Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft
File:                     8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json)
Hash identifier:          EsL3hw+xFFEnThD0E+Ep/CTS2OAorzXib7R5jE5jTfU=
Subject key identifier:   AB:43:E4:41:9D:83:B8:BA:26:2B:BE:48:CB:CC:4F:BD:75:43:FB:EA
Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89
Certificate issuer:       /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89
Certificate serial:       0530
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft
Manifest number:          052D
Signing time:             Thu 26 Mar 2026 23:18:11 +0000
Manifest this update:     Thu 26 Mar 2026 23:18:11 +0000
Manifest next update:     Thu 02 Apr 2026 23:18:11 +0000
Files and hashes:         1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: yuQOwwvbDKGIrLn3zJ62oG+eUwTlnOHfOgWOQG5TQ/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl
                          rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328 (0x530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89
        Validity
            Not Before: Mar 26 23:18:11 2026 GMT
            Not After : Apr  2 23:18:11 2026 GMT
        Subject: CN=69c5beb3-64d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:7e:2d:a9:d8:39:f5:d6:e4:e2:24:7f:b0:
                    37:e1:88:c9:e0:b8:ab:3f:04:e6:8e:bf:f5:ba:57:
                    e5:bb:30:57:49:57:6f:2a:c1:f9:d6:8a:3a:7f:4d:
                    0d:b0:13:a5:f2:83:82:55:9c:69:42:a1:2d:11:b9:
                    f1:1b:f3:11:79:94:e6:0b:15:c8:06:3b:81:1a:df:
                    89:f5:be:f6:bb:74:8e:ba:94:95:86:e7:ee:57:12:
                    48:5d:36:60:0d:14:75:d7:43:0e:29:d5:17:ff:28:
                    aa:67:4d:0f:d8:1c:5e:b8:ad:bf:d0:ae:65:bb:93:
                    74:ff:c9:df:ee:6e:98:02:1a:19:51:85:1a:58:00:
                    24:19:7b:8b:fc:09:9e:f3:80:ed:f1:85:70:fd:20:
                    2b:50:df:1d:6f:39:00:a0:5f:16:be:ae:ff:b1:88:
                    ec:c5:c1:6b:a7:40:e8:da:82:f3:c7:cd:76:1a:3c:
                    40:b1:57:6d:43:3a:a6:85:0f:ec:55:07:46:5a:eb:
                    a1:b2:cd:9c:ff:dd:58:f9:c1:a5:c4:0d:8b:ca:7c:
                    ad:4d:9b:c0:e2:45:4c:4a:b7:bd:41:b6:c3:b9:99:
                    02:a6:5d:94:95:1f:88:41:64:b8:38:06:9c:0d:b0:
                    18:97:74:62:e7:e2:b7:12:98:d1:06:59:c8:c3:2b:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:43:E4:41:9D:83:B8:BA:26:2B:BE:48:CB:CC:4F:BD:75:43:FB:EA
            X509v3 Authority Key Identifier:
                keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4f:a5:82:00:88:b0:1e:8d:d7:05:7f:81:c2:3e:b3:57:cf:
         7f:34:38:08:18:83:67:28:a7:60:d7:85:5b:17:3c:b8:21:1b:
         6a:ca:14:df:c0:45:28:e8:af:97:2f:f4:e0:42:1f:23:84:a6:
         c0:52:b0:6e:3f:f2:f0:09:1f:6d:82:5c:fb:6c:27:03:8c:fa:
         cb:46:a5:59:8d:30:73:96:6c:1b:d4:f9:f6:cf:36:de:59:25:
         f2:a8:67:ac:ec:42:7b:bd:3b:a7:8a:94:7d:41:b0:c1:63:30:
         35:af:91:cf:2e:ed:7a:9b:47:8a:8e:93:d6:59:a6:38:3a:e4:
         f8:83:68:9a:71:e5:55:e5:e2:5f:3a:8f:f0:e2:de:a0:52:95:
         63:02:f0:3b:73:c9:43:0a:4b:4d:21:46:5d:db:d2:2f:1e:cb:
         5d:91:98:72:00:33:c2:5d:0e:92:33:66:da:6c:cf:8a:fd:f4:
         e7:3f:50:eb:4a:89:7e:69:b0:c6:b3:a7:06:77:69:bc:67:54:
         4e:21:1e:57:75:bd:19:c6:3b:2c:af:c3:3a:55:4f:44:48:3f:
         52:13:83:8a:88:57:cb:57:fc:7b:b7:57:9e:20:4a:94:05:1a:
         91:97:cf:2a:8b:e6:cd:06:d5:0a:fe:9a:74:59:1a:7f:d7:72:
         21:ad:e2:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw
Rjk2MTNGODkwHhcNMjYwMzI2MjMxODExWhcNMjYwNDAyMjMxODExWjAYMRYwFAYD
VQQDEw02OWM1YmViMy02NGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv5p+LanYOfXW5OIkf7A34YjJ4LirPwTmjr/1ulfluzBXSVdvKsH51oo6f00N
sBOl8oOCVZxpQqEtEbnxG/MReZTmCxXIBjuBGt+J9b72u3SOupSVhufuVxJIXTZg
DRR110MOKdUX/yiqZ00P2BxeuK2/0K5lu5N0/8nf7m6YAhoZUYUaWAAkGXuL/Ame
84Dt8YVw/SArUN8dbzkAoF8Wvq7/sYjsxcFrp0Do2oLzx812GjxAsVdtQzqmhQ/s
VQdGWuuhss2c/91Y+cGlxA2LynytTZvA4kVMSre9QbbDuZkCpl2UlR+IQWS4OAac
DbAYl3Ri5+K3EpjRBlnIwyu9sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKtD5EGd
g7i6Jiu+SMvMT711Q/vqMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3
QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2
M3ByNXR0QlB0SklQbGhQNGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQE+lggCIsB6N1wV/gcI+s1fPfzQ4CBiDZyinYNeFWxc8uCEbasoU38BFKOiv
ly/04EIfI4SmwFKwbj/y8AkfbYJc+2wnA4z6y0alWY0wc5ZsG9T59s823lkl8qhn
rOxCe707p4qUfUGwwWMwNa+Rzy7teptHio6T1lmmODrk+INomnHlVeXiXzqP8OLe
oFKVYwLwO3PJQwpLTSFGXdvSLx7LXZGYcgAzwl0OkjNm2mzPiv305z9Q60qJfmmw
xrOnBndpvGdUTiEeV3W9GcY7LK/DOlVPREg/UhODiohXy1f8e7dXniBKlAUakZfP
KovmzQbVCv6adFkaf9dyIa3iIg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:10:31 2026 by rpki-client