Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
File:                     11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json)
Hash identifier:          DfX+aEGjM3kObwWYFEcjDZ4Pgi6aHy1o1E40vJ65P7Q=
Subject key identifier:   15:73:8F:A0:D9:52:9A:FF:7D:7D:60:91:5E:BC:BB:46:50:02:6B:5F
Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
Certificate issuer:       /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE
Certificate serial:       2C35
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
Manifest number:          2C35
Signing time:             Mon 02 Mar 2026 02:48:06 +0000
Manifest this update:     Mon 02 Mar 2026 02:48:04 +0000
Manifest next update:     Mon 09 Mar 2026 02:48:04 +0000
Files and hashes:         1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: GOPD8UFI/YcHyGo+9SctzohjyrdES0Jrj4EEi17bt+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl
                          rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11317 (0x2c35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE
        Validity
            Not Before: Mar  2 02:48:04 2026 GMT
            Not After : Mar  9 02:48:04 2026 GMT
        Subject: CN=69a4fa65-d4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:07:c8:8d:69:6a:1c:3a:b4:10:22:d8:1e:
                    c3:23:61:06:3b:72:3b:e0:06:d3:17:81:1f:a6:e4:
                    c2:28:85:ed:b6:dd:43:d6:c8:e7:56:c1:66:fc:9d:
                    4a:5a:e9:88:cd:01:e8:77:5f:18:30:e8:90:49:d3:
                    b3:7b:ca:9f:96:56:fa:45:5b:1a:7b:ba:fb:f4:1b:
                    25:1b:63:9c:26:86:31:10:d2:59:17:24:b5:74:20:
                    94:2e:82:67:46:64:b3:61:0d:34:01:fd:f2:74:a3:
                    f8:8c:5f:f8:a3:1a:ba:42:70:a5:0c:ab:1f:6b:40:
                    b8:9a:79:eb:79:32:46:d2:78:e0:ba:0e:11:92:1b:
                    55:aa:ef:0f:2d:b4:c5:d0:04:64:3c:02:8a:4c:ec:
                    4d:b1:ca:ab:4b:10:f0:c0:b3:a0:35:c7:ff:86:6e:
                    94:fe:4c:04:21:f5:77:0c:ce:79:1b:5c:b5:93:d9:
                    03:95:7f:ac:ee:92:88:70:e3:8b:d3:23:a3:ac:cb:
                    5a:37:2e:7f:cc:7a:f0:f3:cf:b4:76:97:08:81:a1:
                    a5:59:12:0d:c1:b8:91:19:28:47:ac:cf:91:f7:d2:
                    36:6a:1b:1f:87:1c:3e:bc:9b:64:42:19:d6:d6:d2:
                    c0:d7:4f:84:0e:c9:3a:c9:9b:33:48:d5:d7:66:89:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:73:8F:A0:D9:52:9A:FF:7D:7D:60:91:5E:BC:BB:46:50:02:6B:5F
            X509v3 Authority Key Identifier:
                keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e4:27:06:a8:bd:7d:82:a5:f4:6b:8e:b5:c7:05:26:80:0b:
         44:08:15:3b:68:d0:78:51:a7:87:90:97:dc:80:f3:0a:7e:0b:
         e4:f2:58:0f:2b:77:c9:5d:0e:36:3b:5d:25:2f:93:93:51:2b:
         bf:29:ed:36:4d:34:4d:0c:fc:13:35:95:ea:5d:41:2d:68:20:
         fd:07:88:c9:81:c1:93:6c:32:4c:4f:7d:f3:26:0f:b8:78:76:
         91:cb:75:0b:f4:25:0a:0d:12:31:21:ab:6c:bf:ab:8a:21:9f:
         67:01:5a:09:b3:0e:66:dc:ba:bb:d6:4a:73:1a:96:6f:45:1b:
         bb:ba:53:6a:85:9d:96:a3:2a:89:c7:e8:a8:a3:d6:04:34:95:
         9d:26:ee:49:50:03:14:e3:0a:00:2a:13:1c:82:87:b5:59:40:
         ff:1a:d9:2a:4c:68:c3:3f:2c:48:69:d6:a4:76:38:65:3c:a0:
         88:50:fe:cd:92:6f:87:4b:84:71:5d:f0:32:b0:0b:a1:6e:36:
         cf:2e:88:01:fc:de:0b:a7:89:95:5d:d1:3e:19:31:a9:e4:6c:
         21:9d:49:34:98:71:19:52:5c:47:71:ae:0f:73:68:70:08:48:
         d2:be:f1:72:38:e6:92:1e:92:bb:f0:fd:48:c2:30:6e:c0:40:
         dd:6a:4c:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3
RTQ4M0VBQ0UwHhcNMjYwMzAyMDI0ODA0WhcNMjYwMzA5MDI0ODA0WjAYMRYwFAYD
VQQDEw02OWE0ZmE2NS1kNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7kHyI1pahw6tBAi2B7DI2EGO3I74AbTF4EfpuTCKIXttt1D1sjnVsFm/J1K
WumIzQHod18YMOiQSdOze8qfllb6RVsae7r79BslG2OcJoYxENJZFyS1dCCULoJn
RmSzYQ00Af3ydKP4jF/4oxq6QnClDKsfa0C4mnnreTJG0njgug4RkhtVqu8PLbTF
0ARkPAKKTOxNscqrSxDwwLOgNcf/hm6U/kwEIfV3DM55G1y1k9kDlX+s7pKIcOOL
0yOjrMtaNy5/zHrw88+0dpcIgaGlWRINwbiRGShHrM+R99I2ahsfhxw+vJtkQhnW
1tLA10+EDsk6yZszSNXXZokWNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVzj6DZ
Upr/fX1gkV68u0ZQAmtfMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC
QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2
czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt
MFFLY2U1U1BTVWwtU0Q2czQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXeQnBqi9fYKl9GuOtccFJoALRAgVO2jQeFGnh5CX3IDzCn4L5PJYDyt3yV0O
NjtdJS+Tk1ErvyntNk00TQz8EzWV6l1BLWgg/QeIyYHBk2wyTE998yYPuHh2kct1
C/QlCg0SMSGrbL+riiGfZwFaCbMOZty6u9ZKcxqWb0Ubu7pTaoWdlqMqicfoqKPW
BDSVnSbuSVADFOMKACoTHIKHtVlA/xrZKkxowz8sSGnWpHY4ZTygiFD+zZJvh0uE
cV3wMrALoW42zy6IAfzeC6eJlV3RPhkxqeRsIZ1JNJhxGVJcR3GuD3NocAhI0r7x
cjjmkh6Su/D9SMIwbsBA3WpMAw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:58 2026 by rpki-client