest number:          027B
Signing time:             Wed 25 Mar 2026 01:17:39 +0000
Manifest this update:     Wed 25 Mar 2026 01:17:39 +0000
Manifest next update:     Wed 01 Apr 2026 01:17:39 +0000
Files and hashes:         1: utY-wFoDGPl_MVby4gWcYZPOOAo.crl (hash: OmczSC1XhCcH0XNOrj1Su9hH3PVYMkb19Di718Eim6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
                          rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5A49, serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
        Validity
            Not Before: Mar 25 01:17:39 2026 GMT
            Not After : Apr  1 01:17:39 2026 GMT
        Subject: CN=69c337b3-3a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:70:0a:a2:87:a1:05:bd:e8:d1:81:eb:72:
                    1e:91:e1:b1:d4:2c:2a:7e:d5:1e:73:4e:64:41:8a:
                    30:ad:86:bf:ca:87:57:5c:12:67:12:80:06:a0:eb:
                    6e:73:46:da:8e:2e:6b:7f:12:91:67:91:71:ef:fa:
                    39:96:88:94:01:bd:d4:31:b1:95:12:e9:21:05:bc:
                    54:0d:c1:41:c6:13:b9:89:4d:2f:c0:39:87:d6:e1:
                    18:63:78:08:31:55:85:90:6b:b8:58:40:73:d1:33:
                    00:95:4b:c4:fa:03:2c:68:f5:bd:99:60:93:a1:2f:
                    b9:00:ae:c1:f7:12:7f:84:d2:44:fa:8b:08:89:1d:
                    89:29:f5:a4:dd:42:27:30:c0:4f:7f:46:66:e7:1a:
                    3b:44:1c:20:50:69:b0:2a:f5:b0:2d:60:5f:48:7e:
                    fa:e9:e9:71:f0:68:e6:f1:2f:26:10:e8:61:80:ec:
                    e7:0b:7c:96:94:09:8e:55:e3:17:72:61:a5:60:b8:
                    aa:ce:d1:88:7b:db:50:de:33:61:13:a9:9c:c1:0f:
                    40:38:bc:f2:ff:46:d8:21:69:f6:d4:c9:cf:7b:a7:
                    dd:fb:c9:8b:e2:d6:5f:7f:41:d3:a1:48:5f:64:fd:
                    48:db:bd:c9:68:45:7a:76:4f:6a:f1:b1:4f:5a:ff:
                    13:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:11:76:07:B0:F8:BD:18:A5:2F:D9:75:FE:FF:CC:13:17:D7:D0:0E
            X509v3 Authority Key Identifier:
                keyid:BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:6c:76:92:9c:a0:46:95:26:4c:49:18:08:62:7d:c9:45:96:
         41:f2:5f:5f:0a:24:f2:8f:a8:9e:13:4d:91:c9:b4:40:0f:9b:
         3b:41:79:4b:0b:fe:56:1c:47:51:21:32:4d:51:e9:1a:55:d5:
         00:de:ea:21:02:93:72:54:2e:bb:f0:37:61:7a:bb:06:d6:f3:
         27:a2:ad:d2:35:d0:b5:1f:54:57:95:0d:ba:3d:9b:fc:aa:e3:
         a1:81:07:c3:f2:1b:2e:95:0d:0e:d3:07:66:f0:0b:5a:5e:84:
         0e:c6:38:36:ff:af:dd:69:37:69:5d:2e:f3:7d:82:88:97:bd:
         16:05:48:6b:2c:c9:0a:16:44:0d:6c:82:95:1b:5b:27:8e:61:
         bc:4f:bf:49:9e:d3:3c:2e:a2:b8:9e:72:81:fc:15:23:4d:f4:
         68:f6:82:fc:e6:e8:c5:dc:8b:e0:cb:f5:a4:3a:ad:b7:cc:09:
         a8:2d:7e:ec:5a:b4:f0:60:3b:e3:a8:a0:a5:df:4f:90:d2:79:
         ea:79:ab:82:3c:bf:f6:e2:0a:30:e9:68:b2:cb:3e:dd:7d:0e:
         8b:d3:33:4d:da:50:d9:55:05:77:0f:24:bd:82:8c:c3:09:9e:
         c3:81:0c:5f:58:9f:fa:6e:2d:e6:07:85:5f:a4:ee:d2:b0:19:
         d4:62:d6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:56 2026 by rpki-client