Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
File:                     MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json)
Hash identifier:          5m7QXMf+NyNEIh9gCLJkbFXuMR2xwZqdjD54mC9Xh3o=
Subject key identifier:   43:AE:2B:6A:B5:8B:9B:B6:CA:6D:9A:DE:07:66:8A:45:45:24:EA:20
Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
Certificate issuer:       /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
Manifest number:          0121
Signing time:             Sun 01 Mar 2026 23:44:12 +0000
Manifest this update:     Sun 01 Mar 2026 23:44:10 +0000
Manifest next update:     Sun 08 Mar 2026 23:44:10 +0000
Files and hashes:         1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: oHvtnNZAxjSc6talC1oTd4EjcLdCyS7Z37bf+7txsls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
        Validity
            Not Before: Mar  1 23:44:10 2026 GMT
            Not After : Mar  8 23:44:10 2026 GMT
        Subject: CN=69a4cf4b-2ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:1b:04:16:49:ec:16:42:36:5a:09:11:7a:
                    d4:0d:64:05:c0:09:22:af:cd:f1:8e:16:e4:59:5d:
                    40:9a:fb:94:3e:ba:a1:25:b2:4e:18:b7:5c:85:44:
                    19:50:0d:75:18:2a:aa:2b:c7:5f:4c:4f:95:5f:90:
                    fd:44:14:33:80:ef:29:54:38:a7:df:28:68:07:bf:
                    d2:1f:e4:7b:79:87:82:6a:b6:88:1a:4b:de:16:d2:
                    64:2e:6e:b6:84:1b:a5:44:39:e2:ea:d0:48:31:04:
                    c5:cc:99:c4:ad:5c:b0:6d:d2:d3:df:d6:7f:6c:ed:
                    bf:ac:30:a6:68:5a:29:be:d4:56:b1:73:86:8d:f7:
                    8d:40:63:a2:61:b6:39:66:40:e0:b5:4b:b3:8f:3b:
                    ef:57:57:a4:51:77:82:e0:89:7d:5e:8a:e8:68:d8:
                    f7:64:32:80:8d:0f:06:fd:cd:74:e5:ee:22:5f:f2:
                    da:e4:ef:71:4a:46:fb:0e:07:ae:49:a5:cc:0d:52:
                    d3:68:62:24:67:ca:34:61:70:97:fa:a0:96:45:de:
                    82:00:ea:92:32:42:dc:a5:6a:59:2c:a2:3c:3a:c3:
                    a9:d8:7f:cb:05:ee:14:de:a3:52:ce:12:d2:af:ef:
                    70:41:1c:31:b8:16:d6:b6:32:0a:ff:1c:3c:43:aa:
                    83:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AE:2B:6A:B5:8B:9B:B6:CA:6D:9A:DE:07:66:8A:45:45:24:EA:20
            X509v3 Authority Key Identifier:
                keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:cb:5e:2b:ac:67:d2:56:bf:35:13:34:b3:18:f2:36:37:2d:
         a0:c9:00:65:ac:a3:3f:4e:0d:c8:50:a2:aa:41:1e:82:8c:7c:
         52:ed:7e:f5:b9:99:c9:c0:93:3d:c4:ff:db:93:93:04:19:57:
         ca:40:41:ad:1d:d9:bd:d1:2d:d0:55:ea:cb:6c:a0:09:93:a8:
         72:7c:05:ac:46:38:4f:3e:3e:a6:19:33:80:18:25:eb:1d:00:
         12:33:6c:9b:ff:3d:25:b9:a0:e4:64:9b:cd:72:6b:33:03:d9:
         a8:65:5c:76:66:34:7d:49:90:cc:60:5e:6f:10:f5:3b:03:9d:
         68:19:49:7d:27:03:de:d5:3e:bc:1d:31:9c:ad:db:b6:0a:41:
         3f:73:46:62:ab:c7:f4:05:6e:af:fc:6b:da:84:6b:87:f2:a0:
         2b:36:b8:32:5c:04:9e:00:32:f1:36:85:3d:91:7a:30:a5:3c:
         5a:58:e4:77:68:0e:ef:e6:1b:c6:e1:fa:cc:86:33:70:c5:ef:
         e2:6b:6c:4e:39:fd:8d:3b:5e:92:98:11:a6:3d:0b:de:70:8b:
         3a:49:c1:48:3e:ab:9c:e0:2b:02:6d:cc:2e:1c:c0:59:1e:1e:
         a8:74:20:d8:16:d4:0f:75:54:1e:4e:93:bc:9b:b6:23:b7:a2:
         10:76:23:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODgzRDMxMTAvBgNVBAUTKDMxN0E3MjdGRjYzRTI3QzI5Q0MwMUNCNjc5OTNFMkM2
MUYwODA0MUUwHhcNMjYwMzAxMjM0NDEwWhcNMjYwMzA4MjM0NDEwWjAYMRYwFAYD
VQQDEw02OWE0Y2Y0Yi0yYmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxyEbBBZJ7BZCNloJEXrUDWQFwAkir83xjhbkWV1AmvuUPrqhJbJOGLdchUQZ
UA11GCqqK8dfTE+VX5D9RBQzgO8pVDin3yhoB7/SH+R7eYeCaraIGkveFtJkLm62
hBulRDni6tBIMQTFzJnErVywbdLT39Z/bO2/rDCmaFopvtRWsXOGjfeNQGOiYbY5
ZkDgtUuzjzvvV1ekUXeC4Il9XoroaNj3ZDKAjQ8G/c105e4iX/La5O9xSkb7Dgeu
SaXMDVLTaGIkZ8o0YXCX+qCWRd6CAOqSMkLcpWpZLKI8OsOp2H/LBe4U3qNSzhLS
r+9wQRwxuBbWtjIK/xw8Q6qDaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOuK2q1
i5u2ym2a3gdmikVFJOogMB8GA1UdIwQYMBaAFDF6cn/2PifCnMActnmT4sYfCAQe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy85NTc2MDE2ODVF
MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4S2N3QnkyZVpQaXhoOElC
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01YcHlmX1ktSjhLY3dCeTJlWlBpeGg4SUJCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODNEMy85NTc2MDE2ODVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4
S2N3QnkyZVpQaXhoOElCQjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKsteK6xn0la/NRM0sxjyNjctoMkAZayjP04NyFCiqkEegox8Uu1+9bmZycCT
PcT/25OTBBlXykBBrR3ZvdEt0FXqy2ygCZOocnwFrEY4Tz4+phkzgBgl6x0AEjNs
m/89Jbmg5GSbzXJrMwPZqGVcdmY0fUmQzGBebxD1OwOdaBlJfScD3tU+vB0xnK3b
tgpBP3NGYqvH9AVur/xr2oRrh/KgKza4MlwEngAy8TaFPZF6MKU8Wljkd2gO7+Yb
xuH6zIYzcMXv4mtsTjn9jTtekpgRpj0L3nCLOknBSD6rnOArAm3MLhzAWR4eqHQg
2BbUD3VUHk6TvJu2I7eiEHYjpQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:29:12 2026 by rpki-client