Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
File:                     FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json)
Hash identifier:          vNfwKKCIxfM1rA5vvbM2dP1yrS4wGkMHoBqYuJcp1Rk=
Subject key identifier:   5F:E9:5F:D5:8A:C7:4A:56:4A:2B:A4:95:B9:B2:5F:FE:48:FA:66:96
Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09
Certificate issuer:       /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
Certificate serial:       0CC8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
Manifest number:          1675
Signing time:             Mon 02 Mar 2026 18:17:14 +0000
Manifest this update:     Mon 02 Mar 2026 18:17:14 +0000
Manifest next update:     Mon 09 Mar 2026 18:17:14 +0000
Files and hashes:         1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: luPESJpfJZ3O1SyMvOLEMSqRENK7xfXB3sXCGoG+Bi0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl
                          rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 18:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3272 (0xcc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F08, serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
        Validity
            Not Before: Mar  2 18:17:14 2026 GMT
            Not After : Mar  9 18:17:14 2026 GMT
        Subject: CN=69a5d42a-7e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:2b:c8:55:a9:94:a3:d7:d6:79:89:a6:30:
                    23:03:1f:23:2a:c5:70:f2:01:9a:04:07:61:2b:d2:
                    b3:c0:a0:07:02:ca:8b:29:30:0f:7e:fb:bb:73:28:
                    bd:bc:9a:2f:4a:15:90:90:fc:b1:23:ad:51:84:1f:
                    cc:1a:1f:a1:af:b8:5d:52:ba:a4:9c:5c:16:2e:d5:
                    01:3e:d8:f6:bb:79:02:9e:f3:0b:d7:22:18:e6:7b:
                    22:2d:af:3a:50:af:d7:82:a0:ea:ad:51:46:52:a5:
                    74:f6:ae:a5:2c:b6:df:91:f8:00:55:ee:33:07:e5:
                    35:4d:e1:1f:c9:3b:6f:fb:c8:32:fe:29:23:9d:90:
                    cc:4d:4a:8f:99:c3:d2:4e:a6:88:77:4f:e7:82:7d:
                    90:7c:87:3b:78:79:42:26:a0:a9:9b:1b:47:e2:d3:
                    7d:44:18:7e:0d:ef:80:b9:cf:24:10:b0:d7:1b:7f:
                    0e:42:b8:61:48:5f:a8:2e:14:26:b4:85:78:ed:d9:
                    05:4d:94:54:62:ae:33:0a:06:78:93:38:68:8d:46:
                    72:d8:4f:68:b6:b3:a7:1e:2b:b2:9b:11:7b:d3:46:
                    8d:18:a1:d6:b0:12:e6:c3:bd:8e:4c:69:61:35:86:
                    b3:80:ac:78:a9:93:4d:bb:83:a5:09:07:ef:a8:d8:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E9:5F:D5:8A:C7:4A:56:4A:2B:A4:95:B9:B2:5F:FE:48:FA:66:96
            X509v3 Authority Key Identifier:
                keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:45:35:d3:94:11:a4:99:8d:dd:8b:bd:bc:64:5d:e3:50:c7:
         f4:08:5c:31:29:a2:41:72:5f:45:38:80:7e:20:46:f0:d1:e8:
         c1:d4:b0:8f:1e:0d:30:75:67:70:77:f5:f6:84:ab:c4:7b:df:
         e6:ee:b4:35:0e:03:15:38:c5:ff:30:ce:88:bb:33:83:da:7a:
         5d:25:db:3a:83:bb:05:f7:6a:0d:a0:fa:68:e4:15:26:0f:d0:
         0c:62:b2:44:e9:62:e8:88:99:86:6a:9b:c4:76:3c:d0:7c:cf:
         52:f7:dd:d4:4d:2b:22:a5:d9:e3:a3:83:47:2e:33:26:29:ad:
         fd:8b:17:7a:1e:56:12:11:03:bb:be:94:ba:54:e4:47:a2:11:
         02:8d:f1:27:6b:00:26:7c:5c:41:cf:db:1b:b9:00:35:52:21:
         c5:11:de:73:b4:31:40:90:aa:46:c2:37:dc:9e:f7:8d:7d:bf:
         32:b5:ed:d7:2a:a1:9c:d6:5e:c5:5e:e6:59:84:b2:7a:ba:5c:
         6c:45:31:74:c7:cd:03:b0:a4:33:5a:2c:77:4e:3a:35:ff:5e:
         cd:9a:d9:00:c3:76:59:86:86:fa:ca:58:fc:16:d3:89:3a:47:
         c5:9d:64:94:f3:17:29:6e:bf:64:8a:43:73:e8:32:a1:6e:aa:
         dc:e2:43:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThGMDgxMTAvBgNVBAUTKDE2MTNEMTE1RUQ4M0EwNkU5N0E3M0RBRTU1MTZCQTFC
Njg0RUVDMDkwHhcNMjYwMzAyMTgxNzE0WhcNMjYwMzA5MTgxNzE0WjAYMRYwFAYD
VQQDEw02OWE1ZDQyYS03ZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwnwryFWplKPX1nmJpjAjAx8jKsVw8gGaBAdhK9KzwKAHAsqLKTAPfvu7cyi9
vJovShWQkPyxI61RhB/MGh+hr7hdUrqknFwWLtUBPtj2u3kCnvML1yIY5nsiLa86
UK/XgqDqrVFGUqV09q6lLLbfkfgAVe4zB+U1TeEfyTtv+8gy/ikjnZDMTUqPmcPS
TqaId0/ngn2QfIc7eHlCJqCpmxtH4tN9RBh+De+Auc8kELDXG38OQrhhSF+oLhQm
tIV47dkFTZRUYq4zCgZ4kzhojUZy2E9otrOnHiuymxF700aNGKHWsBLmw72OTGlh
NYazgKx4qZNNu4OlCQfvqNh7HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/pX9WK
x0pWSiuklbmyX/5I+maWMB8GA1UdIwQYMBaAFBYT0RXtg6Bul6c9rlUWuhtoTuwJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3
RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9HNlhwejJ1VlJhNkcyaE83
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZoUFJGZTJEb0c2WHB6MnVWUmE2RzJoTzdBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9GaFBSRmUyRG9H
NlhwejJ1VlJhNkcyaE83QWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC0U105QRpJmN3Yu9vGRd41DH9AhcMSmiQXJfRTiAfiBG8NHowdSwjx4NMHVn
cHf19oSrxHvf5u60NQ4DFTjF/zDOiLszg9p6XSXbOoO7BfdqDaD6aOQVJg/QDGKy
ROli6IiZhmqbxHY80HzPUvfd1E0rIqXZ46ODRy4zJimt/YsXeh5WEhEDu76UulTk
R6IRAo3xJ2sAJnxcQc/bG7kANVIhxRHec7QxQJCqRsI33J73jX2/MrXt1yqhnNZe
xV7mWYSyerpcbEUxdMfNA7CkM1osd046Nf9ezZrZAMN2WYaG+spY/BbTiTpHxZ1k
lPMXKW6/ZIpDc+gyoW6q3OJDVw==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:34 2026 by rpki-client