Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
File:                     mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json)
Hash identifier:          P36uuwlR2age1A7ntOffLieSiDfNmxfff8fpntfLPUc=
Subject key identifier:   B2:99:E6:03:E4:A7:99:B4:98:70:D9:AD:53:1F:FD:D9:46:17:E6:B5
Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
Certificate issuer:       /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
Certificate serial:       3513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
Manifest number:          3513
Signing time:             Mon 02 Mar 2026 02:32:00 +0000
Manifest this update:     Mon 02 Mar 2026 02:31:58 +0000
Manifest next update:     Mon 09 Mar 2026 02:31:58 +0000
Files and hashes:         1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: 86TppH7P7DOdBltlE4odDn4jPImY5+fw8bBKYefYl0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13587 (0x3513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
        Validity
            Not Before: Mar  2 02:31:58 2026 GMT
            Not After : Mar  9 02:31:58 2026 GMT
        Subject: CN=69a4f6a0-60f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:3d:eb:a7:41:49:2c:51:b4:63:a0:f4:be:
                    94:40:1e:71:ea:01:ef:c0:86:39:9a:66:e2:ee:28:
                    58:9b:84:9b:48:88:36:b4:a0:50:ca:6f:ce:a5:07:
                    55:6c:a6:c1:11:5c:78:3c:5d:c6:53:b9:f6:8d:3e:
                    01:3a:54:68:cb:8b:a9:45:a0:8a:14:da:29:da:5b:
                    ed:3d:a5:5a:93:c6:ca:22:ae:cf:3c:d8:56:37:91:
                    e5:a3:e5:f7:c4:27:9c:2e:a5:b1:2d:0e:03:b3:71:
                    a9:fe:97:f8:3a:61:d2:aa:64:71:ee:1b:99:58:2b:
                    ca:78:86:4a:7e:f0:24:8f:32:18:b4:2d:d9:f2:57:
                    6f:97:66:a7:ff:dc:3b:dd:5b:5d:b3:ed:21:b0:0b:
                    f4:c0:fb:5f:32:1f:9b:8c:58:17:a7:8e:ea:a8:b2:
                    26:25:5f:a8:01:36:f0:3d:58:0b:f0:c1:b4:90:f6:
                    53:6a:fd:06:37:47:aa:16:5f:71:11:f9:3f:d6:33:
                    41:91:5d:d3:fe:44:27:6e:ed:75:a1:b6:f3:51:ba:
                    a1:e0:e0:bd:16:e7:64:0e:e4:ab:42:b9:09:5d:ae:
                    ae:64:11:f9:b2:e0:fd:2c:c0:8b:01:63:f9:f9:56:
                    02:74:3d:10:e0:ab:ff:09:24:0c:ef:0c:20:45:5d:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:99:E6:03:E4:A7:99:B4:98:70:D9:AD:53:1F:FD:D9:46:17:E6:B5
            X509v3 Authority Key Identifier:
                keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:01:04:ee:e7:aa:f5:95:8f:2f:42:ad:d9:eb:91:53:a5:01:
         49:86:a9:a4:24:e6:cf:32:bc:91:da:19:28:00:17:80:23:de:
         35:89:66:9a:b5:24:c6:7d:b5:51:aa:81:72:14:d1:c9:d3:f5:
         12:c6:02:c9:d4:fc:45:08:d7:42:af:e3:ef:74:86:1b:e7:31:
         a0:a6:29:6d:bb:8b:e0:c0:c1:04:aa:e2:c0:2a:36:81:a5:0a:
         e2:ef:b3:83:30:9b:02:04:ff:f4:eb:40:5b:9e:88:e5:fe:13:
         e4:d3:3f:2c:ae:db:0e:24:76:d7:76:ee:47:96:39:f7:7f:15:
         87:2a:1e:5c:39:09:88:e8:18:29:7c:ba:cf:ad:e0:9c:04:de:
         6a:c0:73:68:12:ef:bf:f3:5c:a4:86:a3:c8:0c:87:1b:0b:c4:
         df:7f:20:cb:c7:15:20:c0:ae:c2:ed:9f:11:2c:54:92:6c:b5:
         74:47:1b:f0:57:8a:8d:9b:5d:94:8b:3d:c7:23:fc:53:66:0a:
         56:27:70:21:75:c3:9b:43:cf:44:76:eb:91:63:e4:53:d1:0a:
         99:64:c9:ce:b0:64:47:b4:9b:4c:9c:c5:fd:5d:90:a5:d3:9a:
         20:5f:2c:ce:c8:ac:2c:5f:38:ed:8d:94:fb:e3:d4:d0:2d:05:
         05:fc:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:16 2026 by rpki-client