Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
File:                     k-ucLPZOblbp6NVWzMompR6L26A.mft (raw, json)
Hash identifier:          kzoXlLjndaiCH+dq7m5ZC3eSiNyvTZv4CPV6auRx4g4=
Subject key identifier:   D1:E7:B4:99:46:4A:B9:9A:CE:62:76:65:04:2C:0E:B0:31:3F:C5:24
Authority key identifier: 93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0
Certificate issuer:       /CN=A911FBDF/serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
Manifest number:          A4
Signing time:             Sun 05 Apr 2026 06:41:50 +0000
Manifest this update:     Sun 05 Apr 2026 06:41:49 +0000
Manifest next update:     Sun 12 Apr 2026 06:41:49 +0000
Files and hashes:         1: k-ucLPZOblbp6NVWzMompR6L26A.crl (hash: irEYgxdMS1mojOPXNMImvw//5L7WLNms8u4AOdBAMsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl
                          rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FBDF, serialNumber=93EB9C2CF64E6E56E9E8D556CCCA26A51E8BDBA0
        Validity
            Not Before: Apr  5 06:41:49 2026 GMT
            Not After : Apr 12 06:41:49 2026 GMT
        Subject: CN=69d2042d-1e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:af:68:19:de:fb:30:4f:eb:0f:ac:84:0d:ca:
                    5d:be:6c:a8:ed:fb:a3:6a:7c:a1:74:64:5e:2b:4b:
                    61:05:68:81:35:18:3d:b1:30:5e:e7:a8:62:c5:1f:
                    5a:88:f1:62:9c:d4:51:44:25:c0:84:61:fc:67:56:
                    23:78:fc:cd:f8:ea:f5:94:71:0d:c2:a0:b6:a9:1e:
                    3a:f8:9e:9b:9a:d0:f2:8c:79:a0:b4:f2:6d:09:1f:
                    49:f2:7f:37:03:0d:3b:3d:77:8b:89:ab:b5:61:aa:
                    be:00:65:4e:2b:69:a3:4a:5b:86:af:77:37:17:31:
                    4c:0b:e5:d7:b8:70:1a:2a:99:3d:8d:69:f3:79:6d:
                    12:fb:85:5f:c2:28:11:bc:5f:88:66:9d:6b:0b:aa:
                    43:d1:ba:a5:fd:6c:e0:99:15:40:a4:0a:43:99:4e:
                    ae:53:1d:d8:13:1a:c7:9b:6f:d6:26:44:ac:ad:5f:
                    cc:14:52:83:2f:0a:7d:16:39:07:3d:02:62:8d:bc:
                    a5:ad:ba:4a:68:47:d8:5f:2c:81:e6:a8:e3:08:46:
                    e7:40:80:af:cb:50:64:84:bf:86:06:88:b2:a8:a1:
                    8b:f0:56:06:f3:e8:a2:5f:62:25:9b:23:83:25:83:
                    26:c7:1d:ce:53:e7:ca:62:b4:d0:b8:c1:db:3e:d7:
                    7d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E7:B4:99:46:4A:B9:9A:CE:62:76:65:04:2C:0E:B0:31:3F:C5:24
            X509v3 Authority Key Identifier:
                keyid:93:EB:9C:2C:F6:4E:6E:56:E9:E8:D5:56:CC:CA:26:A5:1E:8B:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-ucLPZOblbp6NVWzMompR6L26A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FBDF/BC175F383D3311F0921FDB1CC4F9AE02/k-ucLPZOblbp6NVWzMompR6L26A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:63:63:0b:47:fa:99:e0:14:77:39:b7:31:b9:29:28:2d:ef:
         46:25:c3:dc:64:20:69:d8:ae:b6:e1:cc:89:0a:ad:57:53:b3:
         e0:5d:06:eb:b9:65:df:9e:c5:7b:a0:9e:74:d1:ac:e7:73:5f:
         50:e4:de:f6:f1:db:09:bc:5d:64:7f:4a:55:83:08:e0:1b:f7:
         3c:f5:9c:be:6c:0e:23:9a:d5:ef:b5:6b:b3:8b:61:27:2a:ea:
         7e:6f:06:29:02:cb:4f:05:d2:72:91:03:1b:a9:cd:57:13:ec:
         c5:d5:12:b8:cd:08:ab:c7:a9:3a:17:e1:0b:b9:47:66:96:04:
         4c:aa:46:f6:2a:3e:9e:c8:a2:88:40:bf:7c:9a:28:76:69:bc:
         03:82:6d:cf:7c:93:f9:c3:5c:53:24:41:2e:ae:b0:96:e1:8e:
         6c:d1:4c:75:05:cb:9a:8d:e6:df:12:bf:0d:f4:50:d1:6b:fb:
         5e:95:33:4b:b2:d8:1f:07:a1:30:cd:73:e8:e7:9a:46:80:55:
         03:7a:f0:40:5f:42:b2:87:8a:8d:f9:d4:6f:ee:33:a6:f2:fd:
         61:0d:bd:68:25:43:43:5e:9a:6c:34:59:ae:95:8f:16:e0:83:
         58:33:ae:75:16:2d:e9:c7:f8:34:87:39:e6:72:20:aa:e9:a6:
         4e:13:1b:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZCREYxMTAvBgNVBAUTKDkzRUI5QzJDRjY0RTZFNTZFOUU4RDU1NkNDQ0EyNkE1
MUU4QkRCQTAwHhcNMjYwNDA1MDY0MTQ5WhcNMjYwNDEyMDY0MTQ5WjAYMRYwFAYD
VQQDEw02OWQyMDQyZC0xZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuK9oGd77ME/rD6yEDcpdvmyo7fujanyhdGReK0thBWiBNRg9sTBe56hixR9a
iPFinNRRRCXAhGH8Z1YjePzN+Or1lHENwqC2qR46+J6bmtDyjHmgtPJtCR9J8n83
Aw07PXeLiau1Yaq+AGVOK2mjSluGr3c3FzFMC+XXuHAaKpk9jWnzeW0S+4VfwigR
vF+IZp1rC6pD0bql/WzgmRVApApDmU6uUx3YExrHm2/WJkSsrV/MFFKDLwp9FjkH
PQJijbylrbpKaEfYXyyB5qjjCEbnQICvy1BkhL+GBoiyqKGL8FYG8+iiX2IlmyOD
JYMmxx3OU+fKYrTQuMHbPtd9LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHntJlG
SrmazmJ2ZQQsDrAxP8UkMB8GA1UdIwQYMBaAFJPrnCz2Tm5W6ejVVszKJqUei9ug
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkJERi9CQzE3NUYzODNE
MzMxMUYwOTIxRkRCMUNDNEY5QUUwMi9rLXVjTFBaT2JsYnA2TlZXek1vbXBSNkwy
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2stdWNMUFpPYmxicDZOVld6TW9tcFI2TDI2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkJERi9CQzE3NUYzODNEMzMxMUYwOTIxRkRCMUNDNEY5QUUwMi9rLXVjTFBaT2Js
YnA2TlZXek1vbXBSNkwyNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiWNjC0f6meAUdzm3MbkpKC3vRiXD3GQgadiutuHMiQqtV1Oz4F0G67ll357F
e6CedNGs53NfUOTe9vHbCbxdZH9KVYMI4Bv3PPWcvmwOI5rV77Vrs4thJyrqfm8G
KQLLTwXScpEDG6nNVxPsxdUSuM0Iq8epOhfhC7lHZpYETKpG9io+nsiiiEC/fJoo
dmm8A4Jtz3yT+cNcUyRBLq6wluGObNFMdQXLmo3m3xK/DfRQ0Wv7XpUzS7LYHweh
MM1z6OeaRoBVA3rwQF9CsoeKjfnUb+4zpvL9YQ29aCVDQ16abDRZrpWPFuCDWDOu
dRYt6cf4NIc55nIgqummThMbGQ==
-----END CERTIFICATE-----
Generated at Sun Apr 5 23:50:07 2026 by rpki-client