Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
File:                     d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json)
Hash identifier:          SdPononf1p0ej3BypF/Lbr763ky29ErE8PRDWe3qQxw=
Subject key identifier:   93:B0:BD:A7:D0:BC:53:42:BF:6E:16:21:C9:27:73:8D:9E:FE:6A:1E
Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF
Certificate issuer:       /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF
Certificate serial:       3524
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
Manifest number:          3524
Signing time:             Sat 04 Apr 2026 15:02:23 +0000
Manifest this update:     Sat 04 Apr 2026 15:02:22 +0000
Manifest next update:     Sat 11 Apr 2026 15:02:22 +0000
Files and hashes:         1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: nfq9yDO+JhMJEJarxkEzPMOaSH8cemgUwmabISbW2UQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl
                          rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13604 (0x3524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D23, serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF
        Validity
            Not Before: Apr  4 15:02:22 2026 GMT
            Not After : Apr 11 15:02:22 2026 GMT
        Subject: CN=69d127ff-e28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:35:0b:99:d3:74:76:67:a2:31:df:b0:0e:
                    0c:a7:b6:33:3a:5a:e5:a1:64:02:e6:94:e8:dd:30:
                    06:f9:6c:40:75:ac:15:6a:0b:79:ec:33:56:37:69:
                    29:50:92:d1:79:6f:59:7b:31:67:f0:c3:10:4c:2b:
                    a6:ee:84:7b:7a:47:94:70:65:a2:b8:07:95:5f:e7:
                    51:5b:a9:d0:96:f7:37:60:33:45:77:f1:09:97:d7:
                    6b:33:43:d2:13:e4:48:ad:47:9f:83:98:aa:22:12:
                    a2:56:80:9d:cd:8e:38:f7:ed:f5:9f:7f:ac:8a:6b:
                    55:d5:6b:55:8d:db:61:2e:18:91:4b:bb:c8:3e:0d:
                    45:44:69:78:a0:ea:aa:ea:2c:53:d8:76:d5:96:38:
                    58:48:72:05:35:ae:1b:77:36:ad:02:20:a4:d2:a5:
                    6c:03:92:63:61:19:80:c5:48:8b:79:44:40:78:97:
                    5f:a0:3a:c9:d9:cc:ac:41:10:81:8a:dc:95:57:f1:
                    79:7d:d2:86:6a:49:ff:92:6f:84:20:11:5f:81:20:
                    35:8b:cf:f3:c6:59:8c:6b:25:51:b2:b6:19:a6:d9:
                    29:d4:36:b9:2a:d8:fa:2f:5a:6f:54:06:c1:16:eb:
                    87:3c:bd:da:05:b4:61:e5:3d:61:e8:3b:60:de:05:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B0:BD:A7:D0:BC:53:42:BF:6E:16:21:C9:27:73:8D:9E:FE:6A:1E
            X509v3 Authority Key Identifier:
                keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d6:18:2c:c1:b6:f7:16:42:5d:b6:34:9e:e6:9f:f4:de:08:
         b3:df:04:59:63:70:b5:5a:8e:a3:40:1b:92:a3:89:8d:a7:ce:
         0f:84:4f:cf:1e:4d:62:0b:63:78:1e:5e:ca:39:9f:1b:9d:e2:
         25:11:e9:c5:f1:d4:51:96:57:b8:3a:77:e0:57:ad:91:8c:fa:
         f2:ec:2e:c9:85:ac:cc:dc:0c:bf:b0:7e:e5:d6:fb:94:f2:bc:
         43:d6:83:f5:67:1e:c9:0d:aa:8d:06:e1:47:a8:3f:f5:da:36:
         a8:40:d8:f2:90:20:f3:7b:d1:2b:68:73:c4:3c:35:a6:d0:df:
         af:5b:c4:3b:e7:79:55:68:24:f0:6d:6b:e7:37:55:e4:92:fe:
         59:66:24:34:6f:26:49:8f:a2:16:5d:60:21:a5:b3:00:49:fc:
         5e:40:8d:05:19:c2:61:a6:23:76:58:23:40:01:9d:b1:56:e0:
         26:3c:cc:f0:ad:7a:39:f6:44:54:2c:ba:79:4f:0e:59:3b:b2:
         99:3b:1a:28:d9:63:4c:a4:b8:07:1b:c8:58:17:1b:eb:90:89:
         61:cd:94:f2:41:58:28:30:26:6a:66:0e:6e:f0:fb:a6:45:14:
         48:27:8c:ff:25:34:8b:42:0f:b3:77:b1:96:92:b4:43:60:c2:
         10:aa:0d:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTREMjMxMTAvBgNVBAUTKDc3RkVEQjUyQUMxMjg5NTA0OUUzNDAyN0UxMTI2QTZG
RDE1MTFFRUYwHhcNMjYwNDA0MTUwMjIyWhcNMjYwNDExMTUwMjIyWjAYMRYwFAYD
VQQDEw02OWQxMjdmZi1lMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWM1C5nTdHZnojHfsA4Mp7YzOlrloWQC5pTo3TAG+WxAdawVagt57DNWN2kp
UJLReW9ZezFn8MMQTCum7oR7ekeUcGWiuAeVX+dRW6nQlvc3YDNFd/EJl9drM0PS
E+RIrUefg5iqIhKiVoCdzY449+31n3+simtV1WtVjdthLhiRS7vIPg1FRGl4oOqq
6ixT2HbVljhYSHIFNa4bdzatAiCk0qVsA5JjYRmAxUiLeURAeJdfoDrJ2cysQRCB
ityVV/F5fdKGakn/km+EIBFfgSA1i8/zxlmMayVRsrYZptkp1Da5Ktj6L1pvVAbB
FuuHPL3aBbRh5T1h6Dtg3gUaqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJOwvafQ
vFNCv24WIcknc42e/moeMB8GA1UdIwQYMBaAFHf+21KsEolQSeNAJ+ESam/RUR7v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyMy8wNDY5MDk3ODFE
QTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lWQko0MEFuNFJKcWI5RlJI
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RfN2JVcXdTaVZCSjQwQW40UkpxYjlGUkh1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NEQyMy8wNDY5MDk3ODFEQTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lW
Qko0MEFuNFJKcWI5RlJIdTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALdYYLMG29xZCXbY0nuaf9N4Is98EWWNwtVqOo0AbkqOJjafOD4RPzx5NYgtj
eB5eyjmfG53iJRHpxfHUUZZXuDp34FetkYz68uwuyYWszNwMv7B+5db7lPK8Q9aD
9WceyQ2qjQbhR6g/9do2qEDY8pAg83vRK2hzxDw1ptDfr1vEO+d5VWgk8G1r5zdV
5JL+WWYkNG8mSY+iFl1gIaWzAEn8XkCNBRnCYaYjdlgjQAGdsVbgJjzM8K16OfZE
VCy6eU8OWTuymTsaKNljTKS4BxvIWBcb65CJYc2U8kFYKDAmamYObvD7pkUUSCeM
/yU0i0IPs3exlpK0Q2DCEKoNXg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:59:41 2026 by rpki-client