Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
File:                     09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json)
Hash identifier:          /2RmUYtJ3BiMh4aNfCdJeAmSF3W3V4rJ1UWuhUS4JtI=
Subject key identifier:   F2:30:98:4F:3D:04:8A:0B:F5:F3:F9:8E:F5:BF:F7:0D:DE:27:1D:E6
Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A
Certificate issuer:       /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
Manifest number:          010F
Signing time:             Tue 03 Mar 2026 01:11:59 +0000
Manifest this update:     Tue 03 Mar 2026 01:11:58 +0000
Manifest next update:     Tue 10 Mar 2026 01:11:58 +0000
Files and hashes:         1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: pAMhTnYcSjW8UUmypFfW3AxmQvb48ifeXMKZ7AZSXzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl
                          rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 01:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A
        Validity
            Not Before: Mar  3 01:11:58 2026 GMT
            Not After : Mar 10 01:11:58 2026 GMT
        Subject: CN=69a6355f-7b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:8b:47:fd:80:72:c7:90:88:82:96:7f:f7:
                    b9:dd:4d:dd:93:22:04:4e:01:9b:a6:ac:fd:cf:43:
                    72:98:70:53:13:a8:91:81:57:f7:90:f2:0d:84:da:
                    14:eb:55:c3:26:5b:72:08:60:df:24:31:3b:8e:c8:
                    8c:6a:81:ec:d5:a9:16:8f:14:de:f5:e4:d8:fb:0d:
                    4b:9e:fe:b1:fe:5f:94:db:24:78:07:15:64:11:c6:
                    cd:9d:6d:7c:45:58:e9:9c:21:df:31:a7:16:bd:bc:
                    58:41:b1:37:67:a3:da:6d:24:62:96:bf:d3:94:5e:
                    6e:3b:ec:8a:79:af:f9:26:c6:3b:b5:8f:d8:a8:75:
                    87:ed:55:59:c2:df:d5:4a:18:f3:cb:67:b6:90:b8:
                    96:cf:15:76:60:6b:f9:66:e2:66:3f:f9:47:f7:e6:
                    27:65:ee:50:24:28:ec:56:da:5a:2d:00:01:1f:8b:
                    6a:b5:c2:4b:7c:5f:be:ca:97:0d:13:f5:11:d7:8c:
                    de:4d:1e:ea:ea:37:44:a6:71:7a:8c:a5:f2:86:ea:
                    ef:9d:7d:37:b9:9c:e8:80:ff:92:5a:76:68:d3:08:
                    6a:b7:5e:aa:e5:a0:b3:f3:a1:dc:78:a2:cd:33:89:
                    a2:e0:19:2b:7f:c1:25:f6:4c:c1:5a:1c:a9:4d:95:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:30:98:4F:3D:04:8A:0B:F5:F3:F9:8E:F5:BF:F7:0D:DE:27:1D:E6
            X509v3 Authority Key Identifier:
                keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2a:49:71:e8:53:44:d4:fb:67:ab:26:f0:39:8a:7f:c0:bd:
         91:ab:a7:b3:8a:f5:17:27:5c:c5:9e:78:62:bb:44:81:a3:25:
         1b:6b:7f:d9:39:54:d9:34:15:ee:e0:79:70:cd:c5:0c:1e:90:
         ab:54:37:83:c0:3c:4c:96:cd:a2:26:b0:46:5f:99:bc:bf:b4:
         33:45:ce:03:d2:49:dc:3d:79:73:81:1e:5d:b8:fb:11:ba:8e:
         9b:40:3d:75:e8:81:e8:02:c7:eb:49:46:2d:a1:40:e0:47:d6:
         4f:73:dc:60:df:b7:ee:6e:27:1c:ad:51:1b:b0:d7:c9:5c:74:
         5e:50:a3:29:7f:79:c8:58:04:79:18:30:4c:c1:4d:64:8f:3e:
         25:46:20:8a:84:ef:c6:59:99:ac:cd:38:95:cc:bc:f9:7b:7b:
         1f:9e:37:28:47:48:13:86:ae:9f:73:b6:87:42:f9:be:14:e6:
         14:9c:6d:8d:f8:ea:67:72:8c:c4:62:b5:84:e1:de:8e:c9:c6:
         30:00:5d:64:e3:39:f0:28:82:a6:7c:16:d6:e7:96:c5:1a:a0:
         99:89:31:f9:66:dc:4b:e1:fa:c9:fc:88:fb:93:fa:d1:a6:6c:
         b9:e0:dc:b7:d7:d3:ce:a8:cb:05:4c:b9:79:00:98:cb:f5:1a:
         b6:da:85:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlBNzcxMTAvBgNVBAUTKEQzRDc4M0VFNEM2OUJCNTA2M0ZCNUNGNUIyNjI4QkM3
QkVDMzc0OEEwHhcNMjYwMzAzMDExMTU4WhcNMjYwMzEwMDExMTU4WjAYMRYwFAYD
VQQDEw02OWE2MzU1Zi03YjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApIeLR/2AcseQiIKWf/e53U3dkyIETgGbpqz9z0NymHBTE6iRgVf3kPINhNoU
61XDJltyCGDfJDE7jsiMaoHs1akWjxTe9eTY+w1Lnv6x/l+U2yR4BxVkEcbNnW18
RVjpnCHfMacWvbxYQbE3Z6PabSRilr/TlF5uO+yKea/5JsY7tY/YqHWH7VVZwt/V
Shjzy2e2kLiWzxV2YGv5ZuJmP/lH9+YnZe5QJCjsVtpaLQABH4tqtcJLfF++ypcN
E/UR14zeTR7q6jdEpnF6jKXyhurvnX03uZzogP+SWnZo0whqt16q5aCz86HceKLN
M4mi4Bkrf8El9kzBWhypTZV6MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPIwmE89
BIoL9fP5jvW/9w3eJx3mMB8GA1UdIwQYMBaAFNPXg+5MabtQY/tc9bJii8e+w3SK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9BQjg1MzQ0MDdB
M0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUxQmotMXoxc21LTHg3N0Rk
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzA5ZUQ3a3hwdTFCai0xejFzbUtMeDc3RGRJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUE3Ny9BQjg1MzQ0MDdBM0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUx
QmotMXoxc21LTHg3N0RkSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPipJcehTRNT7Z6sm8DmKf8C9kauns4r1FydcxZ54YrtEgaMlG2t/2TlU2TQV
7uB5cM3FDB6Qq1Q3g8A8TJbNoiawRl+ZvL+0M0XOA9JJ3D15c4EeXbj7EbqOm0A9
deiB6ALH60lGLaFA4EfWT3PcYN+37m4nHK1RG7DXyVx0XlCjKX95yFgEeRgwTMFN
ZI8+JUYgioTvxlmZrM04lcy8+Xt7H543KEdIE4aun3O2h0L5vhTmFJxtjfjqZ3KM
xGK1hOHejsnGMABdZOM58CiCpnwW1ueWxRqgmYkx+WbcS+H6yfyI+5P60aZsueDc
t9fTzqjLBUy5eQCYy/UattqFjg==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:42 2026 by rpki-client