Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
File:                     1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft (raw, json)
Hash identifier:          s3yECSndJuDivZef9uD/91G/qWruhQZ6NJ9N6F7M4pk=
Subject key identifier:   C4:75:FE:7D:17:F1:EE:61:56:56:30:CA:0A:BF:5A:1A:58:59:6D:A2
Authority key identifier: D5:6C:F6:4D:6D:CA:F9:10:C7:B1:2C:89:B2:10:38:07:74:6B:A6:E1
Certificate issuer:       /CN=A91FBC9F/serialNumber=D56CF64D6DCAF910C7B12C89B2103807746BA6E1
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
Manifest number:          1A
Signing time:             Wed 25 Mar 2026 08:12:18 +0000
Manifest this update:     Wed 25 Mar 2026 08:12:17 +0000
Manifest next update:     Wed 01 Apr 2026 08:12:17 +0000
Files and hashes:         1: 1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl (hash: sZk4Jj9KLHNRlEqFHUvzYkc1hGRj2HofkTVMvEOJMes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC9F, serialNumber=D56CF64D6DCAF910C7B12C89B2103807746BA6E1
        Validity
            Not Before: Mar 25 08:12:17 2026 GMT
            Not After : Apr  1 08:12:17 2026 GMT
        Subject: CN=69c398e2-4f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:d8:3f:9d:fe:0c:64:b9:ed:5d:b3:aa:91:
                    b7:d0:a9:cd:e0:b4:0a:64:dc:18:ed:66:7c:ca:73:
                    55:58:92:16:c0:94:93:de:56:d6:60:08:ce:e2:5e:
                    b6:c1:7b:66:15:15:a4:94:cb:5f:30:35:d3:78:4b:
                    68:75:3f:fb:93:ac:e7:15:1b:b6:bf:3b:9c:a0:19:
                    b0:96:01:cc:d0:7a:33:4b:fb:79:7c:02:a8:e4:09:
                    fe:dd:0d:88:34:37:84:67:51:cb:1c:c8:55:de:3a:
                    74:13:62:69:7e:77:e0:1d:84:00:5a:62:c2:77:7f:
                    9e:01:98:fa:26:eb:af:d4:eb:92:26:21:04:33:4b:
                    0b:78:5b:50:cc:df:22:f5:dc:9f:50:d2:ac:1f:9d:
                    32:ff:69:3d:d8:ee:ec:ab:a9:e4:1f:19:57:10:8f:
                    74:ea:cd:c7:ae:a3:67:bd:b0:b1:b2:07:6c:36:29:
                    54:c8:60:4d:ef:3f:c2:9b:8c:77:3a:1d:f9:2b:26:
                    95:be:13:f0:28:23:99:b5:0e:80:da:aa:e5:1f:cb:
                    f2:8f:16:96:6c:d0:67:f8:e5:59:1f:83:0b:5c:4a:
                    8b:c3:f9:87:88:2b:79:57:b4:03:b6:38:c8:95:2e:
                    eb:1b:31:e5:b8:07:eb:01:47:ee:09:4e:48:e5:75:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:75:FE:7D:17:F1:EE:61:56:56:30:CA:0A:BF:5A:1A:58:59:6D:A2
            X509v3 Authority Key Identifier:
                keyid:D5:6C:F6:4D:6D:CA:F9:10:C7:B1:2C:89:B2:10:38:07:74:6B:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b4:d4:03:ff:79:ba:b0:d3:9a:70:fb:8b:59:65:18:35:22:
         60:5f:94:41:74:f4:2d:3b:c4:24:0c:b6:06:55:0f:6d:84:c4:
         54:f4:44:a0:78:de:a7:01:26:4c:1e:2c:f0:0d:81:2c:28:ef:
         b7:a7:b9:63:3a:5d:09:a8:a0:92:91:81:21:43:0d:0a:9d:ca:
         e8:7a:89:93:2d:aa:4a:2b:03:7a:7d:07:20:56:48:10:9d:07:
         c1:e7:4c:07:87:27:04:6c:ae:ea:9d:07:94:37:9b:24:56:e9:
         c4:9c:41:e1:b6:47:16:17:75:62:4a:03:22:fb:d1:4c:fc:05:
         7d:f0:da:79:f0:9f:44:12:c2:36:8d:0a:10:6e:ec:bf:90:90:
         e5:bb:1a:99:1e:4d:a1:84:9b:c5:2c:27:4a:e9:b0:68:d8:3c:
         74:f3:d1:89:c8:e6:e7:86:da:4c:d0:d9:39:d1:48:94:97:39:
         e6:3e:9a:58:d7:fc:d5:b5:7f:91:ef:47:a7:10:6f:0f:ce:09:
         1c:12:0f:41:6d:81:e1:7e:d3:9a:d8:a1:9f:4a:78:23:f9:bb:
         8e:8a:e2:90:c4:38:82:cb:85:2f:78:54:00:d3:83:96:6b:f0:
         44:ad:bd:6a:4c:fd:cf:ac:f5:a0:cb:57:b3:02:36:f6:46:fe:
         cc:bd:a2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:15:33 2026 by rpki-client