Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
File:                     M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json)
Hash identifier:          sCJH6FyvZRNr/LpRQJ1KElXs7xMQLQpiBuoWiTQyM1Y=
Subject key identifier:   B3:33:1A:46:0D:D0:95:66:17:72:55:07:EE:1E:EE:00:EB:C1:66:BD
Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5
Certificate issuer:       /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
Manifest number:          D9
Signing time:             Sun 05 Apr 2026 06:06:24 +0000
Manifest this update:     Sun 05 Apr 2026 06:06:23 +0000
Manifest next update:     Sun 12 Apr 2026 06:06:23 +0000
Files and hashes:         1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: jftTOFOXK89oHr9tbJAzzGDaiK9FUoNDDAhauikzj+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl
                          rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
        Validity
            Not Before: Apr  5 06:06:23 2026 GMT
            Not After : Apr 12 06:06:23 2026 GMT
        Subject: CN=69d1fbe0-ce43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:db:7d:aa:07:7c:de:0f:3a:a0:c0:8d:fc:
                    f6:e3:b7:d0:d8:0e:95:2e:99:43:82:fb:b0:6a:db:
                    ba:1b:24:bc:90:8c:d9:95:16:43:be:ca:0b:2c:86:
                    24:0a:29:5c:4f:d6:31:d0:cd:54:86:b2:eb:db:bc:
                    cf:6d:76:93:62:35:34:dc:f3:d4:00:09:4c:67:8b:
                    5b:96:85:e1:f6:5c:3a:b3:24:05:67:49:0c:a8:b3:
                    ab:53:7a:e9:d5:f4:22:25:9c:dc:5b:e6:94:4c:51:
                    3b:19:e6:9a:52:c6:16:f0:3f:d8:cc:2c:77:78:fd:
                    13:c7:94:35:e3:35:31:93:4c:6a:07:b0:ce:de:6f:
                    3c:f3:d9:6d:5c:36:16:9f:3a:22:71:4c:a8:63:22:
                    4a:ad:a2:30:d5:c6:08:93:35:d3:bf:03:2a:0b:dc:
                    b4:cd:cd:e6:c4:b5:81:1c:59:c6:35:29:bd:31:e7:
                    3a:de:f6:49:1b:b3:f5:6e:62:37:69:1c:6e:a8:98:
                    d6:98:03:12:c7:af:96:16:b3:bd:45:1a:ea:79:de:
                    36:04:9d:dd:06:77:be:2f:5d:97:45:2f:0e:4a:1c:
                    46:63:21:f6:c9:65:4c:21:c0:9c:77:13:11:aa:13:
                    df:32:09:0f:07:6b:70:cd:ae:f2:ba:a1:df:22:c4:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:33:1A:46:0D:D0:95:66:17:72:55:07:EE:1E:EE:00:EB:C1:66:BD
            X509v3 Authority Key Identifier:
                keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:85:ee:72:d0:93:c8:13:76:54:27:e5:8f:8d:af:02:7c:1f:
         3c:70:b9:19:b8:9e:0b:92:2c:0a:75:67:2e:c0:43:d4:52:e7:
         43:13:61:3d:32:c5:4a:76:b1:0a:8d:13:c3:b5:f0:0e:5d:24:
         f8:12:e2:d2:13:46:45:e9:13:65:cc:be:13:15:dc:5b:15:b1:
         d5:71:f4:82:b3:11:3d:d7:45:28:b5:05:38:2a:13:ca:3b:08:
         c7:7a:26:dc:55:12:0c:75:41:06:99:ba:a2:c8:0d:3b:5e:61:
         b4:1d:d4:88:7e:87:48:f8:d8:40:85:04:8c:be:1c:04:0d:8b:
         6d:a8:ac:28:56:f3:c9:60:30:03:0e:c0:95:d8:c6:ea:8d:4c:
         40:16:17:68:ab:06:de:1f:10:58:e8:5d:37:be:e8:bb:c9:6e:
         a8:0a:ec:6e:7d:5d:5e:50:a1:07:ac:db:50:13:23:73:ce:da:
         44:3c:28:e3:00:06:ab:79:57:98:87:2a:5f:b8:83:44:ee:a1:
         df:82:84:5a:b0:f4:fc:25:c2:ce:09:cb:94:ee:59:70:9d:46:
         1e:1f:9c:13:8a:36:64:34:e1:05:3c:e6:0a:1b:93:a6:0b:3a:
         4e:68:3a:ab:56:97:f7:f1:fe:f9:51:68:73:bb:59:0e:a7:56:
         ae:ad:ef:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkYxQ0MxMTAvBgNVBAUTKDMzQTAxNzRBNEE0QjAwOUMwMTE1MTU5NjkxMzZGMzAx
MDg5REI1QjUwHhcNMjYwNDA1MDYwNjIzWhcNMjYwNDEyMDYwNjIzWjAYMRYwFAYD
VQQDEw02OWQxZmJlMC1jZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZ/bfaoHfN4POqDAjfz247fQ2A6VLplDgvuwatu6GyS8kIzZlRZDvsoLLIYk
CilcT9Yx0M1UhrLr27zPbXaTYjU03PPUAAlMZ4tbloXh9lw6syQFZ0kMqLOrU3rp
1fQiJZzcW+aUTFE7GeaaUsYW8D/YzCx3eP0Tx5Q14zUxk0xqB7DO3m8889ltXDYW
nzoicUyoYyJKraIw1cYIkzXTvwMqC9y0zc3mxLWBHFnGNSm9Mec63vZJG7P1bmI3
aRxuqJjWmAMSx6+WFrO9RRrqed42BJ3dBne+L12XRS8OShxGYyH2yWVMIcCcdxMR
qhPfMgkPB2twza7yuqHfIsSaYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMzGkYN
0JVmF3JVB+4e7gDrwWa9MB8GA1UdIwQYMBaAFDOgF0pKSwCcARUVlpE28wEInbW1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy80M0VBNkIxOEVG
NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9NNkFYU2twTEFKd0JGUldXa1RiekFRaWR0
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRiVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjFDQy80M0VBNkIxOEVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9NNkFYU2twTEFK
d0JGUldXa1RiekFRaWR0YlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkoXuctCTyBN2VCflj42vAnwfPHC5GbieC5IsCnVnLsBD1FLnQxNhPTLFSnax
Co0Tw7XwDl0k+BLi0hNGRekTZcy+ExXcWxWx1XH0grMRPddFKLUFOCoTyjsIx3om
3FUSDHVBBpm6osgNO15htB3UiH6HSPjYQIUEjL4cBA2LbaisKFbzyWAwAw7AldjG
6o1MQBYXaKsG3h8QWOhdN77ou8luqArsbn1dXlChB6zbUBMjc87aRDwo4wAGq3lX
mIcqX7iDRO6h34KEWrD0/CXCzgnLlO5ZcJ1GHh+cE4o2ZDThBTzmChuTpgs6Tmg6
q1aX9/H++VFoc7tZDqdWrq3vRw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:17 2026 by rpki-client