Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
File:                     L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json)
Hash identifier:          NwY2rr37StXkLvyOMZu0Lbcgzn39Lt6hldaIUYog3rM=
Subject key identifier:   B4:A8:D2:83:9E:03:79:85:49:C1:B6:64:E9:8D:6B:2C:77:1E:E1:65
Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5
Certificate issuer:       /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
Certificate serial:       0838
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
Manifest number:          0831
Signing time:             Sat 28 Feb 2026 21:17:42 +0000
Manifest this update:     Sat 28 Feb 2026 21:17:42 +0000
Manifest next update:     Sat 07 Mar 2026 21:17:42 +0000
Files and hashes:         1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: e4E7GcbsPAc+ksmzlmvs45bfRzw2gdq1m19csf9yu2E=)
                          2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: Rn+i/x8H2eWzt9fmwTwYfrRk8EJ3dubKBMEnFNfmhUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl
                          rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104 (0x838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
        Validity
            Not Before: Feb 28 21:17:42 2026 GMT
            Not After : Mar  7 21:17:42 2026 GMT
        Subject: CN=69a35b76-27be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:56:eb:d6:86:e0:9f:01:93:97:9a:ca:87:
                    25:00:00:5f:d4:e3:08:9c:b6:50:6c:57:a1:39:80:
                    15:37:66:0a:9f:f4:76:19:b5:d4:2a:2b:dd:27:03:
                    da:be:cc:e9:d3:7f:2b:4d:81:05:e8:ff:2e:ed:5d:
                    6a:3a:5d:70:05:76:74:66:9a:64:a3:41:03:d3:22:
                    4f:c8:80:f2:53:58:50:82:05:79:00:24:b0:5c:27:
                    51:ba:79:9b:5b:20:38:a9:70:ea:ef:31:e2:56:20:
                    e9:72:26:de:db:8b:03:8c:47:53:6a:e5:71:cf:2f:
                    f6:80:8a:bc:99:c5:5d:63:50:1c:f6:28:e7:79:a4:
                    3a:11:31:ea:3b:c5:60:c2:3f:e5:1a:69:46:1f:82:
                    2c:9c:2f:fa:39:7a:24:2d:94:e4:a1:f3:15:70:11:
                    c9:d0:2b:e4:e5:4d:41:f4:46:76:bf:92:32:32:b7:
                    ee:ce:41:6f:de:9e:c8:10:9e:85:ff:f0:1c:e9:4d:
                    15:43:f0:bd:80:2c:01:38:7d:81:58:c1:93:98:f6:
                    51:df:8d:8e:7f:66:c7:a4:eb:06:22:a1:82:c9:e7:
                    f2:ae:14:63:a9:5e:09:f7:6b:32:ca:79:a2:87:4b:
                    d8:e1:93:46:c5:2e:a8:19:eb:2c:68:0b:e4:bf:eb:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A8:D2:83:9E:03:79:85:49:C1:B6:64:E9:8D:6B:2C:77:1E:E1:65
            X509v3 Authority Key Identifier:
                keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:83:da:44:b0:40:ca:b8:9c:86:d2:df:73:9c:ee:5f:b0:26:
         62:47:f9:d2:41:fd:8c:79:f5:6c:c7:53:82:42:6a:a3:f8:7b:
         7a:5b:25:93:7e:19:89:92:01:de:71:cc:12:c4:4d:b9:59:3b:
         82:65:7e:f6:75:21:fe:20:a5:f7:11:c3:39:1b:f2:b2:4f:65:
         c6:32:38:b3:c4:7f:a8:0b:c6:17:bf:4b:fe:f2:c1:6e:1d:7f:
         28:4e:d2:e7:c9:eb:04:a4:39:d2:98:a3:34:73:fe:e1:7b:c0:
         7e:c1:d1:02:94:b6:a7:93:00:c2:17:8d:f8:7f:9c:05:90:66:
         bf:c3:ec:8f:ef:82:a3:d9:5f:42:51:77:e6:34:9e:95:7a:07:
         6c:64:c3:26:ea:cb:1a:a5:02:4d:2e:e3:38:0a:14:44:48:07:
         ed:f6:9b:73:b7:f9:e7:40:54:01:ad:03:d5:bf:08:3f:79:bc:
         9a:af:5a:7b:eb:e2:20:99:8b:c0:49:bf:1d:bb:1c:66:de:de:
         dd:cc:8b:b8:c0:70:10:79:0b:00:af:a6:bf:65:08:cd:7c:41:
         59:da:29:d5:bc:37:ac:51:17:51:e5:fd:f2:77:63:55:df:ed:
         54:d7:e0:43:b4:ae:da:26:56:3a:8d:f6:8d:2b:a3:11:70:27:
         aa:08:a9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:26 2026 by rpki-client