Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
File:                     h6XSzfwKU6WS2h-P8ndToSk0N_g.mft (raw, json)
Hash identifier:          DvUroUCRgAes6w7G0+5zWm7vqHmFna9E3pyxcmp6A2E=
Subject key identifier:   BE:09:76:22:61:29:BE:04:A0:51:AB:A6:64:CB:27:38:1A:4A:58:89
Authority key identifier: 87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8
Certificate issuer:       /CN=A91E1BB0/serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
Manifest number:          37
Signing time:             Sun 01 Mar 2026 09:57:08 +0000
Manifest this update:     Sun 01 Mar 2026 09:57:08 +0000
Manifest next update:     Sun 08 Mar 2026 09:57:08 +0000
Files and hashes:         1: h6XSzfwKU6WS2h-P8ndToSk0N_g.crl (hash: o0zLpHNEX/9FnsPVvErDBAW638F9cmiW2wHhUMfg5cc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl
                          rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1BB0, serialNumber=87A5D2CDFC0A53A592DA1F8FF27753A1293437F8
        Validity
            Not Before: Mar  1 09:57:08 2026 GMT
            Not After : Mar  8 09:57:08 2026 GMT
        Subject: CN=69a40d74-95ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:96:39:97:34:b2:7a:0f:67:d8:3a:e2:a1:
                    45:51:75:6e:73:44:db:bd:45:87:50:3e:a8:2b:d9:
                    0d:d9:30:a3:e4:bc:4f:71:10:1a:22:2d:e3:3d:be:
                    fb:50:58:14:db:80:24:30:8f:16:81:f6:22:5a:7d:
                    a2:88:50:b5:a8:1e:9e:01:ae:12:5c:07:97:e8:48:
                    7a:ad:74:b6:0b:d5:c2:b1:85:8e:60:12:e5:d9:86:
                    d4:e3:2b:02:cc:d4:20:4e:ab:f0:b6:ad:67:55:fc:
                    ee:6b:a4:8c:ed:b5:3f:22:bf:39:e0:54:a9:cd:75:
                    63:c5:d8:aa:a1:ec:77:6a:4e:14:bf:b1:18:fa:56:
                    13:be:ff:66:4c:69:aa:65:f1:f1:e2:b4:c5:a9:31:
                    e0:16:70:91:9e:37:d1:59:d5:4c:23:29:f1:e8:44:
                    01:4b:f1:81:8d:78:90:f6:6a:e8:01:64:f8:82:8c:
                    75:a9:d3:23:12:13:b8:0c:db:ae:70:a0:31:bf:7d:
                    af:93:78:eb:76:8e:df:55:a5:75:6b:ad:41:1f:68:
                    e3:01:a5:ca:9d:cc:8d:ad:fd:df:a5:70:8f:34:59:
                    a3:59:49:3e:29:a0:5c:25:b8:4d:a2:8c:3c:42:ce:
                    5a:f1:8c:32:ad:56:33:d6:9c:86:73:7f:cf:69:9f:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:09:76:22:61:29:BE:04:A0:51:AB:A6:64:CB:27:38:1A:4A:58:89
            X509v3 Authority Key Identifier:
                keyid:87:A5:D2:CD:FC:0A:53:A5:92:DA:1F:8F:F2:77:53:A1:29:34:37:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6XSzfwKU6WS2h-P8ndToSk0N_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/5D6BF3DCC47811F094B85025C4F9AE02/h6XSzfwKU6WS2h-P8ndToSk0N_g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:49:bb:35:02:32:e4:a5:ec:0c:ef:89:ad:7c:7d:97:72:0d:
         9d:4b:c0:56:25:e0:8d:fe:8a:1e:bc:49:fa:b1:7d:fc:66:81:
         a6:98:d1:9e:f8:c7:4f:33:99:db:bb:4e:ca:28:ab:e2:a2:8b:
         74:28:ca:f0:c2:1a:ed:de:1b:a1:17:86:61:0f:44:5e:70:67:
         15:5c:32:2f:d9:64:1c:de:7f:69:27:eb:7f:17:77:38:2d:cc:
         7c:6e:36:7a:6f:8e:46:d7:67:be:a3:dd:65:cb:8f:b3:3c:36:
         5a:01:d2:d6:16:05:c6:d6:61:74:48:fe:75:24:62:df:a7:d4:
         80:be:20:ff:6a:de:0e:21:c1:42:3c:9f:ae:bb:9c:59:1d:66:
         3c:55:3d:4c:ab:5c:05:56:52:fc:62:00:54:a1:20:70:b6:fb:
         c4:84:2e:94:ba:98:6d:5c:89:c8:9c:e9:ee:e0:8a:97:98:f7:
         3b:5e:0f:94:90:f6:35:1c:d3:dc:ff:da:04:c1:b7:55:ff:6c:
         70:88:8e:91:53:63:f8:65:cc:f0:34:50:5e:bf:8f:cf:be:b0:
         43:69:f2:bc:a9:06:81:bb:92:ca:96:de:ff:90:c0:64:ec:dd:
         fb:42:5c:83:69:1b:55:46:8a:cb:0e:9a:31:cc:13:3c:8a:7b:
         6c:56:06:ba
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MUJCMDExMC8GA1UEBRMoODdBNUQyQ0RGQzBBNTNBNTkyREExRjhGRjI3NzUzQTEy
OTM0MzdGODAeFw0yNjAzMDEwOTU3MDhaFw0yNjAzMDgwOTU3MDhaMBgxFjAUBgNV
BAMTDTY5YTQwZDc0LTk1YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDWCJY5lzSyeg9n2DrioUVRdW5zRNu9RYdQPqgr2Q3ZMKPkvE9xEBoiLeM9vvtQ
WBTbgCQwjxaB9iJafaKIULWoHp4BrhJcB5foSHqtdLYL1cKxhY5gEuXZhtTjKwLM
1CBOq/C2rWdV/O5rpIzttT8ivzngVKnNdWPF2Kqh7HdqThS/sRj6VhO+/2ZMaapl
8fHitMWpMeAWcJGeN9FZ1UwjKfHoRAFL8YGNeJD2augBZPiCjHWp0yMSE7gM265w
oDG/fa+TeOt2jt9VpXVrrUEfaOMBpcqdzI2t/d+lcI80WaNZST4poFwluE2ijDxC
zlrxjDKtVjPWnIZzf89pn1IjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvgl2ImEp
vgSgUaumZMsnOBpKWIkwHwYDVR0jBBgwFoAUh6XSzfwKU6WS2h+P8ndToSk0N/gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQkIwLzVENkJGM0RDQzQ3
ODExRjA5NEI4NTAyNUM0RjlBRTAyL2g2WFN6ZndLVTZXUzJoLVA4bmRUb1NrME5f
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaDZYU3pmd0tVNldTMmgtUDhuZFRvU2swTl9nLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx
QkIwLzVENkJGM0RDQzQ3ODExRjA5NEI4NTAyNUM0RjlBRTAyL2g2WFN6ZndLVTZX
UzJoLVA4bmRUb1NrME5fZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAUSbs1AjLkpewM74mtfH2Xcg2dS8BWJeCN/ooevEn6sX38ZoGmmNGe+MdPM5nb
u07KKKvioot0KMrwwhrt3huhF4ZhD0RecGcVXDIv2WQc3n9pJ+t/F3c4Lcx8bjZ6
b45G12e+o91ly4+zPDZaAdLWFgXG1mF0SP51JGLfp9SAviD/at4OIcFCPJ+uu5xZ
HWY8VT1Mq1wFVlL8YgBUoSBwtvvEhC6UuphtXInInOnu4IqXmPc7Xg+UkPY1HNPc
/9oEwbdV/2xwiI6RU2P4ZczwNFBev4/PvrBDafK8qQaBu5LKlt7/kMBk7N37QlyD
aRtVRorLDpoxzBM8intsVga6
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:08 2026 by rpki-client