Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
File:                     mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json)
Hash identifier:          j2U8iGERA5Ys9GZbq18VJ1SwMzBYymD16CKBTwDz2jM=
Subject key identifier:   61:5B:A5:22:AD:2B:47:FF:DC:06:BD:37:B8:50:5F:36:66:8A:3E:99
Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70
Certificate issuer:       /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
Certificate serial:       0636
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
Manifest number:          061D
Signing time:             Sat 28 Feb 2026 23:26:47 +0000
Manifest this update:     Sat 28 Feb 2026 23:26:46 +0000
Manifest next update:     Sat 07 Mar 2026 23:26:46 +0000
Files and hashes:         1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: Mqzcfj939FP8pujF98w181iW4oy0uEA7xI1hDDTx57w=)
                          2: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: hA/qYpYBMY/Kd41Yn5++b5Q+qTaDQ7FCreW/lO2fSUE=)
                          3: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: +jBGaqvKM/p3gFY9j31Ktn8G8q5l2wqpkIruownzwFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl
                          rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1590 (0x636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770
        Validity
            Not Before: Feb 28 23:26:46 2026 GMT
            Not After : Mar  7 23:26:46 2026 GMT
        Subject: CN=69a379b7-9f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:af:da:9f:9d:2b:6f:1a:7c:57:e6:39:68:
                    e4:74:9b:31:4b:99:18:c5:67:32:d4:2f:02:38:bc:
                    4a:5d:bc:ab:5b:0f:60:fd:1d:dd:e9:10:11:c2:7b:
                    8f:e8:2f:d3:a6:c6:18:4b:af:c8:42:41:e6:e5:50:
                    b5:65:8c:31:4c:b1:3a:c3:47:ed:ac:5c:8e:b0:6d:
                    15:bb:b2:87:d5:5d:db:4a:26:20:3e:c8:cf:af:8e:
                    75:c1:c2:5b:8f:6a:ed:4c:43:7c:66:95:bf:69:95:
                    7d:e8:96:95:64:4f:49:73:6d:bd:42:6f:61:c1:26:
                    33:75:f4:9a:9c:13:ae:83:08:50:3b:50:0f:5b:fc:
                    17:a2:be:77:58:cb:10:8a:b9:16:96:c4:63:78:a5:
                    6f:4a:9c:29:2f:cf:42:73:aa:a1:b7:f4:ae:55:ec:
                    95:66:24:78:ea:2f:55:04:6e:80:92:52:8b:05:56:
                    d0:b9:2c:c5:1b:09:05:62:f9:62:01:97:b1:56:da:
                    73:86:1a:7c:cc:59:4e:b5:44:a2:ab:3b:c3:b6:2a:
                    18:b7:88:c5:0c:92:38:93:e1:21:49:8f:79:1c:54:
                    e9:d5:e0:96:66:07:e1:43:50:ff:8b:d3:27:0c:87:
                    11:98:4e:9c:ec:08:32:4a:c9:5c:be:6f:54:c3:17:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5B:A5:22:AD:2B:47:FF:DC:06:BD:37:B8:50:5F:36:66:8A:3E:99
            X509v3 Authority Key Identifier:
                keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:49:ec:52:36:af:59:af:52:cd:0f:c7:bc:39:60:c7:50:2b:
         bd:43:f9:92:cd:e1:e3:5d:1b:dc:74:99:d1:a3:8b:8a:ab:f9:
         e5:d2:12:87:91:b0:75:a8:62:cf:ed:b0:15:9a:55:ad:92:38:
         01:7d:12:2b:ae:63:6a:88:1d:56:59:86:22:53:ab:c9:b9:53:
         5e:38:78:1c:38:e2:d3:e8:c4:bd:0d:b6:6c:ca:92:0c:7c:20:
         5b:e7:51:3c:90:a0:4e:1e:29:0d:9c:b7:13:f8:61:37:70:71:
         5e:8d:6a:a2:77:19:e6:47:30:a9:e3:f9:47:f2:7d:60:fe:d6:
         b4:51:28:9c:14:54:65:61:a5:e7:f7:82:16:87:8b:3e:49:ff:
         34:4d:94:ae:07:3f:b5:be:ca:b6:c2:65:e6:ab:78:aa:d9:c8:
         58:07:ed:c6:7d:5c:99:2f:6a:b6:33:23:e7:0b:4d:02:12:7a:
         9d:ee:2f:31:53:13:42:a8:18:fa:66:c0:b5:90:98:22:8f:f6:
         f4:24:38:5b:38:8d:8c:91:c2:f5:2d:48:d7:2d:11:7a:66:1c:
         03:3f:f4:d4:03:9b:ca:3b:43:06:44:50:eb:b0:0a:09:f8:93:
         e6:13:fe:22:d3:9c:1d:04:96:62:66:cf:ce:e2:60:bd:86:87:
         80:95:71:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:56 2026 by rpki-client