Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
File:                     TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json)
Hash identifier:          vDX4bllKpM39D5WF++B43sN8UmpI6E4zFz40o0uwPV8=
Subject key identifier:   7B:1C:DC:CB:6D:81:ED:90:9E:41:94:DD:63:0C:A1:AC:32:06:F3:63
Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2
Certificate issuer:       /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
Manifest number:          BF
Signing time:             Fri 27 Mar 2026 06:32:30 +0000
Manifest this update:     Fri 27 Mar 2026 06:32:30 +0000
Manifest next update:     Fri 03 Apr 2026 06:32:30 +0000
Files and hashes:         1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: 2uQx2FGMuYHlW1+GCYCiCFHZsIjsEq+sPK4nnnun0e8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl
                          rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2
        Validity
            Not Before: Mar 27 06:32:30 2026 GMT
            Not After : Apr  3 06:32:30 2026 GMT
        Subject: CN=69c6247e-b8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:b4:83:7d:c6:23:5d:32:84:df:90:a9:63:
                    93:1b:db:84:48:9b:13:28:85:53:cd:26:75:78:d3:
                    c7:17:86:5f:d1:3b:fe:b6:d6:62:76:38:ff:02:f3:
                    a3:5e:3c:35:c6:d3:6a:4e:46:ad:b6:13:cc:1e:63:
                    37:ad:f8:97:b7:99:3e:69:0f:b1:07:ab:fa:72:69:
                    e1:df:27:cb:66:3e:5d:64:57:f6:76:8f:14:93:d4:
                    b0:f0:79:8f:89:86:4a:f1:b6:ea:77:1b:cc:8e:43:
                    ce:47:16:02:78:ed:94:87:d1:c3:d0:07:92:b2:bb:
                    84:bf:cd:b8:a4:4c:86:31:d4:08:1f:e6:d9:01:d7:
                    6d:f7:a4:97:7f:c0:0b:ab:ef:43:ba:81:9c:22:2e:
                    4f:12:50:c6:cf:28:24:93:58:ab:58:d7:89:73:31:
                    33:5f:64:d4:31:9b:52:c8:4d:27:bd:9c:63:c7:44:
                    02:bd:0c:c0:f1:db:a7:46:80:1e:9a:4b:69:32:a8:
                    b6:68:b9:78:06:b2:46:7f:92:b6:ca:d3:89:ca:7a:
                    1b:eb:0e:c8:99:fa:29:cf:da:48:a3:d7:fc:c2:d2:
                    8a:46:a9:bc:bc:f1:35:b7:39:45:e7:f2:a8:c7:d4:
                    0e:05:2c:8b:58:06:14:76:0b:86:d9:cf:39:75:5d:
                    85:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1C:DC:CB:6D:81:ED:90:9E:41:94:DD:63:0C:A1:AC:32:06:F3:63
            X509v3 Authority Key Identifier:
                keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:f5:a4:57:9c:1b:b1:5a:94:21:6c:ea:e9:06:e3:2e:07:55:
         81:f7:22:93:74:4b:53:49:55:51:b1:40:ac:54:94:36:4a:1e:
         0d:31:c5:4b:b4:74:ca:6f:33:b5:97:9f:8e:59:90:56:e9:f3:
         6e:70:6a:77:b3:a1:30:38:64:90:4f:57:2e:f5:2a:75:8f:32:
         53:cd:0d:35:af:4b:e4:7c:b6:ea:1f:86:26:ed:e1:39:ea:e2:
         68:09:96:0e:ac:b7:e3:45:e9:9f:53:01:02:77:1c:d9:f8:36:
         e9:de:da:35:e4:ee:50:e2:0d:db:da:05:a9:74:11:3d:60:90:
         60:a9:8f:f1:fe:ea:7c:f2:44:df:88:72:94:10:ed:54:2d:87:
         1d:87:79:7f:bf:1d:51:f4:bb:6f:19:06:72:32:05:86:a8:fc:
         31:9e:4a:51:11:28:21:c7:30:63:a5:ed:58:dd:19:6d:30:44:
         dd:b2:ea:c6:cd:02:de:92:03:8f:9e:e2:0a:e0:dd:86:37:6a:
         e3:b0:d7:e8:cc:83:c0:44:8c:e9:b3:e7:b2:f1:05:d9:62:ae:
         f8:db:f3:c7:32:ae:5b:a1:99:31:66:e5:01:27:cf:b2:55:0f:
         89:22:25:59:67:24:73:74:b0:f2:24:a3:8f:ec:73:c6:93:5f:
         4b:8b:84:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:08 2026 by rpki-client