Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/516D4DF2213F11EFBC4CD546C4F9AE02/1VYDCTxFsoI2qo_pdJQeGZUu7No.mft
File:                     1VYDCTxFsoI2qo_pdJQeGZUu7No.mft (raw, json)
Hash identifier:          D+fWIdE9gr6HQUTy1tarRzQVy6l2lzCChq8YuxuBaWA=
Subject key identifier:   14:A5:2F:79:B4:13:32:71:2E:94:14:ED:BE:4C:8F:11:EC:3E:13:DF
Authority key identifier: D5:56:03:09:3C:45:B2:82:36:AA:8F:E9:74:94:1E:19:95:2E:EC:DA
Certificate issuer:       /CN=A913C91A/serialNumber=D55603093C45B28236AA8FE974941E19952EECDA
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1VYDCTxFsoI2qo_pdJQeGZUu7No.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C91A/516D4DF2213F11EFBC4CD546C4F9AE02/1VYDCTxFsoI2qo_pdJQeGZUu7No.mft
Manifest number:          0147
Signing time:             Sun 01 Mar 2026 03:57:41 +0000
Manifest this update:     Sun 01 Mar 2026 03:57:41 +0000
Manifest next update:     Sun 08 Mar 2026 03:57:41 +0000
Files and hashes:         1: 1VYDCTxFsoI2qo_pdJQeGZUu7No.crl (hash: I7J7LFfTBIMw5Ft4O8H9SFJgv+VaEhpD6xi3DD4LTQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C91A/516D4DF2213F11EFBC4CD546C4F9AE02/1VYDCTxFsoI2qo_pdJQeGZUu7No.crl
                          rsync://rpki.apnic.net/member_repository/A913C91A/516D4DF2213F11EFBC4CD546C4F9AE02/1VYDCTxFsoI2qo_pdJQeGZUu7No.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1VYDCTxFsoI2qo_pdJQeGZUu7No.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C91A, serialNumber=D55603093C45B28236AA8FE974941E19952EECDA
        Validity
            Not Before: Mar  1 03:57:41 2026 GMT
            Not After : Mar  8 03:57:41 2026 GMT
        Subject: CN=69a3b935-77a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2c:0a:77:ab:3c:2d:a0:43:c3:95:45:14:f3:
                    3e:79:e2:5d:ef:9b:a6:eb:fd:4f:df:05:45:59:58:
                    c6:a5:93:9d:b0:d8:20:ef:45:d3:5d:2d:b5:0e:4d:
                    4f:30:9d:a5:0c:49:71:90:7c:44:7e:ca:38:10:5e:
                    e9:d9:8c:92:16:38:36:a4:ee:11:5c:43:5e:c6:82:
                    29:37:25:34:8d:99:c1:84:e7:7a:87:b0:79:64:87:
                    9f:3a:8b:1f:60:f0:df:a1:93:fb:95:00:21:63:30:
                    f1:12:9b:99:ab:3b:39:12:a4:ea:a1:d6:dc:d0:2a:
                    8b:81:2b:34:f0:d7:37:81:0e:7d:93:5c:bd:8a:be:
                    ca:0a:2a:60:5e:96:b0:9f:b0:ec:b5:3e:c6:3f:1b:
                    56:bc:d1:19:15:d4:49:cb:ae:03:3f:37:ca:fa:b1:
                    f3:da:38:85:5b:81:ad:db:f9:21:9a:32:0c:1f:2f:
                    56:1e:85:1d:64:d8:91:8e:cb:98:74:12:ac:63:dc:
                    61:e2:b5:25:e7:44:82:69:d0:49:58:7f:a7:77:7e:
                    18:db:bc:77:0b:e9:d3:74:88:c4:40:b2:98:ca:96:
                    af:f5:ae:5e:1d:9f:c9:38:b2:74:35:06:27:50:1c:
                    11:56:95:47:27:bd:73:f0:18:3f:5b:f5:28:83:71:
                    72:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A5:2F:79:B4:13:32:71:2E:94:14:ED:BE:4C:8F:11:EC:3E:13:DF
            X509v3 Authority Key Identifier:
                keyid:D5:56:03:09:3C:45:B2:82:36:AA:8F:E9:74:94:1E:19:95:2E:EC:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C91A/516D4DF2213F11EFBC4CD546C4F9AE02/1VYDCTxFsoI2qo_pdJQeGZUu7No.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1VYDCTxFsoI2qo_pdJQeGZUu7No.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/516D4DF2213F11EFBC4CD546C4F9AE02/1VYDCTxFsoI2qo_pdJQeGZUu7No.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:db:7b:8c:28:73:62:96:97:b1:12:77:06:bd:f3:7d:32:91:
         ad:ef:b0:cd:f6:71:ef:4a:db:41:40:9c:cc:69:19:36:97:7a:
         69:8d:95:85:6a:f9:67:b7:41:fe:2f:69:8e:8e:8c:39:58:56:
         65:7a:59:a1:a4:b9:d7:eb:d5:09:8d:ca:2f:ea:0e:29:10:b7:
         bd:d5:43:b7:3f:0a:89:c9:fb:fa:84:7b:58:a2:6d:c8:44:e8:
         aa:90:53:cc:d7:66:64:1d:94:b2:db:3a:29:d0:e4:a8:56:f7:
         6d:b2:f0:3a:54:75:7c:c6:c2:8a:92:3f:de:41:d0:93:e3:fa:
         cb:91:cf:1b:98:a9:a7:20:68:01:3e:6a:5d:6b:c1:3a:56:44:
         6c:8a:4e:dd:df:95:41:1f:25:7a:cc:77:af:e1:11:aa:c6:38:
         e2:bb:a0:70:4d:e0:5a:09:a0:8f:7f:3c:fd:fb:1b:82:98:a5:
         88:69:fe:1c:74:9c:27:e6:96:4b:df:ad:93:49:c5:2b:ad:41:
         1a:3f:71:44:7f:cb:f5:a2:67:a4:0f:65:e6:e7:1c:97:b3:ed:
         9b:3d:8c:59:5c:b9:a6:d3:09:24:d1:65:64:b2:fb:a3:8b:5b:
         31:37:6c:b0:b7:dc:fe:f9:09:c5:5a:c8:2d:35:e6:4d:d9:26:
         10:38:0b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:52 2026 by rpki-client