Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
File:                     8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft (raw, json)
Hash identifier:          Z0Uvl3p5w04CQlbOpMsl1Yi1/e9azzh2tiOMIt5i1Ew=
Subject key identifier:   3D:D4:FD:3E:2B:F3:E7:46:A3:83:CC:E2:B5:5E:05:BE:65:03:A7:3D
Authority key identifier: F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE
Certificate issuer:       /CN=A91243F8/serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
Certificate serial:       0312
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
Manifest number:          0312
Signing time:             Thu 21 May 2026 01:16:28 +0000
Manifest this update:     Thu 21 May 2026 01:16:28 +0000
Manifest next update:     Thu 28 May 2026 01:16:28 +0000
Files and hashes:         1: 8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl (hash: 41uhKza23m6BLb2WXmFqILz9drkpKxn8wj/d9pFP9cs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl
                          rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91243F8, serialNumber=F2928A4B10DD8474A6DD0AC65CD1394F02155CDE
        Validity
            Not Before: May 21 01:16:28 2026 GMT
            Not After : May 28 01:16:28 2026 GMT
        Subject: CN=6a0e5cec-f967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:61:25:f8:3a:9e:41:f8:1f:7c:59:92:4f:
                    43:90:9a:62:c8:ca:27:be:a9:ec:84:cd:00:ee:13:
                    37:3a:a1:10:c9:a4:86:28:b7:8a:16:75:c2:f3:48:
                    74:ed:f7:d6:bc:cd:61:a9:c5:9d:42:9b:01:02:13:
                    d9:1a:24:fd:ec:7a:47:61:ad:a4:f0:45:3c:b6:60:
                    aa:09:fc:84:3a:07:3c:e3:f1:98:fc:ce:f7:51:f0:
                    38:3e:8d:63:3a:06:60:a1:e8:ab:e9:1e:d4:81:4f:
                    b3:31:84:69:75:70:31:a9:bf:6b:3f:24:5f:e2:92:
                    b8:15:bf:7a:14:2f:0f:62:50:52:e2:e4:f7:5f:96:
                    22:5a:77:8c:1f:6a:cb:97:39:b6:3a:86:b5:57:94:
                    0e:98:5e:7d:73:ae:30:71:99:9e:ea:65:72:65:05:
                    8f:fb:8e:15:27:99:c7:86:cc:ab:68:25:e0:4b:04:
                    71:fa:3e:53:ac:94:13:2b:7f:a7:ce:37:76:7a:3e:
                    d8:33:06:89:92:34:59:1d:e2:7b:b3:8b:47:f8:c5:
                    03:f9:06:6b:03:a1:a6:f5:fb:74:1e:77:ac:b2:9c:
                    53:10:04:29:1b:1d:e8:37:d5:b0:ec:aa:4f:b1:8f:
                    70:2f:96:51:8e:a5:83:95:fa:70:32:62:b0:7c:10:
                    49:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D4:FD:3E:2B:F3:E7:46:A3:83:CC:E2:B5:5E:05:BE:65:03:A7:3D
            X509v3 Authority Key Identifier:
                keyid:F2:92:8A:4B:10:DD:84:74:A6:DD:0A:C6:5C:D1:39:4F:02:15:5C:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8pKKSxDdhHSm3QrGXNE5TwIVXN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243F8/BA6481F616D111ED88248428C4F9AE02/8pKKSxDdhHSm3QrGXNE5TwIVXN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d7:c3:77:cd:44:ba:60:6b:3a:c4:7d:82:d2:3c:17:ce:9b:
         b3:c5:5f:e0:fb:92:39:e9:dd:28:69:b5:cb:33:0a:ef:6a:8c:
         ba:e1:17:f8:8f:0e:07:24:dd:f6:74:2c:a0:1f:b9:0d:67:7b:
         4a:a1:fe:dc:29:fa:3c:82:db:f6:4b:fc:07:99:36:e5:54:24:
         df:82:39:37:14:ba:15:ec:a2:78:e0:6b:80:4c:f1:61:31:54:
         35:45:6e:84:bf:b6:5d:26:8d:fe:46:82:a9:fa:0a:f9:8f:6c:
         9d:87:fd:74:7c:02:93:89:a6:0b:d9:20:a9:dc:ec:7d:31:bb:
         75:a6:85:0b:5d:48:7c:98:b3:da:70:c7:9d:fe:64:52:e2:0b:
         28:05:b6:0c:c2:0f:8b:ec:a2:44:5b:02:8f:6c:3f:3b:b9:df:
         db:1d:a1:53:c0:43:46:ec:00:e4:5e:0d:52:ee:9c:77:bf:34:
         b3:4e:7b:da:0e:b4:cd:4c:ca:32:c5:1f:eb:b4:7c:8b:d2:4b:
         14:3e:22:16:77:7d:e3:dd:c4:70:f9:0d:9c:3f:57:f2:cb:7e:
         b2:4f:a9:3c:a6:fb:bf:77:68:cd:75:8d:fb:3b:c7:df:1f:8f:
         57:85:5d:c7:6c:aa:ea:ae:db:23:a7:da:7d:24:23:b5:a8:d0:
         a4:cb:67:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQzRjgxMTAvBgNVBAUTKEYyOTI4QTRCMTBERDg0NzRBNkREMEFDNjVDRDEzOTRG
MDIxNTVDREUwHhcNMjYwNTIxMDExNjI4WhcNMjYwNTI4MDExNjI4WjAYMRYwFAYD
VQQDEw02YTBlNWNlYy1mOTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsU9hJfg6nkH4H3xZkk9DkJpiyMonvqnshM0A7hM3OqEQyaSGKLeKFnXC80h0
7ffWvM1hqcWdQpsBAhPZGiT97HpHYa2k8EU8tmCqCfyEOgc84/GY/M73UfA4Po1j
OgZgoeir6R7UgU+zMYRpdXAxqb9rPyRf4pK4Fb96FC8PYlBS4uT3X5YiWneMH2rL
lzm2Ooa1V5QOmF59c64wcZme6mVyZQWP+44VJ5nHhsyraCXgSwRx+j5TrJQTK3+n
zjd2ej7YMwaJkjRZHeJ7s4tH+MUD+QZrA6Gm9ft0HnesspxTEAQpGx3oN9Ww7KpP
sY9wL5ZRjqWDlfpwMmKwfBBJKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3U/T4r
8+dGo4PM4rVeBb5lA6c9MB8GA1UdIwQYMBaAFPKSiksQ3YR0pt0KxlzROU8CFVze
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDNGOC9CQTY0ODFGNjE2
RDExMUVEODgyNDg0MjhDNEY5QUUwMi84cEtLU3hEZGhIU20zUXJHWE5FNVR3SVZY
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhwS0tTeERkaEhTbTNRckdYTkU1VHdJVlhONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDNGOC9CQTY0ODFGNjE2RDExMUVEODgyNDg0MjhDNEY5QUUwMi84cEtLU3hEZGhI
U20zUXJHWE5FNVR3SVZYTjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm9fDd81EumBrOsR9gtI8F86bs8Vf4PuSOendKGm1yzMK72qMuuEX+I8OByTd
9nQsoB+5DWd7SqH+3Cn6PILb9kv8B5k25VQk34I5NxS6FeyieOBrgEzxYTFUNUVu
hL+2XSaN/kaCqfoK+Y9snYf9dHwCk4mmC9kgqdzsfTG7daaFC11IfJiz2nDHnf5k
UuILKAW2DMIPi+yiRFsCj2w/O7nf2x2hU8BDRuwA5F4NUu6cd780s0572g60zUzK
MsUf67R8i9JLFD4iFnd9493EcPkNnD9X8st+sk+pPKb7v3dozXWN+zvH3x+PV4Vd
x2yq6q7bI6fafSQjtajQpMtngg==
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:54 2026 by rpki-client