Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
File:                     48M322aHKgqTXJ1VXltt01MHLHQ.mft (raw, json)
Hash identifier:          524Lf3BvxYhpQEUUymBwiWl+JPQwcDx6YRFYvfaVCAM=
Subject key identifier:   19:F8:64:C7:B2:0B:E4:29:9A:97:95:7F:54:CF:8B:5C:83:C4:AB:22
Authority key identifier: E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74
Certificate issuer:       /CN=A912B0A3/serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
Certificate serial:       083A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
Manifest number:          083A
Signing time:             Mon 02 Mar 2026 20:43:17 +0000
Manifest this update:     Mon 02 Mar 2026 20:43:17 +0000
Manifest next update:     Mon 09 Mar 2026 20:43:17 +0000
Files and hashes:         1: 48M322aHKgqTXJ1VXltt01MHLHQ.crl (hash: zHMw7kvomAYoEA3lj+4iggksG1LVvSLu2odllMBOmjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 20:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2106 (0x83a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3, serialNumber=E3C337DB66872A0A935C9D555E5B6DD353072C74
        Validity
            Not Before: Mar  2 20:43:17 2026 GMT
            Not After : Mar  9 20:43:17 2026 GMT
        Subject: CN=69a5f665-7263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:4d:db:b2:f2:2b:6a:41:92:6a:b6:48:78:
                    dd:0a:11:89:04:bf:b9:e3:9f:61:33:6b:d8:f0:94:
                    70:56:d5:0d:59:d0:e7:c9:07:10:4d:40:79:0a:cd:
                    4b:4d:2e:c3:70:e0:61:09:ba:7c:c6:50:79:ed:51:
                    e4:36:32:4b:f3:f1:5e:73:e8:54:da:da:ea:c0:2a:
                    31:36:b0:2d:2e:df:4f:b1:d6:a6:9d:0a:4e:cf:7e:
                    d7:ff:21:cf:60:fb:2e:70:11:ce:66:dc:77:c9:76:
                    5a:c6:95:c8:24:c6:93:89:c8:5d:58:d9:f6:37:0b:
                    55:3f:b4:1d:f9:56:02:fd:a5:2a:79:b0:1b:a8:75:
                    94:fb:a3:6c:38:52:e1:69:3b:3b:12:c9:ea:02:8e:
                    4b:6f:12:c3:4a:52:42:5a:d4:47:aa:89:b0:95:2b:
                    c8:06:02:8c:59:f7:0e:d8:68:8d:18:cd:8d:b2:82:
                    11:25:29:b6:56:66:0c:82:0a:de:ef:c0:ad:00:07:
                    1c:57:3f:a5:0d:86:cf:32:63:77:90:a8:5b:a8:26:
                    51:b0:6d:82:b5:c1:23:62:cf:6e:ba:bf:64:8d:23:
                    4c:b8:8c:53:69:c3:d0:59:f3:6f:4f:b4:e8:55:c8:
                    cb:49:7b:b8:56:1b:50:9e:ab:7a:66:79:d1:62:16:
                    4d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F8:64:C7:B2:0B:E4:29:9A:97:95:7F:54:CF:8B:5C:83:C4:AB:22
            X509v3 Authority Key Identifier:
                keyid:E3:C3:37:DB:66:87:2A:0A:93:5C:9D:55:5E:5B:6D:D3:53:07:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/48M322aHKgqTXJ1VXltt01MHLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/6E2FFEDE03B711EB97FBE568C4F9AE02/48M322aHKgqTXJ1VXltt01MHLHQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:46:8d:e9:7b:c6:f2:bb:63:17:33:ca:c6:c6:e8:b1:4a:f9:
         f0:32:7e:bf:07:c7:5a:e4:4a:0d:db:be:ad:1f:3c:4d:86:e2:
         a9:c2:a0:2a:e9:ae:33:1e:35:6e:86:b1:e3:7b:d6:89:f9:80:
         2d:fb:2c:1d:a0:69:e8:c3:16:95:9f:7a:97:1c:e0:d8:c9:44:
         be:ff:71:a4:e5:cf:d5:15:c2:e2:7e:42:27:92:78:79:8c:df:
         0d:c3:fe:0a:48:17:c3:29:fc:6c:e3:7b:cf:42:34:f1:73:48:
         0c:fe:97:fe:25:a8:93:ae:9f:c3:76:6a:da:de:18:4a:b5:18:
         e5:00:f3:4d:1d:8f:f3:06:11:d6:99:e1:3c:3b:ab:87:10:f8:
         fe:90:c3:e5:6b:87:73:41:36:33:74:f0:82:a1:0f:d0:aa:a4:
         6e:98:e7:f0:c1:79:78:6e:d9:06:94:5c:ad:90:a3:40:6e:06:
         b2:b6:d0:d6:59:bc:53:8b:c1:a6:a0:f7:f8:b3:8e:ad:a4:3b:
         9b:9d:46:a2:86:3d:15:b9:d2:a1:1f:5b:f0:79:25:7d:37:9d:
         34:86:3e:92:9f:10:db:38:b4:3d:0f:2e:9e:11:08:be:0b:12:
         bc:60:a2:35:9a:01:b7:cb:31:32:26:b4:0d:b0:84:b1:26:1e:
         68:7d:c3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:30:12 2026 by rpki-client