Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
File:                     AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json)
Hash identifier:          qLame6sV52S2xdGIKLnIzJF9vIeSDAYEC1/XQmMQacc=
Subject key identifier:   48:4A:C4:87:7E:2A:31:4C:45:8A:54:15:83:A2:6B:5C:7B:8F:A7:72
Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
Certificate issuer:       /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
Certificate serial:       3516
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
Manifest number:          3516
Signing time:             Sat 28 Feb 2026 15:11:06 +0000
Manifest this update:     Sat 28 Feb 2026 15:11:05 +0000
Manifest next update:     Sat 07 Mar 2026 15:11:05 +0000
Files and hashes:         1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: hAPEr/mDKTXHKg5O7AOQ1+Q89awpMefAsEQ+puVdiG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl
                          rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13590 (0x3516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
        Validity
            Not Before: Feb 28 15:11:05 2026 GMT
            Not After : Mar  7 15:11:05 2026 GMT
        Subject: CN=69a3058a-641c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:13:13:67:0f:3a:0f:70:18:df:c9:62:04:
                    66:7e:5e:d8:32:67:a4:69:69:a8:48:62:4c:d2:b3:
                    9b:ef:bc:be:95:87:47:84:a4:67:21:ee:23:22:fa:
                    d8:bc:95:27:dc:ea:14:99:70:ab:e0:f3:60:b3:ed:
                    06:81:4c:5b:69:ee:8d:93:df:1d:17:92:bd:3a:8b:
                    1d:cd:7e:c4:6f:d1:ef:86:0d:9a:95:0f:b1:c8:e7:
                    79:fa:dd:c2:0c:d1:22:a7:03:f0:70:e7:03:2f:03:
                    09:bb:b5:01:93:e8:c8:da:9d:1d:89:0e:84:4d:fe:
                    b4:de:4c:9b:3f:9a:fb:9e:96:f5:bd:03:03:b9:3c:
                    49:02:06:6f:9d:7d:8f:ce:0a:e5:bb:d4:54:30:14:
                    5b:da:61:19:11:89:d3:86:b7:21:3d:bf:f7:7b:a5:
                    63:fc:68:58:7a:a4:99:34:80:aa:a5:a6:a9:33:f2:
                    88:31:c0:ee:02:50:b4:6c:d6:9b:90:21:93:b7:90:
                    8f:57:e1:c7:7e:f7:a9:3f:55:41:33:ca:1f:92:bb:
                    42:b8:d3:9b:e1:04:0d:38:97:f8:d0:7d:f0:31:72:
                    70:51:11:0f:a0:35:ed:2c:28:bf:ec:c3:12:45:aa:
                    d7:77:6b:aa:00:d9:c3:c0:8c:35:ea:4a:66:f4:bf:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4A:C4:87:7E:2A:31:4C:45:8A:54:15:83:A2:6B:5C:7B:8F:A7:72
            X509v3 Authority Key Identifier:
                keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d3:da:76:11:26:7b:a7:a8:6a:aa:26:1e:68:51:fc:96:df:
         53:4b:7a:1f:6d:fb:a0:ea:ff:26:af:ff:52:3f:ae:c6:2c:d6:
         92:fd:df:cf:91:43:03:1e:9d:c4:5f:30:19:7a:ec:e6:81:ac:
         aa:e0:f2:d5:9d:49:4e:e6:82:81:1a:92:c0:bc:38:a0:28:30:
         b4:50:69:5d:16:8b:6f:a9:dd:37:c7:e6:8e:32:ad:d2:22:66:
         65:e5:1e:2f:b1:11:1c:32:42:33:f5:9d:42:34:e3:76:a4:67:
         b2:8f:20:68:5e:a4:88:bb:27:7d:d3:52:ca:cc:bb:e0:3d:fc:
         ec:a6:af:5b:35:8c:d1:b1:97:bf:72:ba:c6:1d:d0:2f:06:b9:
         35:16:f1:2b:75:ee:f8:f5:d5:2e:2c:dc:a7:9c:75:e5:e3:b1:
         90:7c:07:22:bd:5b:e4:58:84:c5:a1:d7:7c:ea:54:27:f4:94:
         b6:bb:2b:63:10:db:09:bd:a0:da:0b:eb:95:ab:ab:19:18:be:
         29:86:c3:a7:47:5a:7a:66:55:de:66:96:d9:49:cf:24:19:e4:
         0b:89:24:69:00:ea:0f:47:65:12:46:22:57:88:d3:a9:32:cf:
         9c:4f:66:bf:56:f6:bb:ca:62:39:78:01:78:af:29:0a:7b:48:
         8a:ab:e2:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC
QzYzQUQ2NEUwHhcNMjYwMjI4MTUxMTA1WhcNMjYwMzA3MTUxMTA1WjAYMRYwFAYD
VQQDEw02OWEzMDU4YS02NDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmtUTE2cPOg9wGN/JYgRmfl7YMmekaWmoSGJM0rOb77y+lYdHhKRnIe4jIvrY
vJUn3OoUmXCr4PNgs+0GgUxbae6Nk98dF5K9OosdzX7Eb9Hvhg2alQ+xyOd5+t3C
DNEipwPwcOcDLwMJu7UBk+jI2p0diQ6ETf603kybP5r7npb1vQMDuTxJAgZvnX2P
zgrlu9RUMBRb2mEZEYnThrchPb/3e6Vj/GhYeqSZNICqpaapM/KIMcDuAlC0bNab
kCGTt5CPV+HHfvepP1VBM8ofkrtCuNOb4QQNOJf40H3wMXJwUREPoDXtLCi/7MMS
RarXd2uqANnDwIw16kpm9L91aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhKxId+
KjFMRYpUFYOia1x7j6dyMB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE
QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3
elNSMVloSkx0eGk4WTYxazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi9PadhEme6eoaqomHmhR/JbfU0t6H237oOr/Jq//Uj+uxizWkv3fz5FDAx6d
xF8wGXrs5oGsquDy1Z1JTuaCgRqSwLw4oCgwtFBpXRaLb6ndN8fmjjKt0iJmZeUe
L7ERHDJCM/WdQjTjdqRnso8gaF6kiLsnfdNSysy74D387KavWzWM0bGXv3K6xh3Q
Lwa5NRbxK3Xu+PXVLizcp5x15eOxkHwHIr1b5FiExaHXfOpUJ/SUtrsrYxDbCb2g
2gvrlaurGRi+KYbDp0daemZV3maW2UnPJBnkC4kkaQDqD0dlEkYiV4jTqTLPnE9m
v1b2u8piOXgBeK8pCntIiqvijA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:12 2026 by rpki-client