Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
File:                     d324l0Vw6bbATiZX5tClA3xxiGs.mft (raw, json)
Hash identifier:          Mg9S8JCsWYgji84N9wZo3TA2xSmNoZraHxWnuPXs57s=
Subject key identifier:   CA:B8:73:B7:09:52:AC:E2:0D:3E:6F:D4:1C:70:3D:BE:B6:E4:97:EE
Authority key identifier: 77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B
Certificate issuer:       /CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
Manifest number:          F0
Signing time:             Sun 05 Apr 2026 05:43:35 +0000
Manifest this update:     Sun 05 Apr 2026 05:43:34 +0000
Manifest next update:     Sun 12 Apr 2026 05:43:34 +0000
Files and hashes:         1: d324l0Vw6bbATiZX5tClA3xxiGs.crl (hash: F8coVw1HZbDArlYi9Mr+7HzK/ltkUO6HMHK9MgESL9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207, serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
        Validity
            Not Before: Apr  5 05:43:34 2026 GMT
            Not After : Apr 12 05:43:34 2026 GMT
        Subject: CN=69d1f687-0038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:c0:c9:76:96:03:ea:c3:91:f9:92:9e:8f:
                    e6:dd:ea:fe:d6:b2:cc:8e:77:37:72:61:52:95:93:
                    ee:1c:dc:dc:16:0f:d2:03:aa:96:05:26:5a:58:ad:
                    8e:8a:e3:29:af:21:56:00:56:80:51:e2:b5:c7:75:
                    55:ea:6d:92:42:dc:6b:49:40:3d:d5:58:1a:63:fe:
                    66:a1:f3:44:d7:c3:bb:86:7c:d8:e4:a1:d8:a6:f3:
                    99:0d:03:b2:b0:84:fc:05:a3:14:a5:27:08:d7:b4:
                    94:58:5a:5d:c2:60:be:e6:eb:89:7f:1d:64:0f:32:
                    f4:b6:a2:4e:d3:d2:4b:6f:1b:8d:e3:4a:3d:3e:be:
                    af:3b:25:f7:eb:bd:7a:68:3a:74:5e:99:0d:cd:b3:
                    29:e9:31:74:3f:06:65:d3:1b:5e:f1:41:d8:71:47:
                    90:17:4c:29:f2:81:84:21:5c:30:76:54:9c:d9:dc:
                    9c:23:52:80:23:78:15:e4:d7:bc:81:6a:f4:93:25:
                    9d:0b:0d:4f:88:8f:dd:7f:5f:69:2d:ce:43:57:ea:
                    3c:16:88:e2:3f:ac:cb:f2:5d:95:4d:7a:34:c5:4d:
                    be:a7:1e:e5:eb:63:64:2d:34:c3:c8:19:d3:3d:41:
                    eb:e5:98:dd:65:b8:e1:84:6d:9c:d3:8e:93:32:fc:
                    61:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B8:73:B7:09:52:AC:E2:0D:3E:6F:D4:1C:70:3D:BE:B6:E4:97:EE
            X509v3 Authority Key Identifier:
                keyid:77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:86:17:08:a1:d8:9d:95:84:bd:65:01:b6:f9:83:9a:cb:5d:
         f2:e7:5a:0f:0c:57:f1:1a:bf:1d:d4:01:7c:8d:ec:2b:ba:09:
         85:24:c1:bb:82:15:73:dc:82:2d:ef:84:1a:17:c8:31:10:47:
         55:2d:e2:75:2a:0e:91:87:a6:14:b2:f6:60:12:06:61:e0:92:
         fa:c1:e7:20:b1:09:e9:ba:f3:e8:04:81:26:d0:fa:df:69:0f:
         a5:d3:74:f0:03:b0:81:a7:dc:5f:66:2b:36:3c:86:49:c8:a1:
         30:9f:d2:54:2d:6f:86:c0:dc:e0:6f:b7:eb:79:5c:2c:3c:68:
         35:3d:93:9a:e9:22:d7:a3:3a:2f:7f:5f:f8:06:b1:0c:fb:51:
         8f:60:14:94:84:52:38:fb:ad:a2:7a:35:8b:37:d7:df:88:25:
         36:ef:c0:70:d9:6d:04:4d:0a:9c:2d:e1:9c:65:77:e2:86:85:
         77:d1:bd:ee:46:f7:b1:fd:a3:7b:9d:21:0f:ec:78:53:c1:42:
         de:71:be:e5:07:5c:54:35:75:2b:db:a4:96:8e:da:c7:a8:73:
         b2:22:de:99:e2:df:48:5b:34:87:b1:1b:fe:6b:47:e2:bf:14:
         eb:3e:93:60:94:29:5b:04:27:73:b8:b5:2e:c7:8a:e2:52:e6:
         fe:7b:a8:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYyMDcxMTAvBgNVBAUTKDc3N0RCODk3NDU3MEU5QjZDMDRFMjY1N0U2RDBBNTAz
N0M3MTg4NkIwHhcNMjYwNDA1MDU0MzM0WhcNMjYwNDEyMDU0MzM0WjAYMRYwFAYD
VQQDEw02OWQxZjY4Ny0wMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9vAyXaWA+rDkfmSno/m3er+1rLMjnc3cmFSlZPuHNzcFg/SA6qWBSZaWK2O
iuMpryFWAFaAUeK1x3VV6m2SQtxrSUA91VgaY/5mofNE18O7hnzY5KHYpvOZDQOy
sIT8BaMUpScI17SUWFpdwmC+5uuJfx1kDzL0tqJO09JLbxuN40o9Pr6vOyX36716
aDp0XpkNzbMp6TF0PwZl0xte8UHYcUeQF0wp8oGEIVwwdlSc2dycI1KAI3gV5Ne8
gWr0kyWdCw1PiI/df19pLc5DV+o8FojiP6zL8l2VTXo0xU2+px7l62NkLTTDyBnT
PUHr5ZjdZbjhhG2c046TMvxhiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMq4c7cJ
UqziDT5v1BxwPb625JfuMB8GA1UdIwQYMBaAFHd9uJdFcOm2wE4mV+bQpQN8cYhr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjIwNy9CNDg4NjFDNkMy
MjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9kMzI0bDBWdzZiYkFUaVpYNXRDbEEzeHhp
R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QzMjRsMFZ3NmJiQVRpWlg1dENsQTN4eGlHcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjIwNy9CNDg4NjFDNkMyMjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9kMzI0bDBWdzZi
YkFUaVpYNXRDbEEzeHhpR3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANoYXCKHYnZWEvWUBtvmDmstd8udaDwxX8Rq/HdQBfI3sK7oJhSTBu4IVc9yC
Le+EGhfIMRBHVS3idSoOkYemFLL2YBIGYeCS+sHnILEJ6brz6ASBJtD632kPpdN0
8AOwgafcX2YrNjyGScihMJ/SVC1vhsDc4G+363lcLDxoNT2Tmuki16M6L39f+Aax
DPtRj2AUlIRSOPutono1izfX34glNu/AcNltBE0KnC3hnGV34oaFd9G97kb3sf2j
e50hD+x4U8FC3nG+5QdcVDV1K9uklo7ax6hzsiLemeLfSFs0h7Eb/mtH4r8U6z6T
YJQpWwQnc7i1LseK4lLm/nuo3g==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:36 2026 by rpki-client