Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
File:                     MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json)
Hash identifier:          oRhUM0wPs0fUCpWbaH+9i3IAI2B1iBUKY6XxqoEVrAw=
Subject key identifier:   8D:03:54:C4:64:BE:86:55:14:F2:37:72:61:88:17:C2:8F:C6:00:47
Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
Certificate issuer:       /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
Manifest number:          036F
Signing time:             Sun 01 Mar 2026 03:18:33 +0000
Manifest this update:     Sun 01 Mar 2026 03:18:32 +0000
Manifest next update:     Sun 08 Mar 2026 03:18:32 +0000
Files and hashes:         1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: 8CcIez4CbgCTqQu8S+dRBDRaFUPlX/nmmse206AmK/I=)
                          2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: d1kPy/eiI5YE+DwwaFZQ8lzq73y437eEPrtNiOguvKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
                          rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
        Validity
            Not Before: Mar  1 03:18:32 2026 GMT
            Not After : Mar  8 03:18:32 2026 GMT
        Subject: CN=69a3b009-d2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:40:e0:ec:ea:23:50:66:86:b2:56:a0:57:
                    33:91:a4:6a:15:04:88:27:30:89:85:64:63:e6:ea:
                    b6:96:4a:8f:67:a0:6c:d4:07:c9:28:a5:57:cf:ad:
                    60:30:f8:6e:b9:49:ad:be:0c:cb:02:43:8d:46:ab:
                    6b:8e:f5:70:26:e4:85:6a:12:67:05:5f:f7:db:74:
                    2d:ea:37:f5:39:90:e8:8b:e1:97:eb:71:f7:df:3e:
                    fd:03:8c:1f:de:fe:ba:9e:48:cc:9f:8c:62:c0:b9:
                    cb:fe:29:a8:2d:b9:36:50:44:98:69:01:78:6a:26:
                    ef:9a:65:44:2a:3b:06:8d:67:3f:92:73:bc:77:3b:
                    f8:0d:57:dd:87:ec:e3:f8:ad:82:1a:59:5a:2a:c0:
                    4e:b6:96:56:98:80:57:d0:9d:46:d4:c2:bb:8a:8d:
                    ef:6f:27:9f:91:00:77:d1:07:8f:be:eb:ef:b5:c7:
                    b3:d0:19:66:87:b3:4e:44:a3:4f:7f:d5:e8:35:84:
                    8a:d6:4f:dd:43:ac:33:4d:c6:58:12:29:c6:70:10:
                    10:eb:af:a1:86:f0:f8:6d:78:e0:1f:ea:76:18:91:
                    6c:0b:38:97:9e:cf:07:71:36:db:9c:98:6e:37:96:
                    1f:6a:56:30:bd:6d:fc:69:fc:37:dc:57:03:98:54:
                    b4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:03:54:C4:64:BE:86:55:14:F2:37:72:61:88:17:C2:8F:C6:00:47
            X509v3 Authority Key Identifier:
                keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:80:d6:1e:c9:4f:6f:bf:b6:6f:82:f3:e3:49:51:59:38:ea:
         cd:78:0b:e6:21:47:ac:25:b7:fb:71:96:7f:8f:7c:b6:30:d0:
         cb:ce:bd:ad:15:81:f9:54:29:a4:a6:28:ca:31:d1:21:39:e8:
         63:24:02:36:8e:a5:9b:5e:9d:e6:56:1e:27:96:ac:c0:ca:52:
         8a:5f:c7:17:f0:78:c9:39:64:02:09:1e:36:9e:8e:79:14:8f:
         48:8b:20:69:6d:09:96:33:db:8b:9a:ee:0d:3c:66:79:e4:a7:
         07:71:21:e7:02:63:b3:6a:01:05:a9:4c:9d:f0:3a:cd:9f:c2:
         12:e0:f4:bb:6d:62:74:37:76:43:32:e9:f0:2c:da:fe:f1:c2:
         53:d3:b2:29:80:b0:6f:fb:90:c4:66:e1:c9:00:55:25:ba:ae:
         85:f6:3b:db:aa:42:3f:72:5e:ee:5c:4c:64:88:bf:42:dd:8f:
         60:c7:d0:aa:5c:45:15:89:00:fc:3e:25:2b:dd:34:74:52:0a:
         fc:d6:66:40:a9:31:69:14:92:82:da:da:8c:1e:17:6f:79:1b:
         6d:0c:cf:60:01:25:14:3b:e1:10:63:46:ef:87:14:e9:cb:a9:
         14:e0:51:5f:ef:55:4d:fd:66:37:da:fd:ed:06:0c:3f:e5:97:
         68:de:63:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY3RDUxMTAvBgNVBAUTKDMxREM0QjZDMzJEN0I1RTVGM0E4NjAxNzM4ODVBNjQ1
RjRGQzAxNTIwHhcNMjYwMzAxMDMxODMyWhcNMjYwMzA4MDMxODMyWjAYMRYwFAYD
VQQDDA02OWEzYjAwOS1kMmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtlFA4OzqI1BmhrJWoFczkaRqFQSIJzCJhWRj5uq2lkqPZ6Bs1AfJKKVXz61g
MPhuuUmtvgzLAkONRqtrjvVwJuSFahJnBV/323Qt6jf1OZDoi+GX63H33z79A4wf
3v66nkjMn4xiwLnL/imoLbk2UESYaQF4aibvmmVEKjsGjWc/knO8dzv4DVfdh+zj
+K2CGllaKsBOtpZWmIBX0J1G1MK7io3vbyefkQB30QePvuvvtcez0Blmh7NORKNP
f9XoNYSK1k/dQ6wzTcZYEinGcBAQ66+hhvD4bXjgH+p2GJFsCziXns8HcTbbnJhu
N5YfalYwvW38afw33FcDmFS0gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0DVMRk
voZVFPI3cmGIF8KPxgBHMB8GA1UdIwQYMBaAFDHcS2wy17Xl86hgFziFpkX0/AFS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0
MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRlWHpxR0FYT0lXbVJmVDhB
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFWSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRl
WHpxR0FYT0lXbVJmVDhBVkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHYDWHslPb7+2b4Lz40lRWTjqzXgL5iFHrCW3+3GWf498tjDQy869rRWB+VQp
pKYoyjHRITnoYyQCNo6lm16d5lYeJ5aswMpSil/HF/B4yTlkAgkeNp6OeRSPSIsg
aW0JljPbi5ruDTxmeeSnB3Eh5wJjs2oBBalMnfA6zZ/CEuD0u21idDd2QzLp8Cza
/vHCU9OyKYCwb/uQxGbhyQBVJbquhfY726pCP3Je7lxMZIi/Qt2PYMfQqlxFFYkA
/D4lK900dFIK/NZmQKkxaRSSgtrajB4Xb3kbbQzPYAElFDvhEGNG74cU6cupFOBR
X+9VTf1mN9r97QYMP+WXaN5joA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:11 2026 by rpki-client