Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File:                     b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier:          Xfu34hWTCDrV+XJYMeAMbik2jODS/eVTk5MUxtyWKFk=
Subject key identifier:   A4:6A:6A:68:2B:67:E0:28:76:26:47:80:78:80:7D:DA:6C:63:E2:15
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer:       /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial:       11BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number:          1EBC
Signing time:             Thu 26 Mar 2026 17:08:36 +0000
Manifest this update:     Thu 26 Mar 2026 17:08:35 +0000
Manifest next update:     Thu 02 Apr 2026 17:08:35 +0000
Files and hashes:         1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: Lx5PiB63bGrm8vZC1Kr0YdDhX9hr2afN7dM2+ikkF4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4540 (0x11bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0AF0, serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
        Validity
            Not Before: Mar 26 17:08:35 2026 GMT
            Not After : Apr  2 17:08:35 2026 GMT
        Subject: CN=69c56814-e8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:16:fc:74:86:e5:a6:e8:76:af:81:1b:38:
                    49:38:57:5f:9a:5d:ee:b8:00:8c:a4:d8:cf:fc:81:
                    9f:79:7c:a8:4c:28:3d:db:52:75:d0:38:ea:7a:35:
                    cb:99:7e:55:ae:a6:c5:90:e8:c9:8d:93:74:26:06:
                    db:d6:6b:fa:d9:6e:f0:00:bf:4d:c0:e9:34:49:6e:
                    8c:d3:b3:2b:f4:9a:a7:76:ed:fd:b4:cf:d2:7e:08:
                    c1:c5:d6:ee:07:1b:c9:5a:ba:78:42:3b:41:6c:2c:
                    9b:9b:0e:14:1c:d8:f4:16:a7:9f:f8:a4:84:d1:6c:
                    04:30:30:9e:bf:05:c6:cc:c0:84:8d:d8:c2:d2:6e:
                    43:fe:ee:0d:2c:9b:f9:ad:a7:99:45:e1:9c:01:46:
                    b5:28:03:65:46:8e:e3:8a:4e:de:46:f5:69:7f:e5:
                    6c:b8:e8:7b:0f:48:81:1f:e1:66:7b:76:39:48:8d:
                    6c:a6:dd:b8:26:bf:94:b3:d0:88:17:db:aa:2d:e7:
                    82:dc:f0:d0:14:a5:cf:96:81:59:8a:51:3d:eb:22:
                    84:90:43:bb:81:d3:85:de:58:8d:c9:cf:33:fc:15:
                    cb:f9:c2:93:a0:fc:98:59:b3:69:30:fc:b6:12:c6:
                    b6:9f:a1:09:9d:4c:d7:65:f0:2a:fa:3c:b6:12:2b:
                    4c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6A:6A:68:2B:67:E0:28:76:26:47:80:78:80:7D:DA:6C:63:E2:15
            X509v3 Authority Key Identifier:
                keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:13:c9:b9:4e:91:67:a0:9e:c0:3f:35:34:c4:17:80:98:fd:
         30:cb:6b:f2:0a:d3:07:02:11:89:1f:b4:ef:58:d5:39:77:cc:
         71:1f:57:2a:81:e0:26:3e:07:7e:ec:ca:c2:dc:e2:18:12:61:
         86:69:1e:22:ff:f3:a8:31:17:12:93:38:5a:f5:ce:0c:6a:db:
         b0:da:54:ce:ba:e8:a6:18:fe:c5:ab:cb:69:e9:cc:70:76:93:
         8d:f4:64:51:90:c3:8e:85:22:0f:19:8d:e9:f7:2b:89:d4:50:
         7e:b8:12:fe:d0:e9:88:11:1a:24:8b:1e:a0:0f:04:05:2b:64:
         21:fc:24:86:e2:06:59:b4:49:f5:c1:19:43:11:dd:5b:de:31:
         81:23:4e:ef:c3:97:d1:cb:0e:b2:32:ee:60:e0:85:c4:14:85:
         25:d0:ab:fa:dc:29:82:da:4e:ae:f9:4e:ff:a1:0b:93:c0:62:
         06:31:d4:3c:c7:34:5a:fa:58:da:12:1b:bf:fe:de:fc:9e:cb:
         85:3f:c0:e2:9e:c1:50:eb:6c:75:7e:4a:da:d5:04:2b:c7:d3:
         d8:7a:e4:2f:a2:7f:06:0d:d7:6d:fd:e0:ff:cb:35:a2:76:39:
         0d:c0:84:19:f6:d3:f7:9b:ee:07:55:52:3f:2f:23:99:15:7f:
         a7:28:bb:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBBRjAxMTAvBgNVBAUTKDZGN0I0NUUzREM3NjI2QzM3RjhBMDFFMEFCOEVBNEFG
MDU1RjQ5OEEwHhcNMjYwMzI2MTcwODM1WhcNMjYwNDAyMTcwODM1WjAYMRYwFAYD
VQQDEw02OWM1NjgxNC1lOGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvK4W/HSG5abodq+BGzhJOFdfml3uuACMpNjP/IGfeXyoTCg921J10DjqejXL
mX5VrqbFkOjJjZN0Jgbb1mv62W7wAL9NwOk0SW6M07Mr9Jqndu39tM/SfgjBxdbu
BxvJWrp4QjtBbCybmw4UHNj0Fqef+KSE0WwEMDCevwXGzMCEjdjC0m5D/u4NLJv5
raeZReGcAUa1KANlRo7jik7eRvVpf+VsuOh7D0iBH+Fme3Y5SI1spt24Jr+Us9CI
F9uqLeeC3PDQFKXPloFZilE96yKEkEO7gdOF3liNyc8z/BXL+cKToPyYWbNpMPy2
Esa2n6EJnUzXZfAq+jy2EitMMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKRqamgr
Z+AodiZHgHiAfdpsY+IVMB8GA1UdIwQYMBaAFG97RePcdibDf4oB4KuOpK8FX0mK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEFGMC9FMzc2Mjk1MDBG
RkYxMUU5ODgxNUFFMjJDNEY5QUUwMi9iM3RGNDl4MkpzTl9pZ0hncTQ2a3J3VmZT
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2IzdEY0OXgySnNOX2lnSGdxNDZrcndWZlNZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEFGMC9FMzc2Mjk1MDBGRkYxMUU5ODgxNUFFMjJDNEY5QUUwMi9iM3RGNDl4Mkpz
Tl9pZ0hncTQ2a3J3VmZTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhRPJuU6RZ6CewD81NMQXgJj9MMtr8grTBwIRiR+071jVOXfMcR9XKoHgJj4H
fuzKwtziGBJhhmkeIv/zqDEXEpM4WvXODGrbsNpUzrrophj+xavLaenMcHaTjfRk
UZDDjoUiDxmN6fcridRQfrgS/tDpiBEaJIseoA8EBStkIfwkhuIGWbRJ9cEZQxHd
W94xgSNO78OX0csOsjLuYOCFxBSFJdCr+twpgtpOrvlO/6ELk8BiBjHUPMc0WvpY
2hIbv/7e/J7LhT/A4p7BUOtsdX5K2tUEK8fT2HrkL6J/Bg3Xbf3g/8s1onY5DcCE
GfbT95vuB1VSPy8jmRV/pyi7ww==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:13 2026 by rpki-client