Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
File:                     foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json)
Hash identifier:          akm1gtARMhAlqrM6k81T6r5GQ4c3t5mz/Xh8IzgBi5Q=
Subject key identifier:   BD:27:41:0F:38:B2:64:72:BF:3B:71:CE:30:10:0C:BF:97:20:0F:03
Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09
Certificate issuer:       /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
Certificate serial:       3578
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
Manifest number:          48DF
Signing time:             Tue 24 Mar 2026 14:20:55 +0000
Manifest this update:     Tue 24 Mar 2026 14:20:54 +0000
Manifest next update:     Tue 31 Mar 2026 14:20:54 +0000
Files and hashes:         1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: 0YzOtwyG4Qeo91vp9u1exCSedhAN1oMdSLLR20HgAos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13688 (0x3578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
        Validity
            Not Before: Mar 24 14:20:54 2026 GMT
            Not After : Mar 31 14:20:54 2026 GMT
        Subject: CN=69c29dc6-fc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:a8:c2:53:30:03:99:a4:4d:ed:11:d2:2f:
                    10:c6:7b:85:aa:42:36:49:43:86:99:98:60:46:80:
                    e0:5b:56:05:23:88:ea:ff:5f:74:7a:61:45:88:1a:
                    ef:21:4a:85:54:b1:33:5c:d0:63:fb:d4:0e:27:72:
                    74:a7:d9:be:cc:7a:00:68:f0:e8:b7:b3:48:ac:0d:
                    e2:e9:52:39:a5:3a:6f:4c:d8:00:e6:25:79:3c:64:
                    ab:27:b7:27:99:1b:0a:ff:e1:79:2b:44:4e:99:b7:
                    cd:74:f8:6d:7e:7c:ac:55:6b:9a:5e:dc:4a:b2:00:
                    58:1e:6a:9d:23:e4:f4:6a:24:f7:4a:68:4b:1f:3e:
                    04:91:4e:1f:8f:31:94:49:f3:3e:31:ad:d3:45:25:
                    71:63:d7:a4:d3:be:c1:1f:30:81:73:34:32:e8:84:
                    0e:74:f9:c0:42:15:ba:62:90:1b:83:8b:1f:bb:a5:
                    c6:c2:d9:cd:36:00:b6:87:ca:94:41:e9:4d:08:b3:
                    73:17:18:f9:76:2b:13:0c:14:18:5e:61:1a:b2:eb:
                    dd:17:30:a1:d4:65:7d:32:88:72:81:17:24:1a:14:
                    93:ee:e0:72:d9:75:c6:8b:02:ba:97:47:3e:ed:c6:
                    40:6d:6e:a0:22:c8:ca:a5:0b:2d:9a:5b:5b:73:be:
                    cc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:27:41:0F:38:B2:64:72:BF:3B:71:CE:30:10:0C:BF:97:20:0F:03
            X509v3 Authority Key Identifier:
                keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:26:55:2b:d6:03:f7:67:8c:79:9a:59:9f:4c:e0:1d:6a:6b:
         a4:2d:c8:94:9c:f8:fe:ea:89:40:67:bd:b0:8f:74:e9:5e:5e:
         62:c4:c2:e0:58:4a:75:b0:6c:d2:62:01:98:08:a9:91:6a:76:
         b6:30:a2:70:da:42:17:de:f4:f0:be:e8:c2:92:1c:72:3f:37:
         dd:1d:81:3a:bc:4c:ef:e5:3e:32:29:4e:15:be:22:c7:b8:2c:
         23:df:f4:c0:90:d0:69:ce:92:0f:ba:03:71:43:e7:04:e7:91:
         08:87:18:9b:4f:b3:4a:35:90:80:70:c5:5b:c9:9a:da:91:a2:
         38:6d:53:77:ca:e8:8a:f5:7a:c1:f9:3c:da:9b:dc:8a:c3:4f:
         41:b2:2d:0f:46:3c:af:00:17:a6:9e:62:5b:96:0c:06:02:96:
         0f:22:fa:b2:8d:a5:e3:ef:4b:83:b5:55:fb:f3:43:09:b4:de:
         c4:00:f7:72:53:57:e2:94:9c:e8:00:4d:fa:f3:72:7f:f0:c3:
         eb:9c:b1:89:97:75:dd:78:9a:5a:48:d6:c9:66:a3:ee:c8:9f:
         54:9d:c3:a8:b6:24:7f:e8:93:96:2f:f3:d0:8d:90:d9:fb:08:
         32:d0:7d:53:65:8f:ab:ef:14:23:94:ed:7c:d2:04:21:db:0d:
         fd:28:dc:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVENjExMTAvBgNVBAUTKDdFODUyRTI0OUQ5QzQ3Q0I2NTk1RTcwMTdEMDdERTI3
QzM5NEFGMDkwHhcNMjYwMzI0MTQyMDU0WhcNMjYwMzMxMTQyMDU0WjAYMRYwFAYD
VQQDEw02OWMyOWRjNi1mYzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqveowlMwA5mkTe0R0i8QxnuFqkI2SUOGmZhgRoDgW1YFI4jq/190emFFiBrv
IUqFVLEzXNBj+9QOJ3J0p9m+zHoAaPDot7NIrA3i6VI5pTpvTNgA5iV5PGSrJ7cn
mRsK/+F5K0ROmbfNdPhtfnysVWuaXtxKsgBYHmqdI+T0aiT3SmhLHz4EkU4fjzGU
SfM+Ma3TRSVxY9ek077BHzCBczQy6IQOdPnAQhW6YpAbg4sfu6XGwtnNNgC2h8qU
QelNCLNzFxj5disTDBQYXmEasuvdFzCh1GV9MohygRckGhST7uBy2XXGiwK6l0c+
7cZAbW6gIsjKpQstmltbc77MgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0nQQ84
smRyvztxzjAQDL+XIA8DMB8GA1UdIwQYMBaAFH6FLiSdnEfLZZXnAX0H3ifDlK8J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE
NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4dGxsZWNCZlFmZUo4T1Vy
d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZvVXVKSjJjUjh0bGxlY0JmUWZlSjhPVXJ3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4
dGxsZWNCZlFmZUo4T1Vyd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPCZVK9YD92eMeZpZn0zgHWprpC3IlJz4/uqJQGe9sI906V5eYsTC4FhKdbBs
0mIBmAipkWp2tjCicNpCF9708L7owpIccj833R2BOrxM7+U+MilOFb4ix7gsI9/0
wJDQac6SD7oDcUPnBOeRCIcYm0+zSjWQgHDFW8ma2pGiOG1Td8roivV6wfk82pvc
isNPQbItD0Y8rwAXpp5iW5YMBgKWDyL6so2l4+9Lg7VV+/NDCbTexAD3clNX4pSc
6ABN+vNyf/DD65yxiZd13XiaWkjWyWaj7sifVJ3DqLYkf+iTli/z0I2Q2fsIMtB9
U2WPq+8UI5TtfNIEIdsN/Sjc9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:37 2026 by rpki-client