Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
File:                     3UAamS3TKfk027INWAtMpyeQ37E.mft (raw, json)
Hash identifier:          5AQuWG9pLYE+3Ymma0f0BEVQhTNnxbSV39+j5dcgNyo=
Subject key identifier:   E1:CC:D9:40:81:E5:D6:11:B7:D7:9A:28:DF:53:A5:6B:02:A0:2C:66
Authority key identifier: DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1
Certificate issuer:       /CN=A91EAB64/serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1
Certificate serial:       044C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
Manifest number:          0670
Signing time:             Sun 01 Mar 2026 01:00:38 +0000
Manifest this update:     Sun 01 Mar 2026 01:00:38 +0000
Manifest next update:     Sun 08 Mar 2026 01:00:38 +0000
Files and hashes:         1: 3UAamS3TKfk027INWAtMpyeQ37E.crl (hash: 1AfKclVJw5anZa3Nsxj4K+4cq6O/r7karkGBgpaqM4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl
                          rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAB64, serialNumber=DD401A992DD329F934DBB20D580B4CA72790DFB1
        Validity
            Not Before: Mar  1 01:00:38 2026 GMT
            Not After : Mar  8 01:00:38 2026 GMT
        Subject: CN=69a38fb6-ca5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:2b:9b:86:33:83:4e:f0:d5:63:a1:3c:96:
                    82:a7:96:1e:41:db:4b:0d:07:ac:ad:b2:2a:11:2f:
                    1a:c4:65:6e:ee:ba:f9:a5:44:4c:1c:93:82:6b:23:
                    f6:1f:a1:39:2f:a6:8a:e4:c8:73:2f:20:5d:47:80:
                    63:ea:e1:1b:ef:80:8a:2f:08:0b:09:1d:1b:63:c0:
                    bc:41:12:36:40:a7:32:d0:29:3b:5f:de:5b:97:e3:
                    af:16:8e:b0:48:f0:8e:b2:63:53:5e:94:4b:b6:17:
                    73:ce:f1:31:3a:f2:88:31:52:32:55:23:be:b4:bf:
                    30:b7:82:e3:03:fe:2c:85:85:a3:4b:08:f1:eb:a3:
                    ed:d4:13:b4:1c:6e:77:ec:dc:f5:e3:f4:ef:d3:50:
                    0c:d7:16:08:64:15:62:9e:40:97:57:00:bc:33:81:
                    11:ca:b4:01:4a:83:13:6c:53:bd:50:8f:ff:00:90:
                    30:56:c3:6c:68:c5:cd:f6:35:c5:20:5e:cb:c1:95:
                    6e:c7:ee:b0:e1:9c:dd:0b:33:fe:ee:e2:83:a4:e8:
                    73:22:16:66:aa:f9:98:85:07:5b:27:1f:c9:d5:f8:
                    85:9d:5b:94:11:53:d5:92:b4:01:c5:e6:cd:7b:6e:
                    78:4e:b3:de:97:ce:27:37:08:af:17:38:b2:55:ed:
                    ab:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CC:D9:40:81:E5:D6:11:B7:D7:9A:28:DF:53:A5:6B:02:A0:2C:66
            X509v3 Authority Key Identifier:
                keyid:DD:40:1A:99:2D:D3:29:F9:34:DB:B2:0D:58:0B:4C:A7:27:90:DF:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UAamS3TKfk027INWAtMpyeQ37E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/3UAamS3TKfk027INWAtMpyeQ37E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7a:22:a2:f3:0d:a9:19:23:04:7d:10:56:93:08:02:6a:61:
         18:7f:9f:76:53:06:2a:4a:61:57:ad:aa:92:78:f9:71:23:f4:
         69:68:07:eb:52:9a:88:44:89:a6:23:76:3a:e2:2c:22:45:28:
         83:78:09:86:54:87:ac:ef:ba:9a:e6:d9:2d:fa:27:6e:b9:8e:
         83:01:0a:94:9a:6d:20:9a:6b:07:39:98:da:6a:39:d7:e4:22:
         21:9b:83:21:f0:6e:0c:b9:24:f9:24:e9:d8:72:7a:56:f4:ad:
         13:8c:96:65:c9:50:47:cc:b0:da:39:d4:af:61:5a:c7:cd:e9:
         6a:97:ed:0c:ef:be:be:48:76:2e:74:16:2d:48:67:ae:44:0d:
         66:36:62:71:55:d1:b4:8c:b9:9e:18:35:88:b7:8e:9c:8f:6d:
         91:9c:ec:ee:e6:cc:ec:d9:55:72:f9:81:7d:e6:07:ed:5a:a8:
         4f:02:c1:50:9f:69:99:ce:a3:f5:34:7c:e9:05:23:4c:2d:6f:
         3a:06:93:76:b3:0d:c3:d1:b8:7e:16:83:71:59:4a:64:8d:28:
         a9:eb:f1:d3:86:0c:7f:bf:24:76:b8:44:02:54:70:e7:2f:9c:
         d1:03:b4:e4:78:9e:f4:01:e0:c6:d5:cc:53:74:ef:ef:43:21:
         53:42:70:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFCNjQxMTAvBgNVBAUTKERENDAxQTk5MkREMzI5RjkzNERCQjIwRDU4MEI0Q0E3
Mjc5MERGQjEwHhcNMjYwMzAxMDEwMDM4WhcNMjYwMzA4MDEwMDM4WjAYMRYwFAYD
VQQDDA02OWEzOGZiNi1jYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsPkrm4Yzg07w1WOhPJaCp5YeQdtLDQesrbIqES8axGVu7rr5pURMHJOCayP2
H6E5L6aK5MhzLyBdR4Bj6uEb74CKLwgLCR0bY8C8QRI2QKcy0Ck7X95bl+OvFo6w
SPCOsmNTXpRLthdzzvExOvKIMVIyVSO+tL8wt4LjA/4shYWjSwjx66Pt1BO0HG53
7Nz14/Tv01AM1xYIZBVinkCXVwC8M4ERyrQBSoMTbFO9UI//AJAwVsNsaMXN9jXF
IF7LwZVux+6w4ZzdCzP+7uKDpOhzIhZmqvmYhQdbJx/J1fiFnVuUEVPVkrQBxebN
e254TrPel84nNwivFziyVe2r+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHM2UCB
5dYRt9eaKN9TpWsCoCxmMB8GA1UdIwQYMBaAFN1AGpkt0yn5NNuyDVgLTKcnkN+x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG
MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtmazAyN0lOV0F0TXB5ZVEz
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNVQWFtUzNUS2ZrMDI3SU5XQXRNcHllUTM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi8zVUFhbVMzVEtm
azAyN0lOV0F0TXB5ZVEzN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb3oiovMNqRkjBH0QVpMIAmphGH+fdlMGKkphV62qknj5cSP0aWgH61KaiESJ
piN2OuIsIkUog3gJhlSHrO+6mubZLfonbrmOgwEKlJptIJprBzmY2mo51+QiIZuD
IfBuDLkk+STp2HJ6VvStE4yWZclQR8yw2jnUr2Fax83papftDO++vkh2LnQWLUhn
rkQNZjZicVXRtIy5nhg1iLeOnI9tkZzs7ubM7NlVcvmBfeYH7VqoTwLBUJ9pmc6j
9TR86QUjTC1vOgaTdrMNw9G4fhaDcVlKZI0oqevx04YMf78kdrhEAlRw5y+c0QO0
5Hie9AHgxtXMU3Tv70MhU0JwOw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:37 2026 by rpki-client