Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
File:                     48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json)
Hash identifier:          6Nq0T0pZgck1/CXbx/iPH1lMYBCnk2GWhx2SxsyvO6k=
Subject key identifier:   35:0B:1F:29:43:0A:2B:00:F5:E9:8D:6C:42:EB:50:03:19:9D:ED:33
Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
Certificate issuer:       /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
Certificate serial:       0839
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
Manifest number:          0839
Signing time:             Mon 02 Mar 2026 00:43:19 +0000
Manifest this update:     Mon 02 Mar 2026 00:43:18 +0000
Manifest next update:     Mon 09 Mar 2026 00:43:18 +0000
Files and hashes:         1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: apVXGcQ6VHIdEfdSmYuy9As/SVdScCChEZdYUhCCdAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2105 (0x839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
        Validity
            Not Before: Mar  2 00:43:18 2026 GMT
            Not After : Mar  9 00:43:18 2026 GMT
        Subject: CN=69a4dd27-79be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:22:2e:53:ea:d4:13:ad:82:02:45:65:2e:
                    72:e0:5d:be:04:d8:c8:02:d1:15:58:29:29:c8:d8:
                    7e:5f:2a:b5:3e:1a:01:64:51:ec:9f:22:30:7c:60:
                    61:75:5e:14:c8:68:bd:d0:af:38:b9:87:86:0a:3f:
                    a3:08:aa:ee:80:9d:ad:47:48:ea:47:3f:c7:a6:ac:
                    e8:e0:39:10:6b:8e:64:5c:73:14:6a:2b:a6:e7:c5:
                    fb:8a:2b:e8:93:0a:bb:2c:8e:31:5b:5f:ce:59:e3:
                    1a:29:7b:66:76:12:d2:9e:5e:21:54:14:ae:0e:53:
                    37:00:1e:3a:da:3b:55:44:cd:55:04:81:2c:e6:4a:
                    45:dd:4e:31:22:68:3f:3f:b4:75:1d:5a:7a:a0:aa:
                    49:b0:68:e1:7d:19:23:a5:ff:45:02:98:e8:51:25:
                    d8:d8:39:43:a0:f6:a8:70:17:bf:f3:67:bb:a3:fb:
                    bf:5a:5e:15:ff:fd:95:dc:30:ed:16:a2:b0:e6:df:
                    e9:c5:15:ed:4d:dd:0b:4c:75:6c:09:04:8b:ac:57:
                    a8:4b:55:97:98:63:7b:cc:38:c5:54:48:84:a0:d0:
                    19:f8:83:7a:2a:73:e9:83:4b:66:1e:59:3f:59:a8:
                    2b:96:59:17:e1:3e:dd:6e:ac:71:c3:b5:4f:21:d4:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0B:1F:29:43:0A:2B:00:F5:E9:8D:6C:42:EB:50:03:19:9D:ED:33
            X509v3 Authority Key Identifier:
                keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a9:81:00:a8:90:47:75:88:ab:da:0e:3b:07:36:a6:44:82:
         af:f9:99:9b:0d:35:8c:b8:75:04:ee:d7:05:dc:ef:db:0b:c8:
         79:dd:58:55:f8:bf:88:dd:cb:9c:40:84:2f:76:04:78:f8:b9:
         61:24:e9:fe:cf:dc:be:32:6d:8c:1c:37:1f:0a:46:cf:f1:70:
         ef:76:c3:6d:08:76:49:ec:27:c7:a9:ee:8c:c8:e5:8c:df:70:
         0d:90:a1:3f:45:28:54:27:e9:0d:7f:49:f7:c5:c0:69:f6:9f:
         84:6c:47:5a:75:70:99:7f:99:50:38:98:b7:78:13:c1:5a:00:
         62:d4:4d:e6:e4:d7:6d:52:5c:32:f3:24:11:c3:45:12:6d:c5:
         6d:5b:23:4c:56:2f:64:71:37:10:60:8b:47:59:f6:75:ff:3b:
         17:96:a5:72:62:61:be:86:81:2e:46:5f:fb:de:6b:02:db:ef:
         d3:cc:ad:2f:4a:54:b9:cc:9a:26:05:9d:82:8b:a3:35:b8:5c:
         4a:93:d8:69:60:45:8b:86:6a:40:70:69:6c:30:47:51:29:ab:
         8b:e7:27:bd:30:d9:0f:07:69:fe:7e:bf:b3:da:5e:c5:e4:bc:
         e7:01:6d:07:df:a3:a7:dd:22:f3:30:cd:6f:5b:c0:67:06:8a:
         60:42:c9:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIwQTMxMTAvBgNVBAUTKEUzQzMzN0RCNjY4NzJBMEE5MzVDOUQ1NTVFNUI2REQz
NTMwNzJDNzQwHhcNMjYwMzAyMDA0MzE4WhcNMjYwMzA5MDA0MzE4WjAYMRYwFAYD
VQQDEw02OWE0ZGQyNy03OWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApmwiLlPq1BOtggJFZS5y4F2+BNjIAtEVWCkpyNh+Xyq1PhoBZFHsnyIwfGBh
dV4UyGi90K84uYeGCj+jCKrugJ2tR0jqRz/Hpqzo4DkQa45kXHMUaium58X7iivo
kwq7LI4xW1/OWeMaKXtmdhLSnl4hVBSuDlM3AB462jtVRM1VBIEs5kpF3U4xImg/
P7R1HVp6oKpJsGjhfRkjpf9FApjoUSXY2DlDoPaocBe/82e7o/u/Wl4V//2V3DDt
FqKw5t/pxRXtTd0LTHVsCQSLrFeoS1WXmGN7zDjFVEiEoNAZ+IN6KnPpg0tmHlk/
WagrllkX4T7dbqxxw7VPIdTpEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDULHylD
CisA9emNbELrUAMZne0zMB8GA1UdIwQYMBaAFOPDN9tmhyoKk1ydVV5bbdNTByx0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjBBMy82RTJGRkVERTAz
QjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtncVRYSjFWWGx0dDAxTUhM
SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzQ4TTMyMmFIS2dxVFhKMVZYbHR0MDFNSExIUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjBBMy82RTJGRkVERTAzQjcxMUVCOTdGQkU1NjhDNEY5QUUwMi80OE0zMjJhSEtn
cVRYSjFWWGx0dDAxTUhMSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsamBAKiQR3WIq9oOOwc2pkSCr/mZmw01jLh1BO7XBdzv2wvIed1YVfi/iN3L
nECEL3YEePi5YSTp/s/cvjJtjBw3HwpGz/Fw73bDbQh2Sewnx6nujMjljN9wDZCh
P0UoVCfpDX9J98XAafafhGxHWnVwmX+ZUDiYt3gTwVoAYtRN5uTXbVJcMvMkEcNF
Em3FbVsjTFYvZHE3EGCLR1n2df87F5alcmJhvoaBLkZf+95rAtvv08ytL0pUucya
JgWdgoujNbhcSpPYaWBFi4ZqQHBpbDBHUSmri+cnvTDZDwdp/n6/s9pexeS85wFt
B9+jp90i8zDNb1vAZwaKYELJ2A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:00 2026 by rpki-client