Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
File:                     hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json)
Hash identifier:          6L9cgOSO+5lbQ4Ruv67ebDSJ1Ut7NapjjuzwySY5hUY=
Subject key identifier:   41:5A:4F:5C:9E:73:C2:11:98:9D:02:9E:E3:58:FB:2B:C4:FD:CE:E1
Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51
Certificate issuer:       /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
Manifest number:          FD
Signing time:             Sun 01 Mar 2026 07:16:59 +0000
Manifest this update:     Sun 01 Mar 2026 07:16:59 +0000
Manifest next update:     Sun 08 Mar 2026 07:16:59 +0000
Files and hashes:         1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: agVyNMuBkd3gUgkLFhNxycjZAQks6Wt4iXUjOaZZimU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl
                          rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251
        Validity
            Not Before: Mar  1 07:16:59 2026 GMT
            Not After : Mar  8 07:16:59 2026 GMT
        Subject: CN=69a3e7eb-9670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:84:5d:8b:2a:18:e5:db:9e:7d:40:17:e4:9d:
                    80:d4:4d:a5:52:ae:66:fd:a2:0d:db:68:ea:e5:b4:
                    72:e2:cf:e5:4c:1d:d7:38:96:1b:f2:10:64:cb:45:
                    c6:36:91:c2:c1:0f:77:66:45:44:77:5f:48:45:ef:
                    5d:00:de:03:a7:f4:d8:1a:02:db:56:90:aa:11:9a:
                    bd:f1:8a:5f:10:44:1b:a5:38:9b:ac:ef:9e:13:2d:
                    92:82:ce:06:4c:0a:7f:b1:aa:7f:bc:ac:00:dc:f4:
                    8f:04:89:12:40:36:5f:af:2e:29:81:e7:fa:f2:fa:
                    d5:b9:3c:95:1c:49:a7:24:7d:ba:0c:0c:f4:de:2e:
                    eb:07:9e:01:05:26:76:2b:fd:32:f6:19:bb:dc:52:
                    9f:d5:d7:5a:4d:9b:0c:d5:99:a5:72:7f:a5:c9:66:
                    54:46:b7:6f:c2:b3:2f:0d:7a:b8:2c:d2:5d:ea:56:
                    4b:30:53:69:52:6d:67:f0:fc:9c:ed:f0:b5:86:b7:
                    2e:33:d5:e1:b5:6f:33:0e:e5:56:39:01:c6:dd:2d:
                    ed:33:f9:ed:dd:a1:9f:3a:cc:05:c6:16:9d:89:61:
                    4b:8f:7b:a1:b5:bd:ed:c8:cd:39:5b:f3:50:be:d2:
                    3a:e2:24:b7:74:ad:28:4c:be:25:97:78:eb:a3:8e:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5A:4F:5C:9E:73:C2:11:98:9D:02:9E:E3:58:FB:2B:C4:FD:CE:E1
            X509v3 Authority Key Identifier:
                keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:06:5a:eb:86:a3:21:be:27:72:ab:be:83:0d:57:96:82:02:
         f4:65:fc:a5:ef:20:3d:a5:77:6f:a5:25:66:35:1d:f8:86:06:
         9b:8a:9d:4b:d2:f6:42:bf:93:dc:01:15:4a:36:d9:04:f6:e4:
         b3:f2:21:9f:17:b3:78:60:c3:8d:94:ee:1b:f5:64:7a:c0:78:
         b0:3a:66:95:3c:e4:ce:ae:e8:b8:17:b1:85:c4:b5:db:73:b6:
         c9:c1:99:f9:78:5a:95:78:47:33:ed:d1:ac:8b:25:f3:36:9e:
         12:12:53:f9:d3:fa:3c:7f:a4:03:36:f2:4d:5a:4c:05:96:7c:
         ed:8a:80:41:9e:0f:46:fc:4e:bf:5c:e6:32:da:10:d2:e2:4e:
         11:64:07:a0:0c:28:3a:ed:3b:9f:d9:eb:a9:ec:ad:43:ae:81:
         9d:04:f1:26:15:76:3b:0e:f0:28:bb:70:02:80:28:40:e4:c0:
         d6:09:46:1a:88:0c:7e:60:96:99:bd:12:d9:5e:57:bd:de:b9:
         3e:fd:a8:7f:19:75:2e:09:f3:a6:a9:8d:92:00:bc:de:01:35:
         ab:b8:cf:ce:1d:27:1a:24:65:7d:c6:64:4f:20:bb:d0:75:d2:
         2c:88:34:9a:3c:26:99:a4:62:af:eb:c2:07:d0:70:af:72:71:
         8a:2a:3e:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMyMEExMTAvBgNVBAUTKDg2MzJDRDI1NjY5REQ4NzIyMDIwNDUxNzQwNkUzRjZC
MkYxMjkyNTEwHhcNMjYwMzAxMDcxNjU5WhcNMjYwMzA4MDcxNjU5WjAYMRYwFAYD
VQQDEw02OWEzZTdlYi05NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhoRdiyoY5duefUAX5J2A1E2lUq5m/aIN22jq5bRy4s/lTB3XOJYb8hBky0XG
NpHCwQ93ZkVEd19IRe9dAN4Dp/TYGgLbVpCqEZq98YpfEEQbpTibrO+eEy2Sgs4G
TAp/sap/vKwA3PSPBIkSQDZfry4pgef68vrVuTyVHEmnJH26DAz03i7rB54BBSZ2
K/0y9hm73FKf1ddaTZsM1Zmlcn+lyWZURrdvwrMvDXq4LNJd6lZLMFNpUm1n8Pyc
7fC1hrcuM9XhtW8zDuVWOQHG3S3tM/nt3aGfOswFxhadiWFLj3uhtb3tyM05W/NQ
vtI64iS3dK0oTL4ll3jro47K9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFaT1ye
c8IRmJ0CnuNY+yvE/c7hMB8GA1UdIwQYMBaAFIYyzSVmndhyICBFF0BuP2svEpJR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzIwQS84MEFBRUQ4Mjk1
NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJISWdJRVVYUUc0X2F5OFNr
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hqTE5KV2FkMkhJZ0lFVVhRRzRfYXk4U2tsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzIwQS84MEFBRUQ4Mjk1NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJI
SWdJRVVYUUc0X2F5OFNrbEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKAZa64ajIb4ncqu+gw1XloIC9GX8pe8gPaV3b6UlZjUd+IYGm4qdS9L2Qr+T
3AEVSjbZBPbks/IhnxezeGDDjZTuG/VkesB4sDpmlTzkzq7ouBexhcS123O2ycGZ
+XhalXhHM+3RrIsl8zaeEhJT+dP6PH+kAzbyTVpMBZZ87YqAQZ4PRvxOv1zmMtoQ
0uJOEWQHoAwoOu07n9nrqeytQ66BnQTxJhV2Ow7wKLtwAoAoQOTA1glGGogMfmCW
mb0S2V5Xvd65Pv2ofxl1LgnzpqmNkgC83gE1q7jPzh0nGiRlfcZkTyC70HXSLIg0
mjwmmaRir+vCB9Bwr3Jxiio+cA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:42:00 2026 by rpki-client