Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
File:                     aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json)
Hash identifier:          XCa/BBO6eEmHZOnkONbxnIm95PJ4zOai2Tz3xSB8kPs=
Subject key identifier:   F3:E8:C8:B3:9F:1D:2B:F4:98:48:45:46:10:52:B4:17:F2:28:EF:0D
Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
Certificate issuer:       /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Certificate serial:       0AD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
Manifest number:          0ABB
Signing time:             Sat 28 Feb 2026 19:45:18 +0000
Manifest this update:     Sat 28 Feb 2026 19:45:17 +0000
Manifest next update:     Sat 07 Mar 2026 19:45:17 +0000
Files and hashes:         1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: TcPA7XHUBdj4EGUnhu/55VBqv/eZJUEz/0ThziKTurM=)
                          2: 834C938A12C711F09998A234C4F9AE02.roa (hash: M4mfahqMzwmq58j++0Teybq9n4Aqspe3mvfksixkbgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
                          rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769 (0xad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
        Validity
            Not Before: Feb 28 19:45:17 2026 GMT
            Not After : Mar  7 19:45:17 2026 GMT
        Subject: CN=69a345cd-0484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:d1:30:66:9f:99:39:ee:03:cb:eb:2d:13:
                    16:60:2a:e5:bc:e1:ea:34:de:1a:5d:ea:41:66:b9:
                    38:9f:1d:fb:9b:f7:23:d3:e5:06:e8:f1:54:8b:32:
                    c5:bd:27:a8:f9:bb:a9:8f:ec:08:49:19:dd:76:0a:
                    a9:3d:b9:87:4d:eb:72:b8:a0:57:23:1f:d6:f8:fd:
                    b7:0f:0d:39:64:08:42:bb:79:88:b3:72:08:48:69:
                    31:d5:d5:01:4d:35:24:26:4a:fe:c3:9d:3a:b7:d3:
                    6f:62:f4:06:35:5a:be:33:4e:df:12:c2:92:df:e5:
                    60:69:b1:f7:01:bd:d3:96:7c:7d:89:32:ef:69:40:
                    7b:31:94:5d:08:5c:35:ad:e2:05:5c:67:91:4a:84:
                    d0:ec:24:15:08:42:7b:0a:ec:83:f1:10:46:52:45:
                    59:a2:85:e2:46:9c:2e:8a:d7:86:48:2b:a4:5f:e7:
                    43:92:d7:7c:11:be:17:39:1f:82:2b:9f:a0:b1:dc:
                    60:8e:df:d8:a1:0b:2b:8f:4e:89:24:80:da:64:66:
                    38:c2:45:94:0d:ec:82:a6:8c:98:b1:cb:a0:82:bb:
                    1e:3e:26:99:fe:35:64:2a:61:25:f1:f3:4e:df:1a:
                    60:3c:a0:06:f1:b9:70:4d:bd:f3:b6:18:ef:e5:74:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E8:C8:B3:9F:1D:2B:F4:98:48:45:46:10:52:B4:17:F2:28:EF:0D
            X509v3 Authority Key Identifier:
                keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e9:ae:3c:88:7c:0c:78:b6:c9:fe:ce:92:2c:be:81:a1:12:
         c0:b7:2f:6c:95:2c:04:17:b4:24:99:13:9f:bc:75:d7:1e:19:
         12:9c:d0:84:36:46:fb:f3:9d:d8:84:a6:f0:76:f7:21:e5:95:
         c4:c2:69:bb:45:b1:5b:a3:a8:9a:2e:9b:b4:47:b8:50:62:93:
         84:c2:c0:76:e3:b4:0b:a9:f6:ee:3f:d9:a2:d3:fe:83:fe:04:
         67:fe:75:ba:d0:29:69:ba:f5:27:f6:1b:6f:85:e5:c5:1e:02:
         37:f5:80:9a:be:8f:b7:30:3a:b3:d6:f8:02:c6:1a:3d:43:bc:
         1e:37:56:5c:fe:c6:30:94:a9:51:7e:9c:1e:6b:c7:f1:2c:5f:
         67:49:eb:53:1c:c4:42:4f:01:ca:d6:e3:21:fa:fa:31:23:b6:
         1c:10:51:f8:13:da:c2:d0:1e:a6:6b:5a:81:23:a8:ba:1c:db:
         80:2d:c9:49:0c:70:a7:78:39:a9:dd:e6:6b:20:83:d9:23:19:
         b5:b6:b9:6e:ab:14:ce:3e:91:2d:62:b5:07:26:9b:c3:d7:31:
         4c:b6:0c:82:a7:f6:31:07:22:22:45:f0:7e:8f:70:76:21:ad:
         b0:95:bb:9d:b1:b0:18:87:76:50:41:f0:15:fd:c0:9b:b5:a3:
         fb:31:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:42 2026 by rpki-client