Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
File:                     Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft (raw, json)
Hash identifier:          bdplmmdSQvzR7OSxB3DlN6CQLy+X318SgLNcQIrNim8=
Subject key identifier:   3B:32:22:8F:AB:19:85:38:4A:9F:C8:24:34:30:8A:1F:E9:A1:C9:3B
Authority key identifier: 12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
Certificate issuer:       /CN=A91289A2/serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
Manifest number:          4B
Signing time:             Sat 27 Jun 2026 00:26:11 +0000
Manifest this update:     Sat 27 Jun 2026 00:26:10 +0000
Manifest next update:     Sat 04 Jul 2026 00:26:10 +0000
Files and hashes:         1: Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl (hash: /9v6dVoUCyIDSqOtpXIhDIuy/LnAQoyVSat4xCi6ohE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl
                          rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Jul 2026 00:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
        Validity
            Not Before: Jun 27 00:26:10 2026 GMT
            Not After : Jul  4 00:26:10 2026 GMT
        Subject: CN=6a3f18a3-8e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:96:9a:7d:53:12:74:6f:02:90:cd:0d:0d:
                    1c:f1:63:c7:2e:ef:e7:ca:31:10:2f:8c:3f:8e:e4:
                    36:fb:e5:5d:96:65:64:68:66:4d:3d:06:66:6d:ef:
                    0e:82:9b:54:39:2f:66:6b:8f:a3:23:97:4f:18:93:
                    ba:55:f0:da:f4:41:fb:c6:a2:45:0a:94:2d:36:e7:
                    52:d2:3f:4f:87:76:da:44:b9:34:9a:1e:a0:2e:c1:
                    46:94:93:3c:0a:15:af:fa:8b:0d:77:7d:2a:30:b1:
                    da:0a:69:05:d8:d9:44:d1:a8:9c:0a:38:24:be:c5:
                    ee:9c:51:20:9d:81:2c:35:b8:f0:d0:3c:26:35:8e:
                    a5:7f:88:e8:0c:a0:36:7f:d2:a7:90:ed:79:ce:a2:
                    2d:f8:a3:14:63:be:24:f4:51:5d:ed:1d:e8:a9:2f:
                    4f:ba:ca:89:3b:f3:e6:ec:2d:18:e6:bb:20:2d:fe:
                    0e:21:f8:68:b3:cb:7c:97:4d:6e:1a:a7:ca:5b:4c:
                    28:b8:73:79:09:c4:e2:87:90:ff:77:17:e7:7f:49:
                    16:62:75:d1:6d:98:37:94:cb:32:f6:72:3a:bb:f9:
                    4a:8b:83:43:cd:9c:6b:d9:87:91:10:4c:29:51:70:
                    b8:67:58:4c:04:fa:0c:74:88:f9:3a:48:71:61:e3:
                    d0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:32:22:8F:AB:19:85:38:4A:9F:C8:24:34:30:8A:1F:E9:A1:C9:3B
            X509v3 Authority Key Identifier:
                keyid:12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:1e:d0:ad:c0:5d:f0:90:cc:b1:ef:c6:ed:26:3e:66:85:51:
         fe:5c:b1:61:b6:2d:2a:65:ef:89:88:14:38:95:83:e1:e4:bd:
         c5:16:77:52:b1:8a:1e:d9:a5:90:d7:20:25:dd:62:55:4d:36:
         8f:92:51:cc:6f:ff:d8:d9:8e:85:4d:a4:e7:31:38:cb:01:ac:
         16:d7:d7:b5:c4:49:31:b5:44:28:11:95:e3:b8:6f:32:bb:e4:
         dc:76:51:04:fc:aa:5b:2b:23:05:89:12:c0:dd:a1:65:43:dc:
         93:44:3d:2e:a9:eb:7b:2d:f6:3b:64:db:02:04:eb:d6:87:20:
         57:8a:fe:d9:40:a6:44:ae:04:76:40:f6:86:8d:64:15:66:db:
         48:dd:4b:d5:ff:4e:e5:7f:6c:b6:5a:51:50:6d:88:24:1e:8a:
         61:7f:3f:69:47:d3:e3:e3:1f:f9:08:85:82:83:84:f3:d1:8d:
         e9:a9:78:1f:d8:ad:1a:9b:ed:9f:68:ac:f3:b3:65:27:f2:38:
         b3:de:1b:c8:4a:b5:2f:9a:4c:2e:0d:a4:43:1e:39:4a:32:2b:
         da:3c:9a:e2:1c:e9:01:5a:90:c8:81:b1:c6:67:8e:04:2c:6c:
         7a:6a:71:ba:2a:25:61:f3:5e:f1:90:2f:e1:76:98:92:e2:fb:
         e3:35:2d:b9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
ODlBMjExMC8GA1UEBRMoMTJCNkU1RTE4RjdEQzEwMDFDRTA4QUYxM0REMDRENzND
NjBFOUI5QzAeFw0yNjA2MjcwMDI2MTBaFw0yNjA3MDQwMDI2MTBaMBgxFjAUBgNV
BAMTDTZhM2YxOGEzLThlNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCZY5aafVMSdG8CkM0NDRzxY8cu7+fKMRAvjD+O5Db75V2WZWRoZk09BmZt7w6C
m1Q5L2Zrj6Mjl08Yk7pV8Nr0QfvGokUKlC0251LSP0+HdtpEuTSaHqAuwUaUkzwK
Fa/6iw13fSowsdoKaQXY2UTRqJwKOCS+xe6cUSCdgSw1uPDQPCY1jqV/iOgMoDZ/
0qeQ7XnOoi34oxRjviT0UV3tHeipL0+6yok78+bsLRjmuyAt/g4h+Gizy3yXTW4a
p8pbTCi4c3kJxOKHkP93F+d/SRZiddFtmDeUyzL2cjq7+UqLg0PNnGvZh5EQTClR
cLhnWEwE+gx0iPk6SHFh49BpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOzIij6sZ
hThKn8gkNDCKH+mhyTswHwYDVR0jBBgwFoAUErbl4Y99wQAc4IrxPdBNc8YOm5ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4OUEyL0I5Q0NEMzlFMDYy
QzExRjFCQUM4OTNGQzI2M0Q4QzY3L0VyYmw0WTk5d1FBYzRJcnhQZEJOYzhZT201
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvRXJibDRZOTl3UUFjNElyeFBkQk5jOFlPbTV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4
OUEyL0I5Q0NEMzlFMDYyQzExRjFCQUM4OTNGQzI2M0Q4QzY3L0VyYmw0WTk5d1FB
YzRJcnhQZEJOYzhZT201dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAFHtCtwF3wkMyx78btJj5mhVH+XLFhti0qZe+JiBQ4lYPh5L3FFndSsYoe2aWQ
1yAl3WJVTTaPklHMb//Y2Y6FTaTnMTjLAawW19e1xEkxtUQoEZXjuG8yu+TcdlEE
/KpbKyMFiRLA3aFlQ9yTRD0uqet7LfY7ZNsCBOvWhyBXiv7ZQKZErgR2QPaGjWQV
ZttI3UvV/07lf2y2WlFQbYgkHophfz9pR9Pj4x/5CIWCg4Tz0Y3pqXgf2K0am+2f
aKzzs2Un8jiz3hvISrUvmkwuDaRDHjlKMivaPJriHOkBWpDIgbHGZ44ELGx6anG6
KiVh817xkC/hdpiS4vvjNS25
-----END CERTIFICATE-----
Generated at Mon Jun 29 00:07:00 2026 by rpki-client