Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
File:                     aBR3td5WajjZsBVtqHq6-p-vhb0.mft (raw, json)
Hash identifier:          QEaYaKz5765GEVSiWPSN6ACodjW9YkorkYTmOyIi6Ic=
Subject key identifier:   E6:96:E1:23:2F:41:2E:54:F8:96:98:A0:95:DC:64:2D:98:D4:44:EE
Authority key identifier: 68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD
Certificate issuer:       /CN=A91972DF/serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
Manifest number:          0114
Signing time:             Sun 01 Mar 2026 07:02:05 +0000
Manifest this update:     Sun 01 Mar 2026 07:02:05 +0000
Manifest next update:     Sun 08 Mar 2026 07:02:05 +0000
Files and hashes:         1: aBR3td5WajjZsBVtqHq6-p-vhb0.crl (hash: GalEdSxJ9edRrnhVcZrJWqK8BThyn0mSsEiUMACqN+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl
                          rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91972DF, serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
        Validity
            Not Before: Mar  1 07:02:05 2026 GMT
            Not After : Mar  8 07:02:05 2026 GMT
        Subject: CN=69a3e46d-1edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:06:15:32:a9:19:dc:f4:42:31:b0:a5:74:
                    89:03:4b:ff:34:9c:c5:6b:97:c4:40:52:51:49:7b:
                    e9:bb:99:bd:2e:14:59:56:72:f0:53:e2:c3:bc:8f:
                    99:57:17:18:16:41:b4:87:0a:6b:c6:ed:76:33:79:
                    a5:af:c9:76:1c:0f:2d:a4:65:34:bc:c5:81:f9:1a:
                    01:0f:de:a6:66:e2:c1:89:39:a1:05:7c:1e:f2:24:
                    fb:ef:55:23:4f:f7:39:51:15:4f:56:63:18:ef:2c:
                    1d:b2:05:76:ed:34:86:72:ad:ea:5a:a4:a2:34:b6:
                    60:8e:8a:3d:c5:a0:51:dc:64:e3:7b:0a:b7:67:68:
                    8f:02:78:02:53:f6:de:8d:e9:42:10:53:e2:14:51:
                    11:ee:59:29:91:e4:e3:e1:25:b1:7f:9c:a0:61:15:
                    28:39:e8:c4:a7:07:67:35:f6:64:ab:85:8a:f3:8f:
                    c1:ca:ee:07:6d:28:c3:1f:39:06:3b:c0:a2:88:21:
                    e0:85:d0:99:e2:ad:31:fe:0b:02:62:3d:a0:d4:2c:
                    8d:0c:23:1e:91:74:59:fa:a8:a6:ec:a7:f9:43:4f:
                    f1:94:96:b2:31:f6:82:87:ea:69:5b:13:61:e2:e6:
                    03:03:3f:84:4b:c7:fa:bb:1f:82:22:49:23:4d:74:
                    c6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:96:E1:23:2F:41:2E:54:F8:96:98:A0:95:DC:64:2D:98:D4:44:EE
            X509v3 Authority Key Identifier:
                keyid:68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:99:a9:7a:13:ba:c2:ff:1a:72:aa:2c:22:d7:a0:73:73:ef:
         53:6d:66:56:66:cc:e7:49:5b:7c:5e:a1:2e:88:04:07:fa:00:
         b7:b2:6d:aa:c3:e8:6a:bc:cd:15:16:6d:21:b9:0d:61:b9:25:
         14:51:3b:64:72:40:f2:37:d1:16:62:08:4c:5f:8f:62:03:ab:
         2b:7e:28:12:47:e2:1f:69:b6:b2:28:e0:ed:45:ad:a3:01:4d:
         2f:ca:6d:4b:1b:f1:82:c4:8a:66:aa:a6:0d:71:9c:ed:fd:f0:
         a6:39:f0:91:eb:24:e1:8f:23:24:d6:1a:4b:bf:3f:92:64:a0:
         c5:85:96:fb:ac:4b:4c:9d:81:72:8e:37:fb:2f:80:3a:22:a7:
         17:63:87:e5:22:16:5e:e9:80:06:86:ac:4c:30:f1:13:7b:dd:
         37:5a:c6:53:d2:2c:da:f7:b6:0e:5d:a6:7e:96:d0:42:05:f8:
         aa:dc:2d:37:0e:3e:90:0b:5a:26:5c:a8:14:d9:30:8f:3b:92:
         08:da:f6:3a:f6:0d:5f:4c:b5:f7:4c:28:21:4e:f8:eb:07:ca:
         73:fd:f0:f2:35:bc:cc:0b:7d:51:a9:f7:16:29:96:28:3c:6c:
         9f:56:2e:a6:84:9b:43:79:45:a4:96:42:8d:30:f3:4a:ef:4f:
         13:f7:89:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcyREYxMTAvBgNVBAUTKDY4MTQ3N0I1REU1NjZBMzhEOUIwMTU2REE4N0FCQUZB
OUZBRjg1QkQwHhcNMjYwMzAxMDcwMjA1WhcNMjYwMzA4MDcwMjA1WjAYMRYwFAYD
VQQDEw02OWEzZTQ2ZC0xZWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzC0GFTKpGdz0QjGwpXSJA0v/NJzFa5fEQFJRSXvpu5m9LhRZVnLwU+LDvI+Z
VxcYFkG0hwprxu12M3mlr8l2HA8tpGU0vMWB+RoBD96mZuLBiTmhBXwe8iT771Uj
T/c5URVPVmMY7ywdsgV27TSGcq3qWqSiNLZgjoo9xaBR3GTjewq3Z2iPAngCU/be
jelCEFPiFFER7lkpkeTj4SWxf5ygYRUoOejEpwdnNfZkq4WK84/Byu4HbSjDHzkG
O8CiiCHghdCZ4q0x/gsCYj2g1CyNDCMekXRZ+qim7Kf5Q0/xlJayMfaCh+ppWxNh
4uYDAz+ES8f6ux+CIkkjTXTGYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaW4SMv
QS5U+JaYoJXcZC2Y1ETuMB8GA1UdIwQYMBaAFGgUd7XeVmo42bAVbah6uvqfr4W9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJERi9DQzc4Qjc2MjdD
MEIxMUVGODk0QTI5MTlDNEY5QUUwMi9hQlIzdGQ1V2FqalpzQlZ0cUhxNi1wLXZo
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FCUjN0ZDVXYWpqWnNCVnRxSHE2LXAtdmhiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzJERi9DQzc4Qjc2MjdDMEIxMUVGODk0QTI5MTlDNEY5QUUwMi9hQlIzdGQ1V2Fq
alpzQlZ0cUhxNi1wLXZoYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZpmpehO6wv8acqosItegc3PvU21mVmbM50lbfF6hLogEB/oAt7JtqsPoarzN
FRZtIbkNYbklFFE7ZHJA8jfRFmIITF+PYgOrK34oEkfiH2m2sijg7UWtowFNL8pt
SxvxgsSKZqqmDXGc7f3wpjnwkesk4Y8jJNYaS78/kmSgxYWW+6xLTJ2Bco43+y+A
OiKnF2OH5SIWXumABoasTDDxE3vdN1rGU9Is2ve2Dl2mfpbQQgX4qtwtNw4+kAta
JlyoFNkwjzuSCNr2OvYNX0y190woIU746wfKc/3w8jW8zAt9Uan3FimWKDxsn1Yu
poSbQ3lFpJZCjTDzSu9PE/eJhw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:18 2026 by rpki-client