Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
File:                     l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json)
Hash identifier:          c+KxarhL671r+0oPiYK5RPwOwhbRk4xOFJ0MS6jYu0c=
Subject key identifier:   F4:D6:4F:22:AF:43:AE:A8:AC:60:7C:04:9B:D8:04:4D:B6:A1:48:AB
Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7
Certificate issuer:       /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
Manifest number:          0109
Signing time:             Sun 05 Apr 2026 05:24:30 +0000
Manifest this update:     Sun 05 Apr 2026 05:24:29 +0000
Manifest next update:     Sun 12 Apr 2026 05:24:29 +0000
Files and hashes:         1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: 1vttge3VDq7/jHKPPnVRImFk3aaajJ1/zDjQrAGSnUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl
                          rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7
        Validity
            Not Before: Apr  5 05:24:29 2026 GMT
            Not After : Apr 12 05:24:29 2026 GMT
        Subject: CN=69d1f20e-feef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:e2:4e:3d:ee:b5:c8:c0:b5:13:bc:ae:10:
                    f4:2b:46:4c:3f:bd:d6:4c:59:46:a0:4f:d3:0f:1d:
                    cb:e1:ae:c0:b5:97:e5:91:32:0d:3f:0a:34:cb:ae:
                    25:db:cb:cb:5f:d0:69:21:9c:71:04:41:0b:33:74:
                    6f:61:97:b9:87:b7:cd:51:ed:19:f7:1f:ab:ea:79:
                    c2:e1:cf:17:12:40:4a:40:8a:f6:af:f7:d7:8f:74:
                    d1:02:3f:af:c2:dc:8b:b5:f2:76:ba:fd:82:72:b0:
                    01:31:2b:53:9d:2b:09:54:51:c2:29:a6:30:be:de:
                    b0:a1:3f:6e:11:13:3b:76:88:20:eb:c6:63:db:3f:
                    78:3e:a1:3d:78:85:1a:7e:c4:5f:cd:3f:81:df:50:
                    2a:45:d5:04:81:c4:02:c6:cc:e6:c6:7e:7a:4d:e1:
                    b5:84:11:ae:c1:0a:f3:dc:34:b2:af:c2:b3:ba:b8:
                    de:18:1d:ee:dd:d9:4c:5c:88:46:13:b1:d8:1f:b9:
                    50:db:a2:67:9f:a8:04:6b:ba:39:4b:6b:2b:13:87:
                    fc:59:c8:1f:67:b4:5c:51:73:1a:06:6d:c7:b1:0b:
                    64:e7:57:6a:5c:f1:bf:15:f0:be:4a:e9:a7:74:fd:
                    0e:72:7a:42:8d:06:2b:bb:0c:27:62:66:85:5c:40:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D6:4F:22:AF:43:AE:A8:AC:60:7C:04:9B:D8:04:4D:B6:A1:48:AB
            X509v3 Authority Key Identifier:
                keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:30:49:3c:24:2d:4a:b2:e3:fa:f2:b0:cf:20:a1:7e:75:18:
         13:f7:11:92:ef:c4:73:94:14:eb:9a:50:64:ee:44:95:a6:da:
         f5:10:a7:00:ea:ac:e4:0d:a7:51:04:20:a3:42:3e:d4:f7:20:
         ac:23:92:51:49:4a:96:5c:a2:de:59:3e:fa:1e:2e:12:67:87:
         2b:10:8b:a7:19:79:5f:97:d8:44:85:01:48:ca:47:23:fd:68:
         42:86:42:66:a5:3c:3f:ec:b5:4f:f1:33:bc:47:fc:ba:d8:34:
         c0:76:4b:27:95:4b:03:96:50:e4:81:c2:62:42:4a:d8:58:61:
         2e:de:8e:e6:99:a6:21:51:9d:fc:71:31:c7:cf:b8:be:77:ca:
         0f:23:c1:ba:ea:e4:bd:bd:b6:ea:7e:6e:ab:1a:82:03:41:6f:
         48:76:25:f1:2a:dd:9f:75:46:af:ae:f7:96:81:7a:79:83:4d:
         ea:23:aa:de:87:09:fd:69:e4:ab:56:44:3e:a4:9e:28:8a:d5:
         2b:41:f7:33:ad:c5:3d:98:15:99:72:d4:aa:c5:e8:2b:5d:fe:
         9f:05:6b:47:d1:ea:3f:c0:07:8a:12:82:bb:89:37:dc:2d:aa:
         91:f8:97:03:b1:22:35:e1:87:be:79:64:59:bc:21:57:db:d5:
         a8:04:e9:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA2OUExMTAvBgNVBAUTKDk3NEI0QTU2NTQ4NkUwNDhEMEMxNzY5OEQ3MjI3Njcw
Q0YzQzk5QTcwHhcNMjYwNDA1MDUyNDI5WhcNMjYwNDEyMDUyNDI5WjAYMRYwFAYD
VQQDEw02OWQxZjIwZS1mZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtPLiTj3utcjAtRO8rhD0K0ZMP73WTFlGoE/TDx3L4a7AtZflkTINPwo0y64l
28vLX9BpIZxxBEELM3RvYZe5h7fNUe0Z9x+r6nnC4c8XEkBKQIr2r/fXj3TRAj+v
wtyLtfJ2uv2CcrABMStTnSsJVFHCKaYwvt6woT9uERM7dogg68Zj2z94PqE9eIUa
fsRfzT+B31AqRdUEgcQCxszmxn56TeG1hBGuwQrz3DSyr8KzurjeGB3u3dlMXIhG
E7HYH7lQ26Jnn6gEa7o5S2srE4f8WcgfZ7RcUXMaBm3HsQtk51dqXPG/FfC+Sumn
dP0OcnpCjQYruwwnYmaFXEAllwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPTWTyKv
Q66orGB8BJvYBE22oUirMB8GA1UdIwQYMBaAFJdLSlZUhuBI0MF2mNcidnDPPJmn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8zNkQ1RDYyQzlC
RjAxMUVGODFDOTAyNjdDNEY5QUUwMi9sMHRLVmxTRzRFalF3WGFZMXlKMmNNODht
YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2wwdEtWbFNHNEVqUXdYYVkxeUoyY004OG1hYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDY5QS8zNkQ1RDYyQzlCRjAxMUVGODFDOTAyNjdDNEY5QUUwMi9sMHRLVmxTRzRF
alF3WGFZMXlKMmNNODhtYWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATjBJPCQtSrLj+vKwzyChfnUYE/cRku/Ec5QU65pQZO5Elaba9RCnAOqs5A2n
UQQgo0I+1PcgrCOSUUlKllyi3lk++h4uEmeHKxCLpxl5X5fYRIUBSMpHI/1oQoZC
ZqU8P+y1T/EzvEf8utg0wHZLJ5VLA5ZQ5IHCYkJK2FhhLt6O5pmmIVGd/HExx8+4
vnfKDyPBuurkvb226n5uqxqCA0FvSHYl8Srdn3VGr673loF6eYNN6iOq3ocJ/Wnk
q1ZEPqSeKIrVK0H3M63FPZgVmXLUqsXoK13+nwVrR9HqP8AHihKCu4k33C2qkfiX
A7EiNeGHvnlkWbwhV9vVqATpcg==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:07 2026 by rpki-client