Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
File:                     k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft (raw, json)
Hash identifier:          BzXlXb2wd7mzYHl7hdRiJZbaA4/5PzrvbYAd5Q9euAE=
Subject key identifier:   3D:D0:4A:E1:9A:51:07:44:B2:A3:41:50:34:02:1B:F6:D2:81:F5:E0
Authority key identifier: 93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31
Certificate issuer:       /CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
Certificate serial:       07CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
Manifest number:          1257
Signing time:             Sat 28 Feb 2026 19:46:37 +0000
Manifest this update:     Sat 28 Feb 2026 19:46:36 +0000
Manifest next update:     Sat 07 Mar 2026 19:46:36 +0000
Files and hashes:         1: k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl (hash: g7PrkYsVbrhtCnbUoZBzFYMmNKK5FB92sPmqp16LVcY=)
                          2: 6EA6EB5A355011EBAAB1E56EC4F9AE02.roa (hash: vIPNbcJqWxUBjpuSb4YOfnKRdWitZHJvmk+kQLzHWh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995 (0x7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931
        Validity
            Not Before: Feb 28 19:46:36 2026 GMT
            Not After : Mar  7 19:46:36 2026 GMT
        Subject: CN=69a3461d-a515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:8a:28:ba:97:7a:20:56:a3:bc:9e:d2:72:
                    bb:27:df:bc:13:9c:a1:39:7d:70:6d:27:b9:74:6a:
                    d6:11:e8:7e:f9:6e:11:28:56:93:41:d6:d2:80:1e:
                    29:03:34:22:55:b1:2c:5e:e7:ce:fa:ae:07:0e:56:
                    01:75:33:f8:9c:9e:21:ca:ec:5b:ef:31:ec:a0:31:
                    95:1e:37:87:b4:f7:e9:9e:8c:df:b3:b4:b1:5b:f0:
                    a4:7b:68:7d:ce:9e:6d:0f:c1:68:f0:8e:8f:2b:19:
                    3c:0d:4d:bf:99:b0:e8:36:fe:a1:e8:9a:63:1f:7a:
                    52:b0:28:a9:53:10:33:92:df:19:18:dd:5b:d5:a0:
                    66:0a:e7:13:3a:f8:b6:41:c9:82:25:e3:8d:32:7e:
                    78:2c:c7:77:6a:cd:bc:2c:c9:39:26:0d:df:09:5a:
                    6b:14:d3:48:0e:cb:26:a6:92:b3:e5:b0:d9:9e:67:
                    36:2d:39:46:c0:72:2e:fa:92:57:ab:ea:7c:1f:a4:
                    bd:ca:ee:da:81:a2:1d:72:c0:ff:9d:b3:e6:fb:05:
                    f2:38:8a:04:40:e9:ea:4e:85:4e:c5:3b:da:e7:ca:
                    0a:30:54:e8:59:d5:25:dc:c5:5b:89:20:59:19:74:
                    14:c6:ca:df:68:ab:64:06:86:18:18:02:17:d3:a9:
                    bb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D0:4A:E1:9A:51:07:44:B2:A3:41:50:34:02:1B:F6:D2:81:F5:E0
            X509v3 Authority Key Identifier:
                keyid:93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2f:55:ea:de:61:9a:3f:76:84:cc:7c:04:5c:47:1d:7d:b4:
         62:8e:56:b6:b5:25:89:5a:01:c5:35:8d:17:da:69:fc:e3:e9:
         68:9f:95:e5:12:f0:4f:33:30:2d:e0:21:ac:4c:14:52:1d:87:
         75:cc:b7:f2:c0:af:fb:d8:64:11:b0:32:a8:13:72:db:5f:17:
         bb:71:b8:b6:9f:5e:29:f4:16:f1:08:76:20:99:57:79:ed:f7:
         8e:0f:8f:67:3d:c1:50:43:f1:94:f0:ff:59:a5:3a:24:ab:c6:
         c3:52:cb:3c:8c:9d:26:fe:2f:64:75:c5:51:8f:2a:51:fa:68:
         34:0a:34:b8:2b:f5:65:65:1d:c3:d7:72:7b:c5:df:c1:8c:b6:
         38:8c:39:88:c0:9e:1c:60:f6:3a:e1:4f:45:cb:c1:ab:d9:1e:
         ed:95:a0:81:74:aa:f6:fb:a1:df:08:b2:f9:8e:ef:89:36:06:
         19:a3:58:3b:85:f9:cb:08:ae:8d:3a:24:c1:bc:a8:8e:4c:39:
         69:76:4b:4a:3d:ba:f8:ea:ee:1a:b0:1a:59:f5:64:ed:48:7d:
         5a:65:05:58:cb:eb:9f:d8:69:3d:50:93:c1:e5:62:fc:a4:30:
         47:c5:92:0e:a8:58:b2:73:49:c7:0a:e8:74:6a:fa:aa:75:aa:
         50:58:d5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:08 2026 by rpki-client