Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
File:                     aBR3td5WajjZsBVtqHq6-p-vhb0.mft (raw, json)
Hash identifier:          IX6NH/g2UQyPuXxdGlJ7mkurCPuVobJstyUvU+JIMD8=
Subject key identifier:   19:39:5A:56:1F:8F:D1:03:A4:75:64:EF:7B:B7:62:F4:D6:C9:BA:B6
Authority key identifier: 68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD
Certificate issuer:       /CN=A91972DF/serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
Manifest number:          012D
Signing time:             Fri 17 Apr 2026 05:21:48 +0000
Manifest this update:     Fri 17 Apr 2026 05:21:47 +0000
Manifest next update:     Fri 24 Apr 2026 05:21:47 +0000
Files and hashes:         1: aBR3td5WajjZsBVtqHq6-p-vhb0.crl (hash: ZkPR5NjCHs0g2RY5+69nHcxZqiCRMSw4Z6YhiwEOnv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl
                          rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91972DF, serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
        Validity
            Not Before: Apr 17 05:21:47 2026 GMT
            Not After : Apr 24 05:21:47 2026 GMT
        Subject: CN=69e1c36b-318b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:41:7f:ac:28:7d:82:ef:92:b7:33:1b:83:
                    ac:fc:2a:00:7d:68:c6:c2:74:4d:5e:b7:0e:46:eb:
                    a4:a2:8a:c8:3d:a4:30:5c:fe:a2:1a:a8:5d:4b:de:
                    d2:44:e6:9c:3e:03:1b:9f:23:01:b2:a8:18:46:cb:
                    37:af:54:d7:17:0d:bf:16:59:1b:95:2e:b4:e3:a5:
                    28:04:29:41:58:6b:d1:ca:c9:0f:ab:45:48:1f:ec:
                    d5:ac:bc:5c:2f:ec:ce:b1:52:5b:f9:40:13:58:a7:
                    79:84:5b:cf:2c:e6:f1:ac:42:94:97:0c:ad:e5:51:
                    9d:ad:41:e5:e8:89:89:2e:cf:ab:b2:1b:5a:4d:62:
                    6d:9d:a9:02:48:ef:d3:20:77:95:45:0c:8a:d8:85:
                    6f:55:e4:81:d5:62:69:c9:22:bb:e0:15:19:fb:af:
                    aa:93:cb:c0:b2:ad:9d:84:fa:1c:a1:69:99:3b:f2:
                    3b:7c:c0:c8:66:67:b5:7b:2c:93:2a:a7:6a:eb:ee:
                    2e:d3:27:9a:e3:bf:0e:ff:af:fc:b8:b6:0e:2e:c4:
                    63:6e:87:c1:1e:d5:ea:80:23:8f:ef:2a:d0:6e:5f:
                    a4:d1:20:8d:b3:78:c9:ab:84:ad:cd:bb:82:a2:57:
                    12:82:7e:ad:32:ef:61:34:39:27:2d:be:41:7a:45:
                    52:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:39:5A:56:1F:8F:D1:03:A4:75:64:EF:7B:B7:62:F4:D6:C9:BA:B6
            X509v3 Authority Key Identifier:
                keyid:68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ea:de:a7:b6:9f:af:ac:13:c2:e4:0d:62:2e:eb:98:36:21:
         d4:fb:98:0e:37:c8:8d:08:3a:d4:b4:61:4a:f8:57:85:41:4c:
         97:f1:9e:3a:d9:d3:5c:a7:bc:68:1e:f2:c7:e9:13:69:d1:fd:
         d8:34:2a:fb:53:c1:37:82:51:8e:43:2b:e3:5b:dd:36:11:4d:
         a3:e8:47:7f:99:bb:ca:23:df:8f:1a:e6:d7:13:49:f5:e3:c5:
         18:bd:f6:f2:9d:4d:60:62:a2:4a:dc:14:b5:2e:dc:01:3d:de:
         b4:d7:78:17:7a:9b:40:82:8e:cc:9d:f7:d9:94:77:f1:68:e2:
         3f:6d:6e:3a:7f:3c:d7:1c:e0:63:57:0d:dc:e9:b8:19:3c:b3:
         dd:10:c8:e2:42:27:d5:40:f0:70:e3:5e:65:06:82:63:f5:4c:
         be:35:1e:9e:df:2f:d4:25:13:ec:d7:e8:54:72:ad:39:41:f5:
         ce:45:91:90:6c:48:1c:09:c0:05:6c:8a:79:db:00:71:da:f6:
         24:77:f1:2f:7a:f5:0f:01:11:32:f0:f6:b4:b3:41:53:c6:e9:
         53:3a:9d:fe:ac:77:82:a9:6a:ed:95:ad:36:25:45:ca:17:c9:
         e6:de:f1:71:08:d4:b8:a5:cd:4f:fc:45:d7:72:76:0d:3a:73:
         01:b1:48:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcyREYxMTAvBgNVBAUTKDY4MTQ3N0I1REU1NjZBMzhEOUIwMTU2REE4N0FCQUZB
OUZBRjg1QkQwHhcNMjYwNDE3MDUyMTQ3WhcNMjYwNDI0MDUyMTQ3WjAYMRYwFAYD
VQQDEw02OWUxYzM2Yi0zMThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtWhBf6wofYLvkrczG4Os/CoAfWjGwnRNXrcORuukoorIPaQwXP6iGqhdS97S
ROacPgMbnyMBsqgYRss3r1TXFw2/FlkblS6046UoBClBWGvRyskPq0VIH+zVrLxc
L+zOsVJb+UATWKd5hFvPLObxrEKUlwyt5VGdrUHl6ImJLs+rshtaTWJtnakCSO/T
IHeVRQyK2IVvVeSB1WJpySK74BUZ+6+qk8vAsq2dhPocoWmZO/I7fMDIZme1eyyT
Kqdq6+4u0yea478O/6/8uLYOLsRjbofBHtXqgCOP7yrQbl+k0SCNs3jJq4StzbuC
olcSgn6tMu9hNDknLb5BekVS3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBk5WlYf
j9EDpHVk73u3YvTWybq2MB8GA1UdIwQYMBaAFGgUd7XeVmo42bAVbah6uvqfr4W9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJERi9DQzc4Qjc2MjdD
MEIxMUVGODk0QTI5MTlDNEY5QUUwMi9hQlIzdGQ1V2FqalpzQlZ0cUhxNi1wLXZo
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FCUjN0ZDVXYWpqWnNCVnRxSHE2LXAtdmhiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzJERi9DQzc4Qjc2MjdDMEIxMUVGODk0QTI5MTlDNEY5QUUwMi9hQlIzdGQ1V2Fq
alpzQlZ0cUhxNi1wLXZoYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMOrep7afr6wTwuQNYi7rmDYh1PuYDjfIjQg61LRhSvhXhUFMl/GeOtnTXKe8
aB7yx+kTadH92DQq+1PBN4JRjkMr41vdNhFNo+hHf5m7yiPfjxrm1xNJ9ePFGL32
8p1NYGKiStwUtS7cAT3etNd4F3qbQIKOzJ332ZR38WjiP21uOn881xzgY1cN3Om4
GTyz3RDI4kIn1UDwcONeZQaCY/VMvjUent8v1CUT7NfoVHKtOUH1zkWRkGxIHAnA
BWyKedsAcdr2JHfxL3r1DwERMvD2tLNBU8bpUzqd/qx3gqlq7ZWtNiVFyhfJ5t7x
cQjUuKXNT/xF13J2DTpzAbFIbg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:28:55 2026 by rpki-client