Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
File:                     11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json)
Hash identifier:          g/2CP8t/fUzgMqhbur66Rdn0sh4UJryhPHsk6j8kUO4=
Subject key identifier:   9D:EC:D8:41:F9:2E:53:08:5E:33:EE:55:04:2A:81:06:F3:0F:DD:1F
Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE
Certificate issuer:       /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE
Certificate serial:       2C36
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
Manifest number:          2C36
Signing time:             Mon 02 Mar 2026 15:37:03 +0000
Manifest this update:     Mon 02 Mar 2026 15:37:03 +0000
Manifest next update:     Mon 09 Mar 2026 15:37:03 +0000
Files and hashes:         1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: sIdew6w2HAr1Xm8k8iESTO4AQn8fd/S4cghAVQb6SwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl
                          rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11318 (0x2c36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE
        Validity
            Not Before: Mar  2 15:37:03 2026 GMT
            Not After : Mar  9 15:37:03 2026 GMT
        Subject: CN=69a5ae9f-ad23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:86:66:58:ba:48:ae:82:a7:4c:3e:16:cc:
                    35:ef:a2:21:66:98:4d:ef:f0:12:e5:62:69:8b:37:
                    61:e0:c2:ba:56:c0:da:f7:d0:f0:80:57:a0:f7:60:
                    98:12:4e:5b:b7:ef:35:f2:d0:bb:e5:0e:17:a0:3a:
                    2e:32:aa:c5:32:7a:17:55:2d:e7:07:78:97:a3:f0:
                    b4:94:e0:0d:3a:a1:92:35:0e:0b:fb:85:26:84:ef:
                    82:3d:a1:44:a2:d9:2a:f7:23:25:f6:78:a6:aa:53:
                    9e:16:d6:d9:58:89:1a:fc:ed:63:6b:b2:e9:6a:db:
                    2c:2b:ef:0a:68:0f:00:fa:1e:2c:45:9c:06:d2:0a:
                    62:64:29:6b:e5:46:eb:bb:7c:5f:4b:da:57:b1:2d:
                    21:32:76:ea:dd:9a:ca:5b:93:53:94:c9:0e:ed:63:
                    b9:9f:ba:24:25:fb:cd:1a:ef:2b:8f:2d:2f:85:4a:
                    32:86:8c:c5:4f:04:28:15:0a:c1:73:a4:83:58:e3:
                    b0:a3:fc:0c:cc:71:29:8a:d3:73:e5:95:40:df:94:
                    d9:c6:a5:9f:be:86:48:ed:dd:9a:a7:21:0f:93:40:
                    05:26:39:b4:30:7c:ea:00:e5:21:94:5c:00:8d:8e:
                    e4:86:1a:a6:f6:f1:7a:d7:83:9f:20:bd:c1:97:0d:
                    96:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:D8:41:F9:2E:53:08:5E:33:EE:55:04:2A:81:06:F3:0F:DD:1F
            X509v3 Authority Key Identifier:
                keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:63:6d:58:2d:b4:ce:00:bd:a3:73:21:b2:53:4c:bf:1c:24:
         30:1c:b3:15:cf:37:e4:55:a9:31:38:a9:35:b1:37:08:3e:c5:
         b5:d6:d2:7b:31:d8:65:1d:d2:e3:27:d3:bd:53:a5:44:99:c3:
         d4:03:40:89:18:3a:1d:d3:f7:10:63:5f:a1:cc:67:63:58:65:
         a3:25:f9:df:bb:36:4d:21:56:9d:6e:26:2c:38:7b:cd:c1:81:
         23:b6:91:f6:53:b0:23:10:52:62:7c:85:bf:74:ef:5c:7b:2b:
         35:85:9f:12:b1:d4:ff:19:75:e2:d7:ae:81:de:9d:b4:7b:e2:
         6a:9a:78:ee:6a:36:21:41:85:38:b9:9d:b2:9b:48:c8:aa:97:
         9e:24:2e:8e:85:af:c8:cb:be:f2:31:55:d5:d3:7c:57:fb:5b:
         ff:12:9b:03:05:c5:6a:42:98:10:dd:d6:b3:77:84:69:52:21:
         8e:e3:ef:e6:9b:13:0b:fa:41:6f:42:1e:06:48:a6:61:d8:66:
         b6:0e:fe:d9:31:01:08:1b:70:f2:b0:cd:86:ab:78:c2:75:cc:
         0a:c5:a3:da:a7:b4:27:a3:cf:3b:cf:f3:98:9f:d7:78:0b:dc:
         14:ee:7a:49:f9:34:bb:5f:3a:d6:a5:27:70:9e:a5:01:58:fd:
         a7:a3:06:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:24 2026 by rpki-client