Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
File:                     Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft (raw, json)
Hash identifier:          JwdHOAonZtsk07rA7aPMIOzklkrtcC2wnsypeO2Cw04=
Subject key identifier:   6C:38:C1:5D:AC:E2:5A:A4:B7:65:25:EE:C6:F8:CE:00:38:D2:F7:81
Authority key identifier: 4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2
Certificate issuer:       /CN=A91733A8/serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
Certificate serial:       0216
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
Manifest number:          0216
Signing time:             Mon 02 Mar 2026 00:58:08 +0000
Manifest this update:     Mon 02 Mar 2026 00:58:07 +0000
Manifest next update:     Mon 09 Mar 2026 00:58:07 +0000
Files and hashes:         1: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl (hash: 8tjP0Uc30pnqu+S9EjLp8x5Owfu3hLAXUGyh2+hhLr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl
                          rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91733A8, serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
        Validity
            Not Before: Mar  2 00:58:07 2026 GMT
            Not After : Mar  9 00:58:07 2026 GMT
        Subject: CN=69a4e09f-9c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:9e:ce:44:ff:a2:a1:45:d7:b4:70:55:33:
                    56:e3:e3:51:9e:97:8d:81:57:76:2d:15:4c:53:f0:
                    70:53:e5:4c:40:ba:e1:86:5b:c7:50:bd:fc:75:67:
                    74:07:92:74:35:a3:5c:ca:fb:a6:5c:e2:30:1a:6f:
                    be:02:8f:92:f1:0c:c4:03:f6:8a:f7:70:8d:5c:4a:
                    ef:62:60:cf:52:a7:5e:3b:aa:2d:99:bd:69:bc:ef:
                    0d:ed:d3:a0:4c:f4:0d:4a:3f:54:6a:ce:7c:df:c5:
                    fa:dd:f6:92:2e:31:80:9c:86:4b:f3:e4:31:39:9f:
                    45:fb:b2:6e:37:c9:fb:de:eb:4c:7c:3d:be:03:70:
                    2e:53:bb:c5:52:0a:25:1a:3b:20:1c:76:d0:12:e0:
                    33:99:aa:c0:c8:b2:d9:4e:33:da:5f:b9:89:f3:50:
                    99:64:b2:50:68:c0:74:5a:14:ae:c2:19:00:30:0b:
                    a3:b1:ff:78:2a:b1:97:b2:e8:c2:da:37:15:6b:97:
                    47:dc:c1:01:7b:d9:6a:7b:13:6a:8b:78:dc:04:ad:
                    66:44:0a:54:c0:58:c9:87:cc:c3:ea:2d:25:0f:db:
                    f6:4d:50:f6:b4:b6:71:8f:37:c4:62:db:88:9a:77:
                    31:ec:36:f9:53:08:9f:b3:c7:41:de:1e:9a:2f:f6:
                    16:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:38:C1:5D:AC:E2:5A:A4:B7:65:25:EE:C6:F8:CE:00:38:D2:F7:81
            X509v3 Authority Key Identifier:
                keyid:4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:87:81:56:11:be:62:1f:73:4b:c6:8a:13:66:8e:20:76:f7:
         fb:af:7f:65:b0:32:08:c0:d3:d8:64:02:c8:48:a7:eb:b8:ff:
         2d:83:55:c2:60:fc:cd:48:46:54:a2:f7:21:fb:9c:ad:63:90:
         5a:3d:86:66:c6:20:11:27:5e:b7:29:a6:e6:69:b5:be:26:c2:
         70:3c:22:a3:2c:02:2b:fe:8c:38:02:fe:b5:fb:5c:85:55:c8:
         d9:65:d0:e9:50:dd:b3:8e:4e:43:4b:e3:c4:6b:90:0f:8f:52:
         d6:87:fa:11:4f:39:d3:56:ff:da:ab:b1:7b:eb:10:7d:24:cd:
         ff:2f:a8:12:cb:0e:46:41:f8:7f:66:69:df:26:be:97:70:fd:
         6c:92:65:db:10:6a:8c:d1:cb:f7:26:fc:d8:cb:18:7b:fa:94:
         fd:1c:fa:56:b5:3d:b6:8e:db:e7:87:fc:be:0e:e4:57:d5:8b:
         05:13:c0:8d:9d:0f:6f:09:a8:82:c1:86:d1:91:8b:f2:3a:03:
         ce:ca:d0:7d:ad:76:8c:64:56:cc:bb:c1:b7:2a:83:ae:52:7c:
         f9:f3:93:4a:2e:7f:56:75:5f:b2:d0:67:41:fe:64:10:05:48:
         24:1a:44:aa:e2:4a:19:f0:9d:c7:9a:3b:50:7d:21:dc:22:27:
         6b:60:3d:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMzQTgxMTAvBgNVBAUTKDRFMjc2RkU5NDgxM0E1RDcwOEFGODY2RDYxRDYyMTM0
MEZDMDUxQjIwHhcNMjYwMzAyMDA1ODA3WhcNMjYwMzA5MDA1ODA3WjAYMRYwFAYD
VQQDEw02OWE0ZTA5Zi05YzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUyezkT/oqFF17RwVTNW4+NRnpeNgVd2LRVMU/BwU+VMQLrhhlvHUL38dWd0
B5J0NaNcyvumXOIwGm++Ao+S8QzEA/aK93CNXErvYmDPUqdeO6otmb1pvO8N7dOg
TPQNSj9Uas5838X63faSLjGAnIZL8+QxOZ9F+7JuN8n73utMfD2+A3AuU7vFUgol
GjsgHHbQEuAzmarAyLLZTjPaX7mJ81CZZLJQaMB0WhSuwhkAMAujsf94KrGXsujC
2jcVa5dH3MEBe9lqexNqi3jcBK1mRApUwFjJh8zD6i0lD9v2TVD2tLZxjzfEYtuI
mncx7Db5Uwifs8dB3h6aL/YWuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGw4wV2s
4lqkt2Ul7sb4zgA40veBMB8GA1UdIwQYMBaAFE4nb+lIE6XXCK+GbWHWITQPwFGy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC9FODY0NDBEOEVG
QzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBkY0lyNFp0WWRZaE5BX0FV
YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL1RpZHY2VWdUcGRjSXI0WnRZZFloTkFfQVViSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzNBOC9FODY0NDBEOEVGQzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBk
Y0lyNFp0WWRZaE5BX0FVYkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAz4eBVhG+Yh9zS8aKE2aOIHb3+69/ZbAyCMDT2GQCyEin67j/LYNVwmD8zUhG
VKL3IfucrWOQWj2GZsYgESdetymm5mm1vibCcDwioywCK/6MOAL+tftchVXI2WXQ
6VDds45OQ0vjxGuQD49S1of6EU8501b/2quxe+sQfSTN/y+oEssORkH4f2Zp3ya+
l3D9bJJl2xBqjNHL9yb82MsYe/qU/Rz6VrU9to7b54f8vg7kV9WLBRPAjZ0Pbwmo
gsGG0ZGL8joDzsrQfa12jGRWzLvBtyqDrlJ8+fOTSi5/VnVfstBnQf5kEAVIJBpE
quJKGfCdx5o7UH0h3CIna2A95A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:10 2026 by rpki-client