Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
File:                     3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft (raw, json)
Hash identifier:          Xrh6ITBWSA/O7d/X5eSdN1hztmRRm5aUDgdTELZnNPw=
Subject key identifier:   AD:64:A6:FA:33:1A:F9:29:77:58:53:0E:E3:FA:E2:8B:52:85:71:77
Authority key identifier: DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76
Certificate issuer:       /CN=A912BAAD/serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
Certificate serial:       0C8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
Manifest number:          0C7C
Signing time:             Sat 28 Feb 2026 18:47:33 +0000
Manifest this update:     Sat 28 Feb 2026 18:47:33 +0000
Manifest next update:     Sat 07 Mar 2026 18:47:33 +0000
Files and hashes:         1: 3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl (hash: 9wmhnaOkpj7DNzw3/IAbav+ijGpPDM0ccfz8g+KTB78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl
                          rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3211 (0xc8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BAAD, serialNumber=DDF884911AD3F28CC9D96A8C24A939A65F8B2576
        Validity
            Not Before: Feb 28 18:47:33 2026 GMT
            Not After : Mar  7 18:47:33 2026 GMT
        Subject: CN=69a33845-5cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3e:eb:15:f6:b4:55:77:59:1b:bc:56:93:a2:
                    45:5c:7a:85:6a:79:1e:a4:fb:05:e8:1e:ea:2e:7a:
                    f9:4b:ef:5b:c8:18:3c:97:7f:50:5c:6d:9b:b5:37:
                    49:b0:b8:0e:d3:26:94:ec:2f:25:68:7c:f5:2d:f1:
                    25:63:ef:62:dc:d8:6f:65:5f:26:d2:29:81:04:17:
                    45:7c:d6:ab:90:c3:8a:40:b2:97:ef:2d:13:18:e2:
                    cf:33:0f:c5:56:83:2f:15:cb:47:f8:15:55:c6:dc:
                    dc:0c:f7:83:bd:6f:92:72:bd:0f:d6:e8:a2:ee:ab:
                    b5:ea:6e:cf:27:1d:55:24:1f:29:c9:a3:83:5b:c9:
                    d8:25:6c:e2:95:b5:67:f2:d6:ce:a7:2c:00:bd:1b:
                    1f:42:66:e0:56:44:b1:bb:44:60:d6:d3:43:0f:d9:
                    85:da:e5:72:e6:fd:d1:5e:18:ef:e1:ed:83:3c:b6:
                    22:5d:df:a1:9c:d3:09:b9:d1:04:4a:44:d5:23:45:
                    99:ea:34:c8:9f:d7:71:05:76:a8:d4:4e:af:36:b8:
                    11:e6:90:9b:71:35:29:9f:77:39:bb:4f:8a:c3:9f:
                    0c:f2:b5:ac:d1:34:59:1f:b7:40:d5:e7:0d:21:6e:
                    af:16:f4:0c:9b:a7:81:39:93:3c:d4:c2:9e:3d:ce:
                    70:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:64:A6:FA:33:1A:F9:29:77:58:53:0E:E3:FA:E2:8B:52:85:71:77
            X509v3 Authority Key Identifier:
                keyid:DD:F8:84:91:1A:D3:F2:8C:C9:D9:6A:8C:24:A9:39:A6:5F:8B:25:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAAD/521ADDC8184811EA9078562BC4F9AE02/3fiEkRrT8ozJ2WqMJKk5pl-LJXY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:45:1c:fc:03:4f:01:34:00:a9:8e:24:21:a9:22:1f:9d:79:
         2f:bb:d6:b5:8a:8b:ba:14:62:9a:df:9e:04:fb:17:89:7d:86:
         ff:0c:e6:a0:d4:ef:cf:04:a6:c8:6a:25:90:99:2d:06:c8:0b:
         d0:bf:35:ef:4f:61:2e:9e:0a:d6:76:4b:fa:fe:50:e0:4a:2d:
         9d:13:e4:55:d8:4e:df:f9:e2:f9:1b:b1:74:a9:cf:d8:e2:d6:
         d5:3b:0c:9f:55:2f:3a:71:f9:db:3e:2a:8c:68:56:47:14:bc:
         74:93:6f:66:33:2d:eb:26:b6:b1:c7:fb:12:db:22:77:bb:dd:
         01:1d:d0:4d:61:ae:ec:ec:fb:d1:92:f3:bc:82:2b:54:7a:1d:
         6b:40:a5:52:43:fa:a3:95:dd:82:75:56:3d:b9:c2:51:aa:d1:
         ec:8a:ba:2b:5c:09:81:14:5b:0e:2a:a3:37:e6:7a:47:de:f2:
         02:13:dc:2c:89:b5:c4:f8:cf:ff:3d:9c:b7:33:83:ab:d1:8b:
         c1:65:4b:60:21:06:de:9a:0e:c4:c7:f3:48:6c:d9:c3:f5:c3:
         c3:02:2f:92:95:b6:85:68:76:9a:22:42:14:1a:eb:48:95:9f:
         e7:2d:8e:14:f8:bb:54:9e:97:f7:eb:12:fd:ec:46:ac:bd:78:
         8b:87:39:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:38 2026 by rpki-client