Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
File:                     cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json)
Hash identifier:          YG81nk9zKjwMWubvigAsFzoIr4kic1akwS23KX84VeY=
Subject key identifier:   F1:56:B3:C0:D1:D1:32:4C:97:F4:D5:C0:0E:CA:EC:B5:21:FF:B2:A1
Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
Certificate issuer:       /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Certificate serial:       132F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
Manifest number:          4870
Signing time:             Mon 02 Mar 2026 14:21:41 +0000
Manifest this update:     Mon 02 Mar 2026 14:21:40 +0000
Manifest next update:     Mon 09 Mar 2026 14:21:40 +0000
Files and hashes:         1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: Wn4eurWv/yqCWBylxiO37DG86jhuGsGHWD5og5k8lgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4911 (0x132f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
        Validity
            Not Before: Mar  2 14:21:40 2026 GMT
            Not After : Mar  9 14:21:40 2026 GMT
        Subject: CN=69a59cf5-e506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ac:e4:a2:c8:33:a5:01:c0:d2:cb:44:87:e9:
                    aa:76:eb:54:de:d4:70:13:67:58:3d:57:f4:df:86:
                    1e:a9:57:e1:1e:ca:e1:dc:31:86:34:72:b8:ce:ea:
                    87:5f:ee:21:b8:8b:53:31:8d:fa:a8:be:07:73:f1:
                    24:68:45:f9:83:fc:51:45:f2:de:7d:28:6f:b1:b9:
                    44:69:51:c8:fc:01:05:36:30:39:66:65:11:97:7c:
                    e5:88:17:7e:fd:c2:f3:f3:c1:5a:93:da:5a:e9:3b:
                    99:2e:56:04:d0:98:bd:1e:3a:c3:a5:0f:90:07:61:
                    71:bf:5d:49:1d:97:e0:59:01:84:be:0e:f0:72:f8:
                    4a:26:05:68:a0:20:55:56:1b:5c:8f:b3:3b:32:7f:
                    a8:cf:78:6d:10:03:7d:e5:eb:68:51:f4:15:14:c0:
                    fc:e3:8a:58:b3:2a:2b:6f:34:72:60:42:15:07:9a:
                    0e:71:08:1a:3f:12:07:98:4b:e5:9e:42:b3:d1:c8:
                    02:75:a8:17:31:4e:c9:ae:91:b4:17:aa:b7:0c:ca:
                    a2:fe:a8:a1:5a:e3:dc:38:a5:20:26:99:7b:b0:77:
                    43:86:fd:ae:8a:be:3e:6a:3a:62:71:35:88:4e:5f:
                    3b:69:8b:3a:d4:e9:26:5a:8e:6a:42:57:3b:0a:10:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:56:B3:C0:D1:D1:32:4C:97:F4:D5:C0:0E:CA:EC:B5:21:FF:B2:A1
            X509v3 Authority Key Identifier:
                keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0e:6d:27:7c:aa:51:17:36:35:05:e9:c3:08:a6:5f:9f:4e:
         df:22:95:b6:d6:76:5b:0e:35:f5:2b:0e:1c:38:37:08:28:d6:
         4f:61:2f:9d:92:6e:e7:6d:c3:f7:b3:e6:e9:8c:56:4b:e8:ab:
         aa:cd:18:f6:af:bd:b0:06:40:58:e1:f8:a1:46:14:49:e1:e4:
         39:fd:9a:a5:1e:e4:4c:42:b3:e9:9c:ad:07:6b:ad:e7:3e:dd:
         4e:5d:ec:fa:0e:21:64:66:54:ff:2c:4f:ac:55:48:d8:12:2e:
         94:13:23:dd:cd:36:20:6b:fb:a1:6b:bc:0a:4e:2b:8f:e6:63:
         12:31:61:0f:b8:5f:9d:8c:17:56:23:3b:73:34:d6:3c:16:92:
         ce:59:50:f8:83:19:a9:e3:92:0f:df:4a:cf:2b:3c:73:d6:33:
         cc:39:1b:94:81:60:96:9c:33:32:1a:e7:7a:10:93:c7:53:10:
         23:2c:2c:bd:4e:71:2f:23:4b:8e:25:23:2a:44:35:70:28:fe:
         37:94:6e:48:f1:ab:0a:eb:3e:8c:e0:f8:83:7c:60:18:9d:f4:
         7c:60:ff:c6:4e:d1:8d:db:b8:35:8d:eb:fa:3f:74:31:94:71:
         49:b4:b1:77:46:89:d2:ad:22:f4:8b:93:74:54:a7:2f:df:08:
         50:3f:fa:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVENjExMTAvBgNVBAUTKDcwMUI1NUVEMjBEODNFMzQ4RDgyMzdDRTM3NTk3OTU5
RUJDMDE4MjQwHhcNMjYwMzAyMTQyMTQwWhcNMjYwMzA5MTQyMTQwWjAYMRYwFAYD
VQQDEw02OWE1OWNmNS1lNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7qzkosgzpQHA0stEh+mqdutU3tRwE2dYPVf034YeqVfhHsrh3DGGNHK4zuqH
X+4huItTMY36qL4Hc/EkaEX5g/xRRfLefShvsblEaVHI/AEFNjA5ZmURl3zliBd+
/cLz88Fak9pa6TuZLlYE0Ji9HjrDpQ+QB2Fxv11JHZfgWQGEvg7wcvhKJgVooCBV
Vhtcj7M7Mn+oz3htEAN95etoUfQVFMD844pYsyorbzRyYEIVB5oOcQgaPxIHmEvl
nkKz0cgCdagXMU7JrpG0F6q3DMqi/qihWuPcOKUgJpl7sHdDhv2uir4+ajpicTWI
Tl87aYs61OkmWo5qQlc7ChBvOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPFWs8DR
0TJMl/TVwA7K7LUh/7KhMB8GA1UdIwQYMBaAFHAbVe0g2D40jYI3zjdZeVnrwBgk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE
NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBqU05namZPTjFsNVdldkFH
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2NCdFY3U0RZUGpTTmdqZk9OMWw1V2V2QUdDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBq
U05namZPTjFsNVdldkFHQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANA5tJ3yqURc2NQXpwwimX59O3yKVttZ2Ww419SsOHDg3CCjWT2EvnZJu523D
97Pm6YxWS+irqs0Y9q+9sAZAWOH4oUYUSeHkOf2apR7kTEKz6ZytB2ut5z7dTl3s
+g4hZGZU/yxPrFVI2BIulBMj3c02IGv7oWu8Ck4rj+ZjEjFhD7hfnYwXViM7czTW
PBaSzllQ+IMZqeOSD99Kzys8c9YzzDkblIFglpwzMhrnehCTx1MQIywsvU5xLyNL
jiUjKkQ1cCj+N5RuSPGrCus+jOD4g3xgGJ30fGD/xk7Rjdu4NY3r+j90MZRxSbSx
d0aJ0q0i9IuTdFSnL98IUD/6tw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:32 2026 by rpki-client