Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
File:                     fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json)
Hash identifier:          6RzmH1Ts8F5LvtXfTR4ISvBORGVY46FGLiwNhDzRoYA=
Subject key identifier:   C5:55:D0:63:D1:1D:DF:0C:92:0D:93:81:7F:36:96:F0:B3:07:58:2F
Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78
Certificate issuer:       /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
Certificate serial:       0BE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
Manifest number:          0BDF
Signing time:             Sat 28 Feb 2026 19:05:58 +0000
Manifest this update:     Sat 28 Feb 2026 19:05:58 +0000
Manifest next update:     Sat 07 Mar 2026 19:05:58 +0000
Files and hashes:         1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: Pybddx3RvHE5zinZWqdAW4OVcQvtLGifM/i+xnrZ6GA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl
                          rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3042 (0xbe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378
        Validity
            Not Before: Feb 28 19:05:58 2026 GMT
            Not After : Mar  7 19:05:58 2026 GMT
        Subject: CN=69a33c96-f06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:58:d4:31:92:fe:bf:d6:b0:e7:c2:f1:d6:
                    ce:ee:2e:8f:28:e8:bc:11:f7:da:97:af:d6:7f:83:
                    e0:0e:2b:8f:85:db:ae:87:c7:c4:eb:66:68:1f:c1:
                    de:9c:a6:13:b2:78:7f:ac:21:3b:79:24:ac:a0:3d:
                    ce:a1:22:05:97:d5:90:63:f9:b8:df:7d:6f:8f:e9:
                    46:ea:50:1c:28:28:bf:af:e8:74:13:09:13:7e:9d:
                    55:6e:fd:6c:73:14:7b:79:f5:b3:a6:9a:6b:73:c7:
                    01:47:09:07:59:25:a9:4f:62:72:c6:0d:4f:24:5b:
                    a1:51:9b:6a:f1:ef:c3:3d:b9:c7:fd:97:fa:69:1a:
                    44:1e:00:fc:b1:a3:1b:fe:f9:e7:50:8f:3a:c1:e1:
                    b4:d7:57:c5:d3:66:ce:ca:b2:11:fb:47:f6:7f:41:
                    c7:a3:9a:9b:a8:b9:a0:45:4c:93:5d:a4:88:6c:14:
                    9e:fe:b2:b3:07:68:9e:0a:02:02:d5:58:d0:4f:cc:
                    85:3a:0b:cc:c8:7c:72:b2:50:d3:c8:94:14:1d:11:
                    f5:f8:77:3a:97:a7:e7:35:a6:07:9c:19:4f:af:29:
                    e2:cd:9e:f7:40:27:16:1b:0e:17:77:31:b0:7d:bb:
                    13:7d:61:1d:d5:93:f8:d2:26:f5:36:ed:a0:81:46:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:55:D0:63:D1:1D:DF:0C:92:0D:93:81:7F:36:96:F0:B3:07:58:2F
            X509v3 Authority Key Identifier:
                keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:64:57:68:e2:9a:04:10:30:c7:29:99:ee:2f:c8:c6:53:96:
         ba:21:fe:77:5c:21:29:25:e9:0d:70:c8:41:01:cb:7d:c6:2e:
         d8:5d:78:c5:cf:60:68:dc:ca:a9:f9:ec:82:9f:4d:44:ba:7f:
         aa:73:70:11:7c:a4:90:3c:a6:38:fd:ce:e6:ac:b6:3d:5d:26:
         28:0c:2e:f1:ff:ef:53:54:99:a8:05:77:42:65:01:36:94:72:
         8a:23:0a:0b:9e:09:58:cc:98:2c:fa:c2:3e:fe:a4:0a:14:58:
         88:82:af:f3:26:a9:c2:8c:de:de:43:56:c5:74:b4:03:51:6a:
         dc:8e:3a:a2:1d:11:59:51:33:30:07:de:19:b3:00:90:5a:a0:
         95:e1:eb:03:a9:38:11:17:90:78:03:15:43:69:44:d6:4c:92:
         22:c7:8a:9e:33:a0:6a:29:29:a0:a2:c0:5f:ea:f6:cc:ff:4f:
         2f:21:18:c7:69:1a:27:23:27:a5:32:5b:a2:f9:a8:44:56:b6:
         22:aa:df:ad:69:00:9d:cf:1a:fa:b8:10:0d:73:0f:3e:23:ed:
         ed:16:bd:59:b4:c6:cb:ed:a9:e6:17:b8:e9:fa:58:89:b6:c9:
         c9:7b:0f:25:d6:12:a5:31:c0:c2:fa:34:e4:a5:e1:32:9d:8a:
         10:4b:3b:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx
QzEwNkIzNzgwHhcNMjYwMjI4MTkwNTU4WhcNMjYwMzA3MTkwNTU4WjAYMRYwFAYD
VQQDEw02OWEzM2M5Ni1mMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA08VY1DGS/r/WsOfC8dbO7i6PKOi8Effal6/Wf4PgDiuPhduuh8fE62ZoH8He
nKYTsnh/rCE7eSSsoD3OoSIFl9WQY/m4331vj+lG6lAcKCi/r+h0EwkTfp1Vbv1s
cxR7efWzppprc8cBRwkHWSWpT2Jyxg1PJFuhUZtq8e/DPbnH/Zf6aRpEHgD8saMb
/vnnUI86weG011fF02bOyrIR+0f2f0HHo5qbqLmgRUyTXaSIbBSe/rKzB2ieCgIC
1VjQT8yFOgvMyHxyslDTyJQUHRH1+Hc6l6fnNaYHnBlPrynizZ73QCcWGw4XdzGw
fbsTfWEd1ZP40ib1Nu2ggUYREQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVV0GPR
Hd8Mkg2TgX82lvCzB1gvMB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz
QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz
M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2
QUdsekVMT1VYLW9jRUdzM2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmmRXaOKaBBAwxymZ7i/IxlOWuiH+d1whKSXpDXDIQQHLfcYu2F14xc9gaNzK
qfnsgp9NRLp/qnNwEXykkDymOP3O5qy2PV0mKAwu8f/vU1SZqAV3QmUBNpRyiiMK
C54JWMyYLPrCPv6kChRYiIKv8yapwoze3kNWxXS0A1Fq3I46oh0RWVEzMAfeGbMA
kFqgleHrA6k4EReQeAMVQ2lE1kySIseKnjOgaikpoKLAX+r2zP9PLyEYx2kaJyMn
pTJbovmoRFa2IqrfrWkAnc8a+rgQDXMPPiPt7Ra9WbTGy+2p5he46fpYibbJyXsP
JdYSpTHAwvo05KXhMp2KEEs7Aw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:41 2026 by rpki-client