Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
File:                     _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json)
Hash identifier:          UmNB2ewZKdn1RuXvFt2hQGzyEeDyXVXMdc7UBMNnFkw=
Subject key identifier:   9E:86:ED:73:D1:A5:71:FE:88:03:69:40:B0:6E:8F:BA:C7:DC:BD:24
Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79
Certificate issuer:       /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
Certificate serial:       05F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
Manifest number:          05E2
Signing time:             Sat 28 Feb 2026 23:36:16 +0000
Manifest this update:     Sat 28 Feb 2026 23:36:15 +0000
Manifest next update:     Sat 07 Mar 2026 23:36:15 +0000
Files and hashes:         1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: bRXWiS3ZGmFcEnDfUi/2s3Y0GReRD9a8dS+tC+dQGrM=)
                          2: 316ABBEA854611F0AF075D70C4F9AE02.roa (hash: VYKklQ7sC0GnSlFJLoi6ilrtCn1QqOw+2GAk4IP7i50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl
                          rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79
        Validity
            Not Before: Feb 28 23:36:15 2026 GMT
            Not After : Mar  7 23:36:15 2026 GMT
        Subject: CN=69a37bf0-2815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e9:6b:9e:d4:fc:cf:7f:51:e8:20:88:14:30:
                    ad:46:f3:94:39:e6:53:40:23:6e:a4:a1:b8:44:67:
                    6b:3c:43:b6:30:31:ca:b3:33:67:b7:d2:46:fd:47:
                    69:f0:e2:74:50:4d:e7:3f:e7:c9:07:10:bd:ad:7f:
                    1d:5f:2e:cf:eb:36:d3:31:d8:cd:bf:95:fe:ed:a7:
                    cf:e0:d7:24:8b:9f:66:f5:d9:ad:1c:d2:30:11:ca:
                    1d:3d:74:2b:36:cd:52:f1:d7:b1:de:b7:b6:96:f5:
                    6a:ef:31:84:a3:9c:03:8c:4e:cd:42:38:e3:fb:4e:
                    b8:d3:b3:f0:19:03:14:20:d9:13:9d:97:c8:4f:ba:
                    74:4f:a6:2b:ba:48:a0:4b:ab:ce:92:f6:be:45:89:
                    38:8e:d9:13:2b:26:5f:b7:cb:50:3a:9f:d2:e8:4c:
                    fa:74:c4:f6:31:de:be:08:cd:03:33:60:26:ff:f9:
                    b8:32:de:e0:82:e1:09:76:b4:d2:4f:24:30:39:ce:
                    b9:34:f6:bb:47:82:6b:f8:56:fa:e6:bc:6f:e5:93:
                    31:d5:69:49:3f:fc:d3:9a:3a:2a:08:f4:de:58:1c:
                    35:23:7b:ee:49:3d:11:c4:7f:02:46:0b:0f:b0:4d:
                    e9:31:e5:e0:02:dd:22:7c:6c:df:62:77:4a:3f:69:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:86:ED:73:D1:A5:71:FE:88:03:69:40:B0:6E:8F:BA:C7:DC:BD:24
            X509v3 Authority Key Identifier:
                keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e8:ba:c1:2b:82:db:53:6c:ab:fa:2a:9e:58:8c:cb:44:52:
         46:1e:1b:d7:50:84:83:8a:47:fa:4e:2f:cf:c7:72:1a:21:c6:
         34:a8:4a:07:b3:6a:25:34:b3:3f:5d:3e:d7:94:f5:df:9b:b7:
         cc:e5:00:31:59:1d:6b:bf:5a:bc:da:9a:8d:41:d9:73:ad:e6:
         57:6b:35:60:91:00:ab:94:15:1e:a0:13:69:26:01:32:32:20:
         a2:d1:5e:8e:12:27:97:71:d1:30:66:ee:f4:46:4a:ef:ac:bb:
         b7:d9:fc:15:13:19:44:0e:ac:23:be:cb:da:d3:50:5a:32:58:
         b0:cc:f3:14:12:81:f4:27:39:08:10:be:c6:5a:69:cb:9d:4a:
         91:e1:05:27:64:1c:b2:dc:bb:8d:f3:da:58:ee:6e:6b:f6:b9:
         df:5b:76:bd:16:ea:0f:2f:e1:41:79:94:1d:fb:47:2e:07:28:
         cd:27:41:b4:d8:87:91:a7:18:d4:87:1f:aa:b7:ae:ab:d2:32:
         90:08:c0:75:96:92:64:f4:12:c8:38:f9:08:c5:a9:45:8b:76:
         c9:b8:a1:d7:86:fb:51:1f:96:76:7c:62:18:61:b7:98:2b:3d:
         3a:1f:ee:5f:7d:df:3f:92:7e:d9:34:87:e7:ff:66:4e:08:12:
         ef:36:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:02:34 2026 by rpki-client