Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
File:                     pOlXbOhgyP9flyr1k7QFTngj5kI.mft (raw, json)
Hash identifier:          7ZK+m6g0lYf0AwVYU7Q1imCwwMcOGCeYwQDGEV4//lA=
Subject key identifier:   50:25:36:C8:29:93:31:29:2A:01:72:72:76:5D:CF:39:03:D9:47:6E
Authority key identifier: A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42
Certificate issuer:       /CN=A9117E4D/serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
Certificate serial:       2CC8
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
Manifest number:          2CC5
Signing time:             Sat 28 Feb 2026 14:27:26 +0000
Manifest this update:     Sat 28 Feb 2026 14:27:25 +0000
Manifest next update:     Sat 07 Mar 2026 14:27:25 +0000
Files and hashes:         1: pOlXbOhgyP9flyr1k7QFTngj5kI.crl (hash: pES18taaZZVPeKAyob270sX0byP8asbuiz/5lwT+s9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl
                          rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11464 (0x2cc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117E4D, serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642
        Validity
            Not Before: Feb 28 14:27:25 2026 GMT
            Not After : Mar  7 14:27:25 2026 GMT
        Subject: CN=69a2fb4e-69ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:41:cb:5c:78:67:c7:8f:7a:8e:ff:35:0d:
                    3e:e6:02:71:db:9e:36:5a:bc:a5:72:ed:e2:60:ed:
                    89:b5:e7:b0:15:b3:84:29:d4:48:4f:58:e7:d7:1a:
                    1a:ec:12:6c:72:cf:66:ed:52:f1:fa:b4:4b:25:fc:
                    9a:41:a8:f9:72:e8:1e:13:51:28:d8:80:be:6f:68:
                    28:7e:21:30:4e:16:a2:36:ce:ba:40:0a:d2:e0:8c:
                    d8:7e:57:b0:a6:e4:cf:f4:ac:d5:41:12:d2:25:44:
                    78:81:8e:9e:c1:87:43:aa:ef:1e:24:a4:22:8a:dc:
                    94:cf:2a:52:ae:2a:8c:33:3f:1d:09:c9:d8:9e:b5:
                    46:44:4d:47:a5:d0:5e:12:b6:8f:82:39:29:fd:c2:
                    af:ae:b3:39:80:39:63:47:46:a3:ec:ad:13:68:74:
                    b4:ac:83:cb:47:86:81:53:46:ed:96:2c:aa:10:4c:
                    59:75:0a:a3:56:f3:2a:c4:c6:95:06:b8:41:3d:dd:
                    1f:ba:00:f6:a8:7a:0b:a0:52:08:81:9b:36:3d:78:
                    8f:dc:ba:70:9a:43:c5:8c:91:92:79:60:ab:bc:32:
                    c4:f1:20:6b:88:15:0f:00:ce:ef:a7:2c:56:53:87:
                    87:53:a7:f7:3f:0b:2d:db:db:00:27:7f:77:48:80:
                    73:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:25:36:C8:29:93:31:29:2A:01:72:72:76:5D:CF:39:03:D9:47:6E
            X509v3 Authority Key Identifier:
                keyid:A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:73:bb:b4:e3:14:a1:50:f1:20:03:b6:fb:da:8f:aa:09:8f:
         1c:87:70:b0:82:a4:6d:0b:ad:b8:c8:92:71:a2:27:a3:fd:0c:
         27:34:ac:86:e9:95:3a:04:c6:87:77:fa:d5:73:7b:14:35:b2:
         7a:b5:ba:e2:d2:36:ab:b7:20:ca:f0:af:2f:5c:1a:af:d0:6b:
         05:56:50:07:e2:92:14:50:30:80:66:50:87:4b:95:07:86:37:
         f0:ee:6b:9c:96:c7:ad:c4:40:93:98:2c:52:e9:ac:8d:17:90:
         e7:9c:8c:cf:71:36:43:bd:01:e9:74:ce:59:f5:6f:45:bd:35:
         6f:bc:fd:3d:e5:a1:02:4f:17:84:d1:4b:5e:3e:70:7a:3d:96:
         ad:c2:7a:80:39:c9:6e:a2:42:5d:0f:19:90:53:59:9b:ea:8d:
         ce:9a:a9:6b:db:b8:5e:5a:cb:a0:42:69:a7:6b:ad:94:b9:d5:
         5f:fc:4b:36:01:13:c8:fe:b3:8f:4b:50:ee:ac:ab:81:b1:19:
         5f:c0:cf:b1:45:0b:a7:2d:63:5c:34:48:25:56:45:f7:ae:2e:
         9c:9e:22:fb:fa:ee:d1:f6:63:78:b2:e4:49:49:4a:0e:0b:1f:
         fd:fc:f8:59:b1:53:b5:d4:d2:8a:28:35:ba:b6:55:9b:84:07:
         a3:60:22:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTdFNEQxMTAvBgNVBAUTKEE0RTk1NzZDRTg2MEM4RkY1Rjk3MkFGNTkzQjQwNTRF
NzgyM0U2NDIwHhcNMjYwMjI4MTQyNzI1WhcNMjYwMzA3MTQyNzI1WjAYMRYwFAYD
VQQDDA02OWEyZmI0ZS02OWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApDlBy1x4Z8ePeo7/NQ0+5gJx2542Wrylcu3iYO2JteewFbOEKdRIT1jn1xoa
7BJscs9m7VLx+rRLJfyaQaj5cugeE1Eo2IC+b2gofiEwThaiNs66QArS4IzYflew
puTP9KzVQRLSJUR4gY6ewYdDqu8eJKQiityUzypSriqMMz8dCcnYnrVGRE1HpdBe
EraPgjkp/cKvrrM5gDljR0aj7K0TaHS0rIPLR4aBU0btliyqEExZdQqjVvMqxMaV
BrhBPd0fugD2qHoLoFIIgZs2PXiP3LpwmkPFjJGSeWCrvDLE8SBriBUPAM7vpyxW
U4eHU6f3Pwst29sAJ393SIBzOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFAlNsgp
kzEpKgFycnZdzzkD2UduMB8GA1UdIwQYMBaAFKTpV2zoYMj/X5cq9ZO0BU54I+ZC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9BNjRGQkNFMEMw
NTgxMUUzOUQ4QTA2NjQ1OTExRUEzMi9wT2xYYk9oZ3lQOWZseXIxazdRRlRuZ2o1
a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3BPbFhiT2hneVA5Zmx5cjFrN1FGVG5najVrSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
N0U0RC9BNjRGQkNFMEMwNTgxMUUzOUQ4QTA2NjQ1OTExRUEzMi9wT2xYYk9oZ3lQ
OWZseXIxazdRRlRuZ2o1a0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAM3O7tOMUoVDxIAO2+9qPqgmPHIdwsIKkbQutuMiScaIno/0MJzSshumVOgTG
h3f61XN7FDWyerW64tI2q7cgyvCvL1war9BrBVZQB+KSFFAwgGZQh0uVB4Y38O5r
nJbHrcRAk5gsUumsjReQ55yMz3E2Q70B6XTOWfVvRb01b7z9PeWhAk8XhNFLXj5w
ej2WrcJ6gDnJbqJCXQ8ZkFNZm+qNzpqpa9u4XlrLoEJpp2utlLnVX/xLNgETyP6z
j0tQ7qyrgbEZX8DPsUULpy1jXDRIJVZF964unJ4i+/ru0fZjeLLkSUlKDgsf/fz4
WbFTtdTSiig1urZVm4QHo2Ai5Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:24:44 2026 by rpki-client