Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
File:                     o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json)
Hash identifier:          cS35KDc9a5OH26oc8D7OEjU+ydHUyuXbOtx8KIgrB6U=
Subject key identifier:   FA:B3:C5:BE:B6:A3:95:C4:3F:28:AC:DD:AB:37:60:B6:79:74:3E:06
Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
Certificate issuer:       /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
Manifest number:          31
Signing time:             Sun 01 Mar 2026 10:05:41 +0000
Manifest this update:     Sun 01 Mar 2026 10:05:41 +0000
Manifest next update:     Sun 08 Mar 2026 10:05:41 +0000
Files and hashes:         1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: XQStddrLdZh8FH1zLuQutj48M8S3g5xp3nN6sI47Ops=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
                          rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
        Validity
            Not Before: Mar  1 10:05:41 2026 GMT
            Not After : Mar  8 10:05:41 2026 GMT
        Subject: CN=69a40f75-2aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:fc:8a:a2:45:ea:cb:87:19:92:c9:e1:09:
                    b3:04:3e:d7:9b:a4:55:2c:94:44:aa:f4:9a:df:2c:
                    e1:b5:7f:88:a4:3a:f7:60:25:56:a7:16:aa:dc:e4:
                    4d:b5:da:f7:1f:5e:c7:7f:00:1b:dd:4b:cd:79:44:
                    41:b0:49:4d:f0:c4:ac:fc:8d:84:41:cc:43:97:0c:
                    92:d0:75:5b:70:d8:43:5b:c3:70:12:ec:cf:06:e7:
                    2b:8c:ef:59:e8:6c:34:20:3c:c6:f4:d0:71:81:75:
                    d8:32:4e:86:e6:3f:14:78:38:6f:4f:eb:bf:90:2c:
                    8d:d0:60:86:c5:56:a2:b5:b6:bf:c9:13:b0:88:d9:
                    e7:83:b7:20:db:cd:c5:18:35:3f:7f:a1:71:08:8b:
                    9a:b2:db:28:4c:10:56:13:9e:08:bc:68:20:dd:64:
                    25:ba:f7:5a:b2:9d:c7:df:08:bd:da:0f:83:02:cd:
                    b0:c0:3d:a5:e0:07:31:02:76:96:c9:ee:9f:21:d4:
                    45:be:2e:bb:83:99:04:fb:87:38:07:63:d8:a1:f9:
                    f3:83:60:f0:2a:e3:6f:20:0b:41:3c:04:ce:53:c4:
                    4f:03:92:79:35:0a:6f:d1:35:fa:32:77:cd:9a:69:
                    58:d2:69:2d:e7:c7:b4:a8:cb:f7:3d:bc:fe:49:61:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B3:C5:BE:B6:A3:95:C4:3F:28:AC:DD:AB:37:60:B6:79:74:3E:06
            X509v3 Authority Key Identifier:
                keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:46:d8:8f:1d:a0:8e:86:44:cd:d2:4a:59:28:72:3a:9d:eb:
         6f:46:12:dd:b2:24:b9:0b:22:6d:ac:68:5b:e7:46:18:00:f1:
         43:87:1e:fd:f1:bd:42:27:12:02:59:07:9f:dc:e7:0a:98:ab:
         f9:7e:d1:f9:4a:5f:0f:ba:55:ad:82:8e:ea:c2:5d:b9:2c:54:
         03:f6:33:b2:65:e6:54:dc:ce:50:b5:7c:4e:18:24:29:99:b5:
         e7:39:1a:6e:76:b9:1f:28:29:29:42:37:fe:33:ca:9c:b4:af:
         ea:6e:cf:50:ab:e8:87:0f:b0:03:c8:09:79:23:c8:89:ae:76:
         21:f4:66:02:10:1b:48:5f:67:ab:c4:2d:a2:4e:04:77:e1:45:
         b8:1e:71:95:da:1b:ee:8c:5b:30:85:4d:b2:2c:b0:70:c7:43:
         a7:0a:c0:e5:3f:8f:14:86:df:5b:db:42:10:18:62:d2:ab:e6:
         c4:52:ee:1b:50:8e:7a:99:37:72:f8:c2:e0:8b:c8:4a:3e:89:
         5f:eb:9c:7e:79:99:29:52:74:97:55:2b:a7:69:75:d1:24:33:
         d5:7b:5b:43:78:24:b1:f9:70:43:8e:98:7d:94:b5:cd:e6:ad:
         70:3a:06:10:3c:4f:e9:11:48:9b:ff:df:1d:5b:b9:43:41:70:
         e7:69:63:4a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MTNENzExMC8GA1UEBRMoQTM4NzAyMTgyQjA5QUE2MTc4RUJDQUFCQjJGQ0Y4REE1
NEFERUI1MzAeFw0yNjAzMDExMDA1NDFaFw0yNjAzMDgxMDA1NDFaMBgxFjAUBgNV
BAMTDTY5YTQwZjc1LTJhYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5DfyKokXqy4cZksnhCbMEPtebpFUslESq9JrfLOG1f4ikOvdgJVanFqrc5E21
2vcfXsd/ABvdS815REGwSU3wxKz8jYRBzEOXDJLQdVtw2ENbw3AS7M8G5yuM71no
bDQgPMb00HGBddgyTobmPxR4OG9P67+QLI3QYIbFVqK1tr/JE7CI2eeDtyDbzcUY
NT9/oXEIi5qy2yhMEFYTngi8aCDdZCW691qyncffCL3aD4MCzbDAPaXgBzECdpbJ
7p8h1EW+LruDmQT7hzgHY9ih+fODYPAq428gC0E8BM5TxE8Dknk1Cm/RNfoyd82a
aVjSaS3nx7Soy/c9vP5JYV83AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+rPFvraj
lcQ/KKzdqzdgtnl0PgYwHwYDVR0jBBgwFoAUo4cCGCsJqmF468qrsvz42lSt61Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxM0Q3LzZGREMwMTZDQ0U4
QTExRjBCMkEyRDc2OUM0RjlBRTAyL280Y0NHQ3NKcW1GNDY4cXJzdno0MmxTdDYx
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbzRjQ0dDc0pxbUY0NjhxcnN2ejQybFN0NjFNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx
M0Q3LzZGREMwMTZDQ0U4QTExRjBCMkEyRDc2OUM0RjlBRTAyL280Y0NHQ3NKcW1G
NDY4cXJzdno0MmxTdDYxTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC6RtiPHaCOhkTN0kpZKHI6netvRhLdsiS5CyJtrGhb50YYAPFDhx798b1CJxIC
WQef3OcKmKv5ftH5Sl8PulWtgo7qwl25LFQD9jOyZeZU3M5QtXxOGCQpmbXnORpu
drkfKCkpQjf+M8qctK/qbs9Qq+iHD7ADyAl5I8iJrnYh9GYCEBtIX2erxC2iTgR3
4UW4HnGV2hvujFswhU2yLLBwx0OnCsDlP48Uht9b20IQGGLSq+bEUu4bUI56mTdy
+MLgi8hKPolf65x+eZkpUnSXVSunaXXRJDPVe1tDeCSx+XBDjph9lLXN5q1wOgYQ
PE/pEUib/98dW7lDQXDnaWNK
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:24 2026 by rpki-client