Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
File:                     4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json)
Hash identifier:          TsZ9VZnYcTK9t2qesaRPGWI2Bt5gxqWCCnXina9ck4Q=
Subject key identifier:   96:2A:47:0B:5A:00:F7:1A:88:59:A6:3A:AB:88:0F:6D:A7:05:DB:D6
Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
Certificate issuer:       /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
Manifest number:          ED
Signing time:             Sun 01 Mar 2026 07:36:38 +0000
Manifest this update:     Sun 01 Mar 2026 07:36:37 +0000
Manifest next update:     Sun 08 Mar 2026 07:36:37 +0000
Files and hashes:         1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: pp4uMt1NwGaN3lU6RRld/Nr8zQqPfjMoLZnq708U+jM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
                          rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
        Validity
            Not Before: Mar  1 07:36:37 2026 GMT
            Not After : Mar  8 07:36:37 2026 GMT
        Subject: CN=69a3ec86-ef78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:4a:bc:d4:9b:33:c1:b7:a2:00:3c:82:f5:
                    e5:55:61:36:50:34:f3:49:64:77:20:e4:5b:fa:11:
                    b2:c8:b8:4f:cb:91:28:30:be:ab:2e:56:7e:de:f8:
                    ab:c0:36:c3:c8:31:a1:9f:79:a0:0e:98:5a:32:15:
                    38:83:d6:a7:89:8a:4c:59:54:74:32:5a:de:a8:32:
                    eb:e9:37:6d:f2:f2:d5:9c:bf:a1:b3:c6:e9:bc:ec:
                    f9:82:3f:04:12:e1:80:25:e3:d4:f5:69:25:b7:5c:
                    c8:ac:1b:cc:46:a2:37:53:71:98:fe:83:24:18:1a:
                    f0:61:e0:b7:43:43:c7:d6:49:c3:7b:fd:f0:fa:bf:
                    4d:d1:52:a5:e9:0a:3a:19:7a:e6:ba:63:15:33:7a:
                    26:38:6a:cf:7a:88:37:33:97:00:c0:79:a9:43:b2:
                    ed:2e:2e:52:91:df:2a:47:1b:ce:e4:13:ed:b7:36:
                    21:4d:ef:f9:58:29:cb:56:77:94:c4:de:42:4c:e6:
                    9d:60:d2:0d:ff:09:fd:76:fc:ab:9d:81:58:d9:6b:
                    07:d7:b8:2b:74:7b:56:24:2f:70:7a:b4:d9:aa:d1:
                    61:9b:ec:e0:49:d4:c1:c5:9b:57:22:da:5c:60:d4:
                    00:a9:5e:f4:57:c9:77:cc:80:94:66:fa:cd:58:d1:
                    0b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2A:47:0B:5A:00:F7:1A:88:59:A6:3A:AB:88:0F:6D:A7:05:DB:D6
            X509v3 Authority Key Identifier:
                keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:71:53:d2:73:4f:9a:59:00:48:72:01:13:5a:2c:90:ea:bf:
         18:40:3f:4f:99:b6:eb:0b:19:d1:97:ae:46:f8:7e:eb:65:eb:
         cb:de:4b:ac:5c:e4:2c:9b:0c:02:0b:c4:11:4d:c3:69:ad:24:
         cf:80:60:3c:94:58:c0:37:09:26:c8:4f:a3:37:06:ce:1f:65:
         70:88:1f:e5:cb:ab:84:2c:02:70:da:f7:bc:a9:67:ae:f4:89:
         a8:fe:ae:ee:62:a3:6a:fd:e7:f6:08:f6:52:d2:3c:59:e9:86:
         1b:81:22:70:f3:bc:fb:20:22:46:6c:67:aa:b4:b8:42:44:dc:
         8e:91:23:9c:51:39:de:88:5e:9d:94:ba:7c:ce:63:84:0d:e5:
         51:8b:a6:d0:25:c2:50:bc:c3:61:93:47:0b:1b:19:a2:9c:92:
         a5:4f:2d:8e:a7:2b:fa:51:fb:47:df:82:cf:5d:19:06:28:af:
         fe:6a:8c:f1:cd:ea:77:53:c0:b0:b2:c2:40:67:c1:27:d4:20:
         a8:07:ad:59:84:b1:8a:6b:b0:0b:2a:cd:9f:9d:2a:73:8e:79:
         42:73:a8:11:15:ef:54:71:aa:7c:78:9c:ce:66:cb:0f:41:b5:
         1d:70:d0:1d:ae:70:48:e5:22:4c:1b:5f:7b:09:58:12:6f:c7:
         f9:41:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:12 2026 by rpki-client