Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
File:                     4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json)
Hash identifier:          31m8jU71FSo5xoz/8GU+LQ32pUe5kFHs59Fct/+sPTI=
Subject key identifier:   0E:BD:27:01:0F:96:CA:61:CB:EB:97:83:E8:43:8E:29:1E:46:5D:96
Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D
Certificate issuer:       /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
Manifest number:          0189
Signing time:             Mon 02 Mar 2026 03:14:12 +0000
Manifest this update:     Mon 02 Mar 2026 03:14:10 +0000
Manifest next update:     Mon 09 Mar 2026 03:14:10 +0000
Files and hashes:         1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: PEQ7QeQ4sdoahlBU+qd5nVGabd4oOn2CwUmEf83zFXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl
                          rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
        Validity
            Not Before: Mar  2 03:14:10 2026 GMT
            Not After : Mar  9 03:14:10 2026 GMT
        Subject: CN=69a50083-11f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c0:51:f4:b5:84:70:ef:7a:3d:d7:0c:d4:b5:
                    aa:fb:ea:c2:61:ec:ed:3a:db:09:11:09:fc:3d:89:
                    fd:eb:32:be:60:65:ec:7f:b9:69:e1:42:5c:f4:18:
                    96:71:4f:ec:b6:b7:b7:87:2a:14:ae:d8:67:52:25:
                    e7:29:4b:f1:c3:0d:d2:4b:44:66:92:b2:13:ab:36:
                    60:a1:ba:27:00:96:11:89:3d:b3:a4:ff:4b:cb:bf:
                    5f:bd:c1:d6:ca:91:f2:99:c2:7e:52:88:19:91:25:
                    db:a7:02:f2:30:41:90:86:0f:a9:2a:61:df:3e:73:
                    98:93:7c:4a:4a:99:30:19:bc:a8:0b:74:95:e5:e1:
                    5d:28:cc:8e:10:f5:29:77:b9:1c:a2:99:9f:0c:95:
                    a9:f6:13:60:6e:f5:0e:39:58:b9:42:dc:08:1a:24:
                    46:6b:02:ea:a6:fa:69:ac:19:f7:28:d6:56:34:7e:
                    b8:f0:0d:d3:25:d3:5c:3a:be:d9:ab:b7:2a:02:ea:
                    25:5b:62:be:28:a2:aa:ca:2c:2b:8d:4f:83:ac:22:
                    f5:b9:1a:f7:b4:4d:09:6b:20:a3:79:90:5c:24:14:
                    3c:6d:60:6d:f6:0a:d7:63:f3:2a:b4:d6:13:ee:3b:
                    a2:b7:37:5c:09:97:e1:bd:38:67:7f:a2:6c:9c:bb:
                    df:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BD:27:01:0F:96:CA:61:CB:EB:97:83:E8:43:8E:29:1E:46:5D:96
            X509v3 Authority Key Identifier:
                keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:18:87:1d:9a:dc:bf:11:cb:65:b3:47:18:97:64:6a:16:06:
         60:e1:bd:bf:db:b9:01:04:2f:d2:52:c9:c7:aa:c4:09:2e:0f:
         11:d2:e8:16:cd:6d:d4:12:18:ef:f0:ad:ab:b8:e0:a2:de:b6:
         5b:e3:f1:9a:93:c8:27:9c:7b:c9:c5:dd:6b:ff:b8:7a:f1:92:
         f9:c0:cb:f3:b5:a6:13:93:07:a3:7f:d1:c3:45:88:b3:a0:25:
         1b:e3:a4:9c:84:62:61:a1:48:5c:be:8f:2b:fe:9e:3d:c0:d2:
         df:57:f7:d8:16:47:6d:56:f6:fa:6e:f4:d6:82:7b:e2:5a:79:
         36:df:93:72:60:35:c7:51:66:ec:92:d0:f6:c4:59:d0:10:70:
         0e:1c:5f:c1:62:56:c6:85:13:69:4d:90:9d:e6:b6:ac:ef:57:
         f4:fc:83:71:8d:54:f5:8b:b7:77:0e:84:91:d9:93:47:2e:63:
         ff:09:63:19:a7:61:e9:d6:61:c0:f0:06:ee:c7:f9:d8:3d:cc:
         5d:71:43:c8:3d:90:02:01:cd:ee:44:82:08:8e:9c:89:30:35:
         38:5f:3a:49:24:5a:67:87:b7:85:42:ea:dc:f8:15:68:d6:28:
         45:dc:f1:11:78:2a:8b:2c:6e:00:6f:0b:0a:d0:00:3b:09:c7:
         08:73:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:27 2026 by rpki-client