Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
File:                     NtWtbhJs1bGOwUW8dy9JAPlMprw.mft (raw, json)
Hash identifier:          IUVPCk3gYKfdZz7OtUCbgKyjNWIT8jOAIq4eJTQjmUo=
Subject key identifier:   2C:C7:7B:C6:C3:BE:88:5A:CC:29:C4:FA:6C:49:3A:8C:75:B1:13:32
Authority key identifier: 36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC
Certificate issuer:       /CN=A91FD4E2/serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
Manifest number:          57
Signing time:             Sun 05 Apr 2026 07:28:12 +0000
Manifest this update:     Sun 05 Apr 2026 07:28:12 +0000
Manifest next update:     Sun 12 Apr 2026 07:28:12 +0000
Files and hashes:         1: NtWtbhJs1bGOwUW8dy9JAPlMprw.crl (hash: ioO4H87uHEdsB7hoWqUrUHyYe0LpY3ODsVZ4mSqtDvI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl
                          rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD4E2, serialNumber=36D5AD6E126CD5B18EC145BC772F4900F94CA6BC
        Validity
            Not Before: Apr  5 07:28:12 2026 GMT
            Not After : Apr 12 07:28:12 2026 GMT
        Subject: CN=69d20f0c-ba53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:9d:f2:d9:d6:83:b9:85:dc:b8:60:d5:d2:
                    65:1f:97:ff:b2:4c:24:bb:d3:17:3f:97:cb:65:10:
                    91:5a:49:9c:3d:e9:51:a3:a0:a3:8b:11:a4:ec:23:
                    ad:18:a1:52:f8:46:5f:a0:2c:c2:5c:48:62:fe:00:
                    23:70:49:63:98:76:49:e8:f8:da:bf:9e:53:fe:40:
                    93:43:df:c2:6c:cb:ce:69:9d:04:aa:3d:7b:64:31:
                    a6:97:2e:5c:a0:d1:b4:f5:15:1d:fb:9e:dc:0a:f9:
                    d2:5e:bb:48:a8:da:49:8e:3c:8d:aa:fc:ff:5f:df:
                    27:ce:4d:4b:b3:b4:f6:4a:93:9f:2d:8b:c5:a7:89:
                    fb:26:05:60:01:64:90:c3:f1:ba:c8:dd:5b:39:f8:
                    6c:bd:53:88:3d:74:c5:07:a9:e8:1e:6a:7a:57:ef:
                    d7:82:c4:9f:d3:21:96:31:e6:69:8e:5b:32:27:97:
                    59:16:f1:59:c0:5a:d4:9f:a8:c8:29:eb:fe:13:18:
                    da:bb:56:8d:80:2f:0a:b4:b9:51:40:c4:17:f8:47:
                    3a:da:35:33:74:19:ab:77:4d:d3:33:55:b4:fa:1f:
                    14:b5:3b:a4:49:d5:03:b0:f6:e5:65:49:6b:03:25:
                    cb:f2:99:71:ec:0a:fb:b8:d9:ff:08:5b:5b:06:af:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C7:7B:C6:C3:BE:88:5A:CC:29:C4:FA:6C:49:3A:8C:75:B1:13:32
            X509v3 Authority Key Identifier:
                keyid:36:D5:AD:6E:12:6C:D5:B1:8E:C1:45:BC:77:2F:49:00:F9:4C:A6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtWtbhJs1bGOwUW8dy9JAPlMprw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/1FDB0F3EAEDA11F09D43E22EC4F9AE02/NtWtbhJs1bGOwUW8dy9JAPlMprw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f3:0a:4e:9b:d4:34:a8:cd:c7:84:f5:d3:43:f2:c9:cd:36:
         7b:57:ab:66:64:fc:95:69:f7:81:04:dc:62:f4:eb:5d:59:b2:
         6c:8f:18:d1:9e:da:aa:91:f7:ec:69:2a:d2:91:6a:db:84:c9:
         f9:a9:3d:0f:aa:70:d5:d4:aa:a5:68:9e:f4:b0:0a:1f:fa:e3:
         f7:ee:b2:6c:0c:fa:63:ae:d4:c1:19:c1:82:75:b6:43:d9:82:
         d5:be:f5:3f:f7:86:18:7f:b6:ac:0c:d6:4e:26:ae:93:14:16:
         88:3e:83:d1:49:14:72:b7:a3:b9:1a:b9:c7:3b:e8:d8:29:5b:
         51:84:13:df:e1:30:e5:79:ad:4d:eb:8c:de:7a:c4:d2:7a:9b:
         a2:ef:71:06:29:e8:a0:50:93:4d:cb:8f:d9:2b:6d:54:e5:27:
         52:e7:74:d7:53:50:5c:36:81:e6:4b:2c:76:23:96:c5:fa:65:
         9d:d0:48:e3:cc:ad:09:5b:a9:a5:cb:4b:b8:97:d5:45:98:6f:
         77:2f:bf:39:38:fc:6d:13:b2:09:13:b6:70:d7:66:57:5c:7c:
         81:f3:b2:13:8b:b0:41:9e:df:e5:70:c2:ae:8e:a3:17:d5:17:
         7c:d4:c6:ac:ca:20:a6:b0:e9:13:03:5c:dd:04:f0:0c:6e:41:
         70:1e:29:ab
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RDRFMjExMC8GA1UEBRMoMzZENUFENkUxMjZDRDVCMThFQzE0NUJDNzcyRjQ5MDBG
OTRDQTZCQzAeFw0yNjA0MDUwNzI4MTJaFw0yNjA0MTIwNzI4MTJaMBgxFjAUBgNV
BAMTDTY5ZDIwZjBjLWJhNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCu53y2daDuYXcuGDV0mUfl/+yTCS70xc/l8tlEJFaSZw96VGjoKOLEaTsI60Y
oVL4Rl+gLMJcSGL+ACNwSWOYdkno+Nq/nlP+QJND38Jsy85pnQSqPXtkMaaXLlyg
0bT1FR37ntwK+dJeu0io2kmOPI2q/P9f3yfOTUuztPZKk58ti8WnifsmBWABZJDD
8brI3Vs5+Gy9U4g9dMUHqegeanpX79eCxJ/TIZYx5mmOWzInl1kW8VnAWtSfqMgp
6/4TGNq7Vo2ALwq0uVFAxBf4RzraNTN0Gat3TdMzVbT6HxS1O6RJ1QOw9uVlSWsD
JcvymXHsCvu42f8IW1sGr17ZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULMd7xsO+
iFrMKcT6bEk6jHWxEzIwHwYDVR0jBBgwFoAUNtWtbhJs1bGOwUW8dy9JAPlMprww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENEUyLzFGREIwRjNFQUVE
QTExRjA5RDQzRTIyRUM0RjlBRTAyL050V3RiaEpzMWJHT3dVVzhkeTlKQVBsTXBy
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTnRXdGJoSnMxYkdPd1VXOGR5OUpBUGxNcHJ3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE
NEUyLzFGREIwRjNFQUVEQTExRjA5RDQzRTIyRUM0RjlBRTAyL050V3RiaEpzMWJH
T3dVVzhkeTlKQVBsTXBydy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAq8wpOm9Q0qM3HhPXTQ/LJzTZ7V6tmZPyVafeBBNxi9OtdWbJsjxjRntqqkffs
aSrSkWrbhMn5qT0PqnDV1KqlaJ70sAof+uP37rJsDPpjrtTBGcGCdbZD2YLVvvU/
94YYf7asDNZOJq6TFBaIPoPRSRRyt6O5GrnHO+jYKVtRhBPf4TDlea1N64zeesTS
epui73EGKeigUJNNy4/ZK21U5SdS53TXU1BcNoHmSyx2I5bF+mWd0EjjzK0JW6ml
y0u4l9VFmG93L785OPxtE7IJE7Zw12ZXXHyB87ITi7BBnt/lcMKujqMX1Rd81Mas
yiCmsOkTA1zdBPAMbkFwHimr
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:46:37 2026 by rpki-client