Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
File:                     TCb5fJV7v72Mqq_a-nlacx4RKtI.mft (raw, json)
Hash identifier:          kdyvp2lNhzXfbQJhkxwt22oDV3zQYSoieB/uG7Fc+aA=
Subject key identifier:   45:17:25:B4:1E:EF:AA:F7:E5:62:D4:B1:02:B2:EA:FB:92:3F:01:98
Authority key identifier: 4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2
Certificate issuer:       /CN=A91DBADA/serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
Manifest number:          B1
Signing time:             Sun 01 Mar 2026 08:25:12 +0000
Manifest this update:     Sun 01 Mar 2026 08:25:11 +0000
Manifest next update:     Sun 08 Mar 2026 08:25:11 +0000
Files and hashes:         1: TCb5fJV7v72Mqq_a-nlacx4RKtI.crl (hash: 21SPMX7cp/1fd8Mk6/Ckkv+0KVByryF2QoVe2j0Gk1I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl
                          rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBADA, serialNumber=4C26F97C957BBFBD8CAAAFDAFA795A731E112AD2
        Validity
            Not Before: Mar  1 08:25:11 2026 GMT
            Not After : Mar  8 08:25:11 2026 GMT
        Subject: CN=69a3f7e8-dc39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:99:1a:9d:e0:69:0c:82:a6:c7:16:92:1d:fd:
                    2b:3c:2f:8c:27:6a:8a:d7:aa:cb:b8:fa:8f:41:70:
                    50:42:ff:f8:9f:cf:c5:a5:92:e0:11:15:53:bf:4b:
                    b4:f4:68:49:ef:6f:d1:2c:0a:45:c1:fb:aa:89:19:
                    58:d1:3b:67:7d:c8:f5:5f:77:50:b4:7e:67:05:9b:
                    dd:f9:e2:b0:7b:2c:e6:bc:c8:95:02:68:4c:81:e1:
                    ac:d5:9a:01:1f:e7:ad:80:06:90:9c:cf:a0:0c:ad:
                    cc:96:22:e6:fd:73:d4:c7:0a:6f:1a:4c:27:6d:24:
                    ad:79:13:3c:33:f0:bb:c2:96:2a:03:e6:cc:55:16:
                    df:d0:c9:65:fb:e5:16:95:1b:80:94:3e:8a:c7:fc:
                    ba:79:90:c2:f9:ea:8e:84:5a:d5:71:e4:b3:55:b4:
                    e4:77:cc:6f:45:d4:9e:46:7d:bf:71:ef:a9:0f:d4:
                    ea:28:3c:0a:29:d2:a3:75:c4:29:27:11:28:b0:14:
                    12:fb:9c:da:2e:be:39:48:d0:56:74:10:f9:73:22:
                    4a:6a:5b:f5:cf:c3:aa:2e:ea:14:2e:43:f4:e5:e1:
                    51:d8:4b:04:dc:6a:06:55:ca:4a:59:58:5b:3b:6b:
                    7d:84:39:0c:50:49:51:e5:db:03:ee:58:c3:f3:29:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:17:25:B4:1E:EF:AA:F7:E5:62:D4:B1:02:B2:EA:FB:92:3F:01:98
            X509v3 Authority Key Identifier:
                keyid:4C:26:F9:7C:95:7B:BF:BD:8C:AA:AF:DA:FA:79:5A:73:1E:11:2A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCb5fJV7v72Mqq_a-nlacx4RKtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBADA/FB553D32095311F08547A213C4F9AE02/TCb5fJV7v72Mqq_a-nlacx4RKtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:90:d4:1f:96:6d:61:b3:a6:85:e2:d6:7c:83:40:41:6a:d8:
         44:fc:d3:0b:26:fe:d8:42:be:0c:ce:6a:fa:6d:29:af:8e:fb:
         f8:8a:27:a9:8d:26:78:1e:28:a1:c4:48:98:48:4a:70:29:a6:
         ba:10:23:1f:fd:92:45:e3:05:f5:f9:66:9d:95:c3:95:25:3d:
         89:f3:f0:45:46:00:7c:c5:26:08:57:01:2c:f5:30:0b:ca:1c:
         bd:82:fc:03:d6:56:31:d9:5e:fd:38:97:e2:b3:ef:7d:5f:02:
         7e:24:d8:e1:eb:26:b3:83:c4:ec:ff:67:3c:5b:ef:76:35:ef:
         da:89:e0:38:21:de:62:fb:54:99:0c:14:fe:07:a5:40:24:8a:
         02:ee:ad:6a:6d:b6:ed:7e:cd:df:67:3d:81:15:e6:4f:1e:45:
         dc:a8:de:86:51:5f:cd:d9:5c:fd:3d:91:44:51:a5:25:3d:92:
         02:cc:ab:44:7b:7c:f1:23:17:e7:73:f0:e9:0a:40:a5:5e:b5:
         68:1a:f4:4f:5f:30:ae:71:20:5c:86:28:b5:49:d4:03:90:c6:
         ce:28:4e:c2:f2:03:fe:3d:46:31:5f:0d:a6:e3:84:78:b5:42:
         a9:ff:cd:46:31:d8:09:f8:9a:fb:4e:40:f4:68:66:2c:e0:d1:
         fd:82:4b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:08 2026 by rpki-client