Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
File:                     B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json)
Hash identifier:          PSYlIfQ726+y5t0DNYqfbVWRyHx7g2QfASqNoM7Vzm8=
Subject key identifier:   4C:3E:40:80:4E:0A:9B:E5:76:7C:9F:3A:D4:CF:23:EA:E4:DD:68:22
Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18
Certificate issuer:       /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
Manifest number:          0102
Signing time:             Sun 01 Mar 2026 07:09:30 +0000
Manifest this update:     Sun 01 Mar 2026 07:09:30 +0000
Manifest next update:     Sun 08 Mar 2026 07:09:30 +0000
Files and hashes:         1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: G2TpwEA6mRxLfg905BHjLGJE4KftXTut0eA1wqBqimE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl
                          rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CB05, serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
        Validity
            Not Before: Mar  1 07:09:30 2026 GMT
            Not After : Mar  8 07:09:30 2026 GMT
        Subject: CN=69a3e62a-59b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:31:d5:95:ae:26:6c:1d:3c:81:1d:c4:ab:
                    b0:c8:87:f2:69:e8:16:47:86:c9:8f:f6:19:bf:73:
                    4d:da:53:2f:f3:1e:3a:5f:65:8c:10:3c:be:47:fb:
                    f9:af:c5:b9:68:09:e5:32:81:5e:11:e9:c4:e1:dc:
                    43:57:a6:1e:32:38:1d:b6:d3:7c:ed:90:19:23:ae:
                    04:dd:94:be:80:34:3b:cd:bc:83:8b:56:67:0b:1e:
                    e2:f8:4f:23:d0:48:86:90:61:15:46:14:ce:e9:58:
                    68:32:f3:5d:be:e2:51:a5:72:e1:6b:db:87:af:6f:
                    3a:ac:65:df:0a:c0:92:45:b4:96:93:a2:7e:3c:84:
                    78:50:cb:68:5b:9b:ec:5e:59:dd:99:e2:9b:68:2c:
                    01:13:c3:14:66:93:82:92:13:36:81:cf:f7:cd:a6:
                    13:e5:c9:78:15:db:76:8d:f3:68:de:e2:6e:12:eb:
                    2f:52:41:29:80:55:94:c6:d8:de:31:92:12:8d:6b:
                    f2:21:02:1f:6e:cb:2a:2f:91:9c:3f:39:6d:37:00:
                    82:a3:94:bf:90:3a:01:b6:b0:ba:b2:32:ef:88:fb:
                    c2:a6:13:3b:74:22:0e:e5:2f:eb:1f:4a:b0:e0:da:
                    43:37:7a:e1:27:74:72:c9:05:f9:73:0f:ad:14:a6:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3E:40:80:4E:0A:9B:E5:76:7C:9F:3A:D4:CF:23:EA:E4:DD:68:22
            X509v3 Authority Key Identifier:
                keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:20:95:f7:22:64:e0:db:fd:7a:f5:85:db:04:ae:61:bd:01:
         9d:54:f1:42:7e:ba:56:51:da:f6:7a:df:88:fe:a5:71:d1:5f:
         75:b3:23:4d:3c:b6:74:4e:8e:f1:fb:d6:aa:36:fc:31:8c:3c:
         68:bc:44:ef:9b:4f:fa:a6:a8:b1:9d:b7:38:08:a9:45:72:09:
         7e:69:09:de:b3:5d:11:21:ef:9a:a6:4a:1b:84:51:97:a4:6f:
         44:28:48:fd:8e:2a:24:36:93:3e:43:e7:9e:56:75:86:1a:dd:
         13:f5:41:bd:c0:ef:bd:e1:87:f8:2b:aa:4e:3e:37:1f:cb:b3:
         cf:d8:b5:4b:fd:c4:8a:71:3b:3f:24:32:17:fa:0e:62:e4:b8:
         5f:ff:1c:a5:6a:87:a3:8c:b4:8f:33:8b:04:c7:f6:b4:8c:79:
         61:b1:ab:77:ad:df:6d:b4:d6:72:1f:2d:14:53:5d:88:2e:34:
         65:a6:4e:5e:8c:52:52:0d:6e:45:df:eb:0a:36:04:c5:ca:2f:
         04:7a:31:42:aa:6f:71:95:4b:b2:03:a7:43:cd:0d:19:68:4d:
         e7:f0:f7:ca:98:5b:02:1e:c6:a4:bd:47:de:d1:49:0c:36:d7:
         b7:e6:77:a8:6c:f7:72:6b:5c:23:50:c3:26:79:f9:24:e2:b4:
         1d:a7:e0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:00 2026 by rpki-client