Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
File:                     IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json)
Hash identifier:          5EozxY74jIYoC47r5oHc80GqtZpTGmUs0RGwCcFShtY=
Subject key identifier:   27:D2:07:F3:87:58:8F:96:E2:C2:34:98:B3:11:5A:7B:50:FB:6F:D8
Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6
Certificate issuer:       /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6
Certificate serial:       0D96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
Manifest number:          0D89
Signing time:             Sat 28 Feb 2026 18:05:52 +0000
Manifest this update:     Sat 28 Feb 2026 18:05:51 +0000
Manifest next update:     Sat 07 Mar 2026 18:05:51 +0000
Files and hashes:         1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: Rhc6trJ5TrBSw1ejEUCzmuWPzciwooRPn5otpOL4Gdw=)
                          2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: KmGf8Zvcyufmo51iUasTSRX2HWDW8cDhuB6ClqAH62g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl
                          rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:05:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3478 (0xd96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6
        Validity
            Not Before: Feb 28 18:05:51 2026 GMT
            Not After : Mar  7 18:05:51 2026 GMT
        Subject: CN=69a32e7f-387b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:d3:db:90:9c:1e:07:f8:24:e6:61:ff:b1:
                    24:38:ec:ed:13:78:dc:fd:73:a1:28:16:a0:7f:db:
                    48:df:cd:dd:07:74:95:ba:44:cc:78:bd:0d:4a:9e:
                    af:92:70:3f:8a:22:27:94:5b:82:df:75:43:42:96:
                    a1:a8:da:37:0c:16:ea:87:f3:5f:ac:af:ea:cb:67:
                    94:75:57:4e:0b:77:be:62:ec:bf:9b:ba:2a:57:48:
                    3a:ea:29:5f:94:14:4d:d7:2a:ff:71:bc:1c:d9:42:
                    72:61:a8:0c:cf:0f:90:16:e6:5a:42:bd:31:e8:2f:
                    d5:be:a1:6a:e0:23:52:6d:56:55:08:db:de:6e:af:
                    e1:51:1c:2c:3a:39:00:3d:63:e0:98:45:96:f1:03:
                    8f:2e:3b:b2:08:29:dc:90:fe:8c:61:6d:40:79:3b:
                    86:7c:d1:9b:2a:d7:24:71:77:4d:d1:73:f9:4c:b4:
                    b7:7a:d1:9d:e8:ab:f0:db:01:02:ba:eb:90:7f:a1:
                    23:ff:76:1f:f6:0d:fd:ac:85:3f:3b:16:99:1a:47:
                    c3:68:4a:76:d3:70:e9:8c:30:92:f2:5c:23:63:e6:
                    15:6e:e1:c2:e3:3a:80:e3:c7:a4:9c:6f:5c:db:5f:
                    10:41:90:ca:83:a8:c5:5e:d4:c6:df:13:fb:b3:d1:
                    69:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D2:07:F3:87:58:8F:96:E2:C2:34:98:B3:11:5A:7B:50:FB:6F:D8
            X509v3 Authority Key Identifier:
                keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0e:64:4c:6e:6f:a7:7e:bd:6c:67:23:26:e1:b4:b8:0c:db:
         1d:54:9f:7c:dd:26:cf:f5:8a:1f:dd:3b:45:85:b0:73:2a:d0:
         6f:5a:37:b8:e5:31:30:a8:bb:8b:f3:67:46:70:42:fa:a7:b0:
         27:3a:f3:50:4d:e5:49:95:b1:6e:e9:d8:b5:e1:86:74:7d:08:
         c7:a8:f7:2a:97:73:6d:85:e2:55:8a:bf:72:aa:4c:74:88:89:
         38:c1:e0:b7:15:96:8c:cb:72:27:6f:d6:4c:9c:bb:30:26:e4:
         59:2f:1f:c5:86:3f:cc:05:e9:aa:a4:d7:8a:eb:84:5f:70:92:
         bd:1c:64:31:53:79:0d:04:ef:a8:10:ee:67:18:9d:12:f8:c2:
         d4:43:6a:de:ca:ed:f8:47:bc:f2:f9:4b:17:c4:dc:c0:26:5b:
         6b:63:17:ff:51:19:00:37:fc:5e:27:44:7f:c2:08:bb:6a:f6:
         da:5e:5d:35:be:65:be:75:c0:18:61:1e:8b:f7:5d:76:5a:24:
         80:c9:db:b5:4d:21:66:74:98:b8:6c:43:d8:11:61:10:1f:38:
         81:31:c4:a7:96:c1:38:47:94:39:67:9b:d3:2c:00:a5:20:3e:
         87:7d:4c:6b:6c:49:7f:7f:db:2f:9e:dc:36:13:77:da:e4:a6:
         28:8d:56:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:23 2026 by rpki-client