Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
File:                     i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json)
Hash identifier:          PIS7GhYo5zAr1vZ8NBkc45bhRxKnlLwrJcjPmIf61jU=
Subject key identifier:   16:FF:79:E4:B8:10:8F:62:24:70:A3:F5:79:18:97:6F:84:5F:A4:6A
Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14
Certificate issuer:       /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
Certificate serial:       3519
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
Manifest number:          3519
Signing time:             Mon 02 Mar 2026 02:25:33 +0000
Manifest this update:     Mon 02 Mar 2026 02:25:31 +0000
Manifest next update:     Mon 09 Mar 2026 02:25:31 +0000
Files and hashes:         1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: JC5nHQjxwPDSufrc1S986JP4I0/gV+aXULWXLfIT11g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13593 (0x3519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614
        Validity
            Not Before: Mar  2 02:25:31 2026 GMT
            Not After : Mar  9 02:25:31 2026 GMT
        Subject: CN=69a4f51d-ac77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:65:fc:7e:e8:36:41:da:d4:ea:f5:33:6a:
                    07:d2:82:e3:5d:92:59:e1:be:01:5e:10:96:ed:0a:
                    d3:a6:0e:be:d3:8a:14:67:14:05:db:25:65:07:66:
                    da:cd:0c:18:60:ce:00:c5:4f:23:93:48:8a:ce:de:
                    5d:1e:1e:08:eb:6a:26:2d:06:7c:19:44:32:34:06:
                    80:09:cb:72:e8:df:26:b7:2a:8c:c6:ae:7f:5a:96:
                    30:13:01:dc:35:4c:70:94:eb:78:ff:f0:82:7b:ef:
                    c6:a7:59:fb:0d:cd:fd:b8:0b:dd:64:68:3d:6f:86:
                    c8:c5:e5:12:c2:47:85:1a:ae:9d:04:a7:64:80:54:
                    17:f0:c6:e9:c9:b8:c4:64:53:78:d5:58:68:a7:86:
                    a8:53:8f:00:fa:90:81:8e:96:5f:64:14:73:22:3f:
                    ae:b5:10:ca:83:e8:c8:69:42:e7:a9:2d:7d:3f:bb:
                    14:0d:a6:5e:24:2f:b8:f6:dc:e5:97:e9:f2:f6:95:
                    0b:e4:e4:a2:f4:43:20:40:5e:3a:60:d6:25:1f:39:
                    73:e5:88:3b:64:5b:6e:05:7b:a4:4d:e9:ce:7d:07:
                    74:ae:68:09:bd:de:6a:b0:0c:85:a2:4c:06:9b:e1:
                    b4:ec:77:73:0f:a9:6d:84:05:ec:e5:3a:c4:e6:df:
                    ac:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FF:79:E4:B8:10:8F:62:24:70:A3:F5:79:18:97:6F:84:5F:A4:6A
            X509v3 Authority Key Identifier:
                keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:16:d0:8c:65:3d:df:05:f1:38:96:c5:5f:f0:3b:8c:f2:4f:
         69:a2:9c:c9:8d:39:24:71:f2:ac:aa:5c:2c:71:ac:50:4d:29:
         92:31:da:c0:78:bd:a9:f0:ea:14:ea:19:a2:44:0e:c5:97:d4:
         c2:d3:20:42:c3:fe:3c:33:b5:66:44:53:c4:26:16:c3:49:07:
         7c:ff:af:20:0a:e7:1f:a3:7c:ed:6f:4f:38:66:28:fb:9d:ed:
         50:93:73:2c:83:48:f2:46:6a:b0:a8:a3:f5:a3:b6:dc:aa:6c:
         1a:79:df:c7:f7:f5:06:0e:35:9d:df:fc:cb:55:dd:0e:5f:ec:
         a1:36:f8:81:94:db:3c:9e:e0:14:35:6e:70:63:1e:cc:67:8d:
         a0:08:4d:37:f9:42:c0:5d:cb:7f:4e:e6:e0:81:c0:e9:0a:75:
         03:8c:82:4f:9c:f0:f4:dc:99:1a:a9:11:43:fb:38:25:41:75:
         76:8e:ef:97:69:01:af:86:b7:60:2f:b1:3c:f1:a1:20:2d:31:
         60:72:14:9e:78:06:28:6a:23:e7:63:88:af:88:3d:9c:ed:5d:
         20:11:33:2f:09:da:0c:c9:1f:2d:8d:a1:6c:8d:22:92:3a:28:
         e7:9b:ff:a2:1f:91:35:50:31:00:78:1d:ae:37:26:37:9e:8b:
         08:2a:99:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0
NzIwQjQ2MTQwHhcNMjYwMzAyMDIyNTMxWhcNMjYwMzA5MDIyNTMxWjAYMRYwFAYD
VQQDEw02OWE0ZjUxZC1hYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxT5l/H7oNkHa1Or1M2oH0oLjXZJZ4b4BXhCW7QrTpg6+04oUZxQF2yVlB2ba
zQwYYM4AxU8jk0iKzt5dHh4I62omLQZ8GUQyNAaACcty6N8mtyqMxq5/WpYwEwHc
NUxwlOt4//CCe+/Gp1n7Dc39uAvdZGg9b4bIxeUSwkeFGq6dBKdkgFQX8MbpybjE
ZFN41Vhop4aoU48A+pCBjpZfZBRzIj+utRDKg+jIaULnqS19P7sUDaZeJC+49tzl
l+ny9pUL5OSi9EMgQF46YNYlHzlz5Yg7ZFtuBXukTenOfQd0rmgJvd5qsAyFokwG
m+G07HdzD6lthAXs5TrE5t+skwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBb/eeS4
EI9iJHCj9XkYl2+EX6RqMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE
OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ
bFAydUtDaE8zSUJISUxSaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfxbQjGU93wXxOJbFX/A7jPJPaaKcyY05JHHyrKpcLHGsUE0pkjHawHi9qfDq
FOoZokQOxZfUwtMgQsP+PDO1ZkRTxCYWw0kHfP+vIArnH6N87W9POGYo+53tUJNz
LINI8kZqsKij9aO23KpsGnnfx/f1Bg41nd/8y1XdDl/soTb4gZTbPJ7gFDVucGMe
zGeNoAhNN/lCwF3Lf07m4IHA6Qp1A4yCT5zw9NyZGqkRQ/s4JUF1do7vl2kBr4a3
YC+xPPGhIC0xYHIUnngGKGoj52OIr4g9nO1dIBEzLwnaDMkfLY2hbI0ikjoo55v/
oh+RNVAxAHgdrjcmN56LCCqZ3A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:49 2026 by rpki-client