Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
File:                     jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json)
Hash identifier:          uw/I87TTdJyE9M+C1Wu16PrwujpL+sqM/VPMQ+kx8ZQ=
Subject key identifier:   D7:9A:C3:1B:B9:A4:0A:27:21:C9:73:84:EF:3F:2B:82:B8:9E:1A:CD
Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2
Certificate issuer:       /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
Manifest number:          011B
Signing time:             Sun 01 Mar 2026 06:49:11 +0000
Manifest this update:     Sun 01 Mar 2026 06:49:11 +0000
Manifest next update:     Sun 08 Mar 2026 06:49:11 +0000
Files and hashes:         1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: aOxFhheNDzsiTesHghWaoeVoYMg5VDJhx4hp20A3luQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl
                          rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4C1B, serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2
        Validity
            Not Before: Mar  1 06:49:11 2026 GMT
            Not After : Mar  8 06:49:11 2026 GMT
        Subject: CN=69a3e167-0fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:6d:57:5e:9f:4e:36:36:70:44:ef:1e:9d:
                    c7:51:18:6f:6b:d7:1e:9d:03:38:1e:9e:e7:70:e0:
                    7d:a5:a8:02:e6:42:20:3d:6f:c7:37:a2:f4:ce:7e:
                    f5:45:25:f9:88:00:ee:8a:e4:8c:61:c6:57:07:32:
                    75:45:58:fc:c1:fb:7e:41:2b:2f:2d:ca:03:ac:72:
                    f9:50:7a:e8:2f:2b:58:3d:bd:ef:d0:73:c3:b7:7f:
                    f5:c4:aa:f1:4b:ca:36:cf:e7:82:49:8a:4d:44:9f:
                    dc:0f:8a:b6:a3:99:b4:ab:41:c7:b4:88:8b:bc:43:
                    56:78:09:72:9e:5c:f7:1b:57:c0:b9:bb:cd:3d:14:
                    81:be:ca:79:1c:06:d1:fb:cf:fa:7d:f7:97:0d:e5:
                    7d:bb:5d:65:9d:30:a2:59:07:1c:bc:bd:17:06:09:
                    8d:27:27:a8:0f:72:3c:36:5b:2d:c0:df:63:c4:6a:
                    1a:89:1d:f4:0c:34:74:07:ce:62:2a:3c:7d:5c:57:
                    2f:67:7c:61:ae:d3:3b:87:4a:32:75:c0:04:11:c6:
                    ee:17:c3:6e:bc:12:60:69:e2:ae:77:2f:2c:4c:e8:
                    d9:73:a0:e2:de:b7:a5:70:ed:0f:ad:b0:2c:1c:c0:
                    db:eb:68:93:e8:48:73:c8:61:e6:63:e4:10:fc:71:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9A:C3:1B:B9:A4:0A:27:21:C9:73:84:EF:3F:2B:82:B8:9E:1A:CD
            X509v3 Authority Key Identifier:
                keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:28:62:16:69:e6:6a:02:78:bf:b9:81:f3:dc:6a:5d:4d:19:
         42:8b:30:f2:8c:98:d4:5d:32:b1:aa:6f:f6:ce:a8:b9:af:9a:
         11:49:b0:ca:f7:f0:bc:c3:47:0b:c1:4c:bd:ea:bd:17:52:61:
         9e:b7:d2:e7:9b:ed:9a:29:ba:25:7c:f7:c5:c4:ab:4c:7a:53:
         7a:0f:dc:69:d6:b4:6a:14:56:4b:24:16:a7:c8:ca:fe:14:08:
         5d:a3:cf:f0:a4:6a:5c:6b:ee:72:89:71:56:0a:f5:63:75:9f:
         91:e2:81:5a:ef:c3:de:52:a1:31:74:a9:2a:17:ad:2f:4d:ef:
         7b:d8:b5:53:0d:e0:6e:62:09:23:00:ec:d4:46:52:c0:05:87:
         2f:9d:b2:46:25:1d:95:73:dc:a3:98:41:79:9d:36:e8:eb:70:
         16:9d:11:3b:f6:44:00:0f:4a:7e:5d:c4:09:ca:43:af:60:43:
         b4:58:3a:6e:f7:51:a4:03:51:85:fe:ae:d9:58:20:c2:17:4a:
         86:a7:9a:e2:fd:a1:85:d5:41:6a:2e:bb:b5:7a:75:8f:7d:f2:
         6c:0a:2a:a4:2e:60:bd:58:03:d5:c5:8d:80:29:99:7f:9e:ee:
         06:c6:10:ac:56:6a:81:d6:5a:e3:48:96:31:89:7b:f2:17:c5:
         d6:83:84:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjRDMUIxMTAvBgNVBAUTKDhFOEIzNDYzOUVBNTRERjgxMEI5MkJDQkE3NDI3MDRF
NEM4ODQyQzIwHhcNMjYwMzAxMDY0OTExWhcNMjYwMzA4MDY0OTExWjAYMRYwFAYD
VQQDEw02OWEzZTE2Ny0wZmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+ttV16fTjY2cETvHp3HURhva9cenQM4Hp7ncOB9pagC5kIgPW/HN6L0zn71
RSX5iADuiuSMYcZXBzJ1RVj8wft+QSsvLcoDrHL5UHroLytYPb3v0HPDt3/1xKrx
S8o2z+eCSYpNRJ/cD4q2o5m0q0HHtIiLvENWeAlynlz3G1fAubvNPRSBvsp5HAbR
+8/6ffeXDeV9u11lnTCiWQccvL0XBgmNJyeoD3I8NlstwN9jxGoaiR30DDR0B85i
Kjx9XFcvZ3xhrtM7h0oydcAEEcbuF8NuvBJgaeKudy8sTOjZc6Di3relcO0PrbAs
HMDb62iT6EhzyGHmY+QQ/HHsywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNeawxu5
pAonIclzhO8/K4K4nhrNMB8GA1UdIwQYMBaAFI6LNGOepU34ELkry6dCcE5MiELC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9EOTY1QkE0MDY0
MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRmZ1F1U3ZMcDBKd1RreUlR
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pvczBZNTZsVGZnUXVTdkxwMEp3VGt5SVFzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NEMxQi9EOTY1QkE0MDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRm
Z1F1U3ZMcDBKd1RreUlRc0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVShiFmnmagJ4v7mB89xqXU0ZQosw8oyY1F0ysapv9s6oua+aEUmwyvfwvMNH
C8FMveq9F1JhnrfS55vtmim6JXz3xcSrTHpTeg/cada0ahRWSyQWp8jK/hQIXaPP
8KRqXGvucolxVgr1Y3WfkeKBWu/D3lKhMXSpKhetL03ve9i1Uw3gbmIJIwDs1EZS
wAWHL52yRiUdlXPco5hBeZ026OtwFp0RO/ZEAA9Kfl3ECcpDr2BDtFg6bvdRpANR
hf6u2VggwhdKhqea4v2hhdVBai67tXp1j33ybAoqpC5gvVgD1cWNgCmZf57uBsYQ
rFZqgdZa40iWMYl78hfF1oOEtw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:31:01 2026 by rpki-client