Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
File:                     PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json)
Hash identifier:          RLMpD671uU9AvXG7K3NZukjujhfkumAfTUw+JJoGLOI=
Subject key identifier:   2D:4B:27:21:10:A1:02:76:21:2C:E1:05:76:84:C4:AD:A5:56:AF:19
Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE
Certificate issuer:       /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
Manifest number:          85
Signing time:             Sun 01 Mar 2026 08:57:00 +0000
Manifest this update:     Sun 01 Mar 2026 08:56:59 +0000
Manifest next update:     Sun 08 Mar 2026 08:56:59 +0000
Files and hashes:         1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: Z38W6nox0GdSTnZmMKWaRqtP3uouNiDHB0MFRY0gdDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl
                          rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
        Validity
            Not Before: Mar  1 08:56:59 2026 GMT
            Not After : Mar  8 08:56:59 2026 GMT
        Subject: CN=69a3ff5b-240e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:f7:15:d4:5e:08:fe:61:55:88:07:a7:b3:
                    08:42:f2:d3:47:74:87:f6:ca:11:23:50:a6:e4:51:
                    38:15:d1:6e:65:39:bb:4a:f4:1b:93:08:7c:68:e4:
                    f4:3b:86:c0:3a:01:4d:74:a6:eb:0b:33:22:11:bb:
                    96:9b:93:7d:76:23:0f:c6:c4:62:7f:a4:e4:50:78:
                    5b:21:3d:ef:ec:dd:7c:8e:5b:f4:75:85:7a:cb:9a:
                    22:78:c2:85:a2:6d:db:45:1a:03:6e:44:31:a0:a8:
                    1f:cf:05:b5:51:63:45:c4:cc:32:5e:3f:d5:d9:bf:
                    0a:d2:f3:86:7f:61:91:47:47:dc:66:57:e5:7f:6c:
                    3f:45:29:15:db:8a:73:fd:4a:8b:05:92:ee:d9:82:
                    5b:76:22:85:52:19:f7:dd:0e:8b:98:37:6c:4c:89:
                    ad:a0:1b:83:ee:9d:82:64:ca:e6:60:15:37:ab:a2:
                    d9:40:5a:2f:67:33:65:14:47:6d:d4:16:e5:c9:60:
                    78:25:ac:90:de:c0:5f:3f:25:b7:f3:3b:5f:52:57:
                    c4:f4:f8:13:6a:60:85:a5:f8:cd:23:eb:ff:b3:2f:
                    a9:cc:ef:2b:75:f2:7d:ca:cc:e7:7b:b4:00:64:3b:
                    ec:8c:cf:5b:4c:67:6d:db:d2:64:4e:3c:a8:48:02:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4B:27:21:10:A1:02:76:21:2C:E1:05:76:84:C4:AD:A5:56:AF:19
            X509v3 Authority Key Identifier:
                keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2b:d7:56:b0:c3:13:86:26:b1:dc:d8:ff:4f:e1:cf:9c:1a:
         5e:50:f2:b5:99:b0:cd:ea:9a:55:8d:36:7a:cf:ab:4d:ec:9a:
         05:5a:dd:6b:e4:00:26:bf:3e:ac:90:cc:02:e2:1d:67:38:29:
         43:7d:0c:bf:53:39:6f:54:16:51:63:a3:2a:eb:45:4c:7c:44:
         a3:cb:53:1e:e5:dc:8f:6e:5e:5b:59:96:dc:d3:b6:bd:92:1d:
         b2:9d:95:89:ef:34:2d:0d:35:76:27:b5:c9:9c:b7:65:f2:7a:
         88:28:0a:3a:7d:d8:e8:83:26:b9:52:2b:2e:83:82:9f:c2:d6:
         d0:b2:8a:62:73:de:36:2b:15:fa:0e:f8:47:af:a5:20:bc:9b:
         e8:58:b0:72:f8:79:a5:a8:d1:5a:ed:64:c4:4c:bf:ff:f5:82:
         82:11:36:03:e8:8b:47:e6:07:cb:c1:ae:71:a7:0d:cc:91:8f:
         b6:9d:e4:03:8e:45:0a:0f:6e:5b:ac:d0:32:ec:58:3d:f5:14:
         7a:16:ae:fb:92:6d:97:09:7e:32:28:d8:5a:b7:bf:35:9a:ef:
         ce:03:04:7e:8b:f8:ed:1e:56:2c:2f:1c:3b:a4:e0:de:42:0c:
         9b:66:1c:6a:47:62:12:b4:d2:ef:0c:c5:e6:b2:29:35:8f:3d:
         b6:ba:9e:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg5RTcxMTAvBgNVBAUTKDNGMDk5NzlEODg4QTNEQTc3MTYwQjNDODA3MzdDQzM2
MDBDNkI4REUwHhcNMjYwMzAxMDg1NjU5WhcNMjYwMzA4MDg1NjU5WjAYMRYwFAYD
VQQDEw02OWEzZmY1Yi0yNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0yP3FdReCP5hVYgHp7MIQvLTR3SH9soRI1Cm5FE4FdFuZTm7SvQbkwh8aOT0
O4bAOgFNdKbrCzMiEbuWm5N9diMPxsRif6TkUHhbIT3v7N18jlv0dYV6y5oieMKF
om3bRRoDbkQxoKgfzwW1UWNFxMwyXj/V2b8K0vOGf2GRR0fcZlflf2w/RSkV24pz
/UqLBZLu2YJbdiKFUhn33Q6LmDdsTImtoBuD7p2CZMrmYBU3q6LZQFovZzNlFEdt
1BblyWB4JayQ3sBfPyW38ztfUlfE9PgTamCFpfjNI+v/sy+pzO8rdfJ9yszne7QA
ZDvsjM9bTGdt29JkTjyoSAJXTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC1LJyEQ
oQJ2ISzhBXaExK2lVq8ZMB8GA1UdIwQYMBaAFD8Jl52Iij2ncWCzyAc3zDYAxrje
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODlFNy9BMjdGRTZEQzRD
MDkxMUYwOUYzOEI2MjhDNEY5QUUwMi9Qd21YbllpS1BhZHhZTFBJQnpmTU5nREd1
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B3bVhuWWlLUGFkeFlMUElCemZNTmdER3VONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODlFNy9BMjdGRTZEQzRDMDkxMUYwOUYzOEI2MjhDNEY5QUUwMi9Qd21YbllpS1Bh
ZHhZTFBJQnpmTU5nREd1TjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARSvXVrDDE4YmsdzY/0/hz5waXlDytZmwzeqaVY02es+rTeyaBVrda+QAJr8+
rJDMAuIdZzgpQ30Mv1M5b1QWUWOjKutFTHxEo8tTHuXcj25eW1mW3NO2vZIdsp2V
ie80LQ01die1yZy3ZfJ6iCgKOn3Y6IMmuVIrLoOCn8LW0LKKYnPeNisV+g74R6+l
ILyb6Fiwcvh5pajRWu1kxEy///WCghE2A+iLR+YHy8GucacNzJGPtp3kA45FCg9u
W6zQMuxYPfUUehau+5Jtlwl+MijYWre/NZrvzgMEfov47R5WLC8cO6Tg3kIMm2Yc
akdiErTS7wzF5rIpNY89trqeJQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:57 2026 by rpki-client