Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
File:                     l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json)
Hash identifier:          bi8+Jv1QMODyOkAjPUWvRoYLrlYHDfxEjEN4GG9nsk0=
Subject key identifier:   75:40:1C:4D:36:AE:53:57:48:B7:61:FB:DC:45:86:F9:E0:43:FC:0A
Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7
Certificate issuer:       /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
Manifest number:          F7
Signing time:             Sun 01 Mar 2026 23:10:27 +0000
Manifest this update:     Sun 01 Mar 2026 23:10:26 +0000
Manifest next update:     Sun 08 Mar 2026 23:10:26 +0000
Files and hashes:         1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: I6zlqu9BnJicJqzXABH5RhsVHlvRH/PSA2mu712IzHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl
                          rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
        Validity
            Not Before: Mar  1 23:10:26 2026 GMT
            Not After : Mar  8 23:10:26 2026 GMT
        Subject: CN=69a4c763-db82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:19:67:e7:71:ed:45:33:3e:24:7e:6f:e4:
                    19:dc:2b:34:52:db:ef:d5:7a:e1:95:0c:2f:19:85:
                    48:98:79:df:6a:c2:96:2f:ac:e6:7c:56:a3:18:ee:
                    b7:0d:a9:94:c5:53:51:af:cc:ff:c9:c8:12:e9:a2:
                    8e:b4:71:9a:e8:aa:47:6e:ba:de:3b:e6:dd:51:cf:
                    50:c7:f3:22:00:92:ed:cb:0c:41:f1:de:e5:bc:95:
                    a9:65:06:98:d2:d3:7c:67:8b:b7:d2:68:e9:12:90:
                    7c:db:db:c8:b2:71:86:b8:c5:77:41:56:26:d7:c5:
                    0d:1d:f4:c7:a9:fd:42:9a:15:e0:86:2e:e3:f2:24:
                    e2:a4:d4:ce:f2:b1:f7:8b:7a:b3:61:a8:df:dd:e0:
                    3c:bb:d9:11:f3:a8:3b:c0:91:99:00:ff:19:a0:8a:
                    92:ee:0c:3b:a2:18:62:51:8e:d3:36:4e:76:35:7a:
                    c2:41:df:7e:51:ba:f1:64:28:11:0f:fc:38:0f:e3:
                    2a:e4:f2:e7:ee:bb:f6:ee:fa:3b:63:c9:54:72:81:
                    9b:0f:a7:55:4b:5c:58:14:b8:37:fe:6e:3a:80:c2:
                    1d:73:77:b9:1a:8e:c5:e3:c9:8d:1b:6c:3f:96:81:
                    4a:d7:60:4b:3e:50:9e:5e:21:0a:56:37:88:85:e9:
                    f7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:40:1C:4D:36:AE:53:57:48:B7:61:FB:DC:45:86:F9:E0:43:FC:0A
            X509v3 Authority Key Identifier:
                keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:dd:d7:b6:50:e4:ff:3a:4c:21:8d:bf:f4:e3:de:a4:d1:6c:
         ec:82:ba:68:b3:9d:be:2f:31:e7:1c:f6:ff:72:e2:f2:20:5c:
         be:21:36:e9:d3:0b:2e:e7:c8:d0:2b:68:3a:54:f7:22:c7:50:
         cb:2f:12:a3:02:f6:f9:34:2d:72:9a:55:af:96:be:28:6e:23:
         dc:03:69:19:a1:9b:54:29:02:ca:72:87:52:db:b5:a3:c7:b4:
         4c:b5:12:53:33:b7:80:96:b7:7d:f1:73:e9:09:9c:d6:38:18:
         72:dc:c5:c4:6b:1d:35:5a:92:c4:a7:42:03:4c:11:26:a6:45:
         4a:4d:66:55:29:0b:6f:e0:e4:4c:be:04:3b:d0:83:73:37:8f:
         2d:ff:e2:a0:23:a4:3c:98:6f:f0:64:34:4c:a0:7b:2c:e3:6c:
         77:ea:e0:61:1e:66:10:3a:6d:ee:5d:48:c7:7e:4d:1a:61:87:
         d7:53:15:63:67:89:42:b1:73:0a:3c:3c:d0:6b:4d:fc:2e:78:
         ed:31:50:4f:29:7a:13:97:4e:30:0a:5a:a3:cc:c1:c2:5a:4f:
         da:11:9e:4b:d4:04:18:b9:2e:e6:a1:14:ec:64:fc:a5:f3:28:
         3e:ad:78:8b:58:11:ba:d9:f1:70:87:6f:fa:65:c5:b5:34:1c:
         63:9b:5e:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA2OUExMTAvBgNVBAUTKDk3NEI0QTU2NTQ4NkUwNDhEMEMxNzY5OEQ3MjI3Njcw
Q0YzQzk5QTcwHhcNMjYwMzAxMjMxMDI2WhcNMjYwMzA4MjMxMDI2WjAYMRYwFAYD
VQQDEw02OWE0Yzc2My1kYjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0GUZZ+dx7UUzPiR+b+QZ3Cs0Utvv1XrhlQwvGYVImHnfasKWL6zmfFajGO63
DamUxVNRr8z/ycgS6aKOtHGa6KpHbrreO+bdUc9Qx/MiAJLtywxB8d7lvJWpZQaY
0tN8Z4u30mjpEpB829vIsnGGuMV3QVYm18UNHfTHqf1CmhXghi7j8iTipNTO8rH3
i3qzYajf3eA8u9kR86g7wJGZAP8ZoIqS7gw7ohhiUY7TNk52NXrCQd9+UbrxZCgR
D/w4D+Mq5PLn7rv27vo7Y8lUcoGbD6dVS1xYFLg3/m46gMIdc3e5Go7F48mNG2w/
loFK12BLPlCeXiEKVjeIhen3mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHVAHE02
rlNXSLdh+9xFhvngQ/wKMB8GA1UdIwQYMBaAFJdLSlZUhuBI0MF2mNcidnDPPJmn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8zNkQ1RDYyQzlC
RjAxMUVGODFDOTAyNjdDNEY5QUUwMi9sMHRLVmxTRzRFalF3WGFZMXlKMmNNODht
YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wwdEtWbFNHNEVqUXdYYVkxeUoyY004OG1hYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDY5QS8zNkQ1RDYyQzlCRjAxMUVGODFDOTAyNjdDNEY5QUUwMi9sMHRLVmxTRzRF
alF3WGFZMXlKMmNNODhtYWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP93XtlDk/zpMIY2/9OPepNFs7IK6aLOdvi8x5xz2/3Li8iBcviE26dMLLufI
0CtoOlT3IsdQyy8SowL2+TQtcppVr5a+KG4j3ANpGaGbVCkCynKHUtu1o8e0TLUS
UzO3gJa3ffFz6Qmc1jgYctzFxGsdNVqSxKdCA0wRJqZFSk1mVSkLb+DkTL4EO9CD
czePLf/ioCOkPJhv8GQ0TKB7LONsd+rgYR5mEDpt7l1Ix35NGmGH11MVY2eJQrFz
Cjw80GtN/C547TFQTyl6E5dOMApao8zBwlpP2hGeS9QEGLku5qEU7GT8pfMoPq14
i1gRutnxcIdv+mXFtTQcY5telw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:49:08 2026 by rpki-client