Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
File:                     o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json)
Hash identifier:          Li7pUq9DdPHwbByE/Y8dwiSoRiXdoEYuRRugUHHBzdI=
Subject key identifier:   E8:A2:60:8B:84:4A:57:AE:FF:A5:4F:71:AB:A9:19:7E:AA:45:E0:80
Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
Certificate issuer:       /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
Manifest number:          32
Signing time:             Tue 03 Mar 2026 08:17:52 +0000
Manifest this update:     Tue 03 Mar 2026 08:17:52 +0000
Manifest next update:     Tue 10 Mar 2026 08:17:52 +0000
Files and hashes:         1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: tgDZFKgJoIlnQ2NQHwfXVzQcYRWsyHle/QYNTb+imQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
                          rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
        Validity
            Not Before: Mar  3 08:17:52 2026 GMT
            Not After : Mar 10 08:17:52 2026 GMT
        Subject: CN=69a69930-8bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:a0:76:a4:fe:86:60:5a:5c:52:ad:f1:03:
                    78:45:e2:9c:e9:6e:07:ac:84:6d:19:8d:fc:f1:13:
                    ea:bd:73:4a:bb:31:cc:50:4c:5b:1f:16:34:e5:b6:
                    9f:1a:e0:b9:33:29:c3:f3:a9:19:e1:54:61:d4:49:
                    18:86:37:b9:63:2b:e5:e2:e3:af:c4:26:1a:bf:ed:
                    c9:1b:a4:54:53:28:c4:eb:e1:3b:c7:d4:b5:44:4f:
                    41:3d:39:96:0b:83:ba:41:a8:da:60:7b:44:6b:35:
                    54:4e:d5:ee:14:ed:38:17:2c:4f:f0:06:e2:a7:0d:
                    ed:0a:63:6c:93:a3:fc:62:99:1a:8b:21:a4:13:e6:
                    ca:63:92:38:69:b9:dc:e7:cd:46:5b:ab:1e:9d:c8:
                    d5:b7:a6:8f:a5:a2:45:51:e1:f1:b2:93:0c:69:22:
                    4a:e3:53:51:d6:c8:85:14:c6:51:53:ba:a2:60:e8:
                    b2:54:2a:ee:d5:98:27:31:29:d7:b4:86:64:70:93:
                    ee:80:62:c3:64:c2:69:f6:d5:98:ac:66:38:f9:fb:
                    6f:96:27:1d:85:bf:47:12:cb:3a:2e:d0:42:fa:d7:
                    ac:16:0b:d7:a2:db:6e:f3:08:45:ec:c4:c1:9d:0e:
                    db:6c:f4:7e:a5:b9:ed:98:fc:8c:cb:93:78:08:57:
                    9e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A2:60:8B:84:4A:57:AE:FF:A5:4F:71:AB:A9:19:7E:AA:45:E0:80
            X509v3 Authority Key Identifier:
                keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ae:73:0e:cf:57:73:88:74:9d:66:37:3c:fa:cb:c8:66:bb:
         be:61:ca:e1:9f:a9:7a:ba:fc:ff:84:bc:99:c6:d3:5b:ef:68:
         b3:b9:dd:90:68:be:3f:80:25:88:e1:21:b1:09:1d:e5:55:d6:
         d2:39:28:f8:0b:72:3e:59:e2:14:ea:88:d3:74:0a:61:c9:92:
         b7:9b:68:a4:20:46:b2:be:4f:a5:39:4a:08:92:94:c6:80:b2:
         c4:20:e9:e5:1c:97:21:d1:51:10:ae:39:46:1c:dc:7d:86:fc:
         2c:39:eb:9b:05:5a:73:16:03:be:3a:5c:90:1e:64:2b:2c:05:
         bc:bd:76:d7:1b:86:59:eb:1b:e4:a5:60:d8:10:c7:e7:af:fd:
         37:dc:34:f3:67:93:f4:aa:2e:92:cf:17:62:91:df:62:6c:ce:
         fa:e7:9c:d8:29:77:17:b0:b5:66:e4:d5:c8:c6:7d:6f:c6:bd:
         40:b2:c1:c3:84:3a:12:dd:60:5a:9b:6d:9d:ee:c2:88:5f:14:
         60:5a:be:3f:49:2a:31:cd:ba:64:fb:b9:c5:4a:5d:33:ab:7f:
         34:38:2b:b5:1d:87:63:17:f7:28:7d:ed:19:84:63:63:17:50:
         c0:07:14:60:d6:5c:54:a1:ab:eb:65:a8:30:3e:c1:90:e2:52:
         ec:0f:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:24 2026 by rpki-client