Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
File:                     a9bIzoghkMgWnoE2ReDt2bdX6xk.mft (raw, json)
Hash identifier:          o6lg8FWeauA7dqCaolDdnPsvZhvjwJVuJk2+31SRxUM=
Subject key identifier:   4B:1D:D2:A8:49:B0:7F:69:AB:86:C3:D1:4B:80:2F:5F:B8:77:F5:F5
Authority key identifier: 6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19
Certificate issuer:       /CN=A91398E5/serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
Certificate serial:       179E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
Manifest number:          2167
Signing time:             Sat 28 Feb 2026 16:38:07 +0000
Manifest this update:     Sat 28 Feb 2026 16:38:07 +0000
Manifest next update:     Sat 07 Mar 2026 16:38:07 +0000
Files and hashes:         1: a9bIzoghkMgWnoE2ReDt2bdX6xk.crl (hash: 4S82Lq0LGO7Nr70BsJgy4wOx5lTOZ3P7s3Xm0jixFig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl
                          rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6046 (0x179e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398E5, serialNumber=6BD6C8CE882190C8169E813645E0EDD9B757EB19
        Validity
            Not Before: Feb 28 16:38:07 2026 GMT
            Not After : Mar  7 16:38:07 2026 GMT
        Subject: CN=69a319ef-2faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7a:37:76:20:fe:22:99:df:22:87:74:03:08:
                    4e:d3:75:16:70:f7:a1:c9:05:f1:81:26:00:04:11:
                    93:c5:7c:34:3b:7a:78:06:36:eb:3b:a6:84:3d:01:
                    c5:ce:81:cd:65:21:a5:64:2f:28:0d:16:bb:49:99:
                    e2:23:6e:04:be:2d:ca:17:e1:df:01:c8:7f:be:25:
                    80:ed:e3:16:65:08:ec:fb:34:1c:b0:2c:e2:4b:71:
                    d4:04:0b:cd:e1:3a:bb:61:d6:79:f9:1b:d7:4d:d4:
                    9d:89:59:87:5e:4d:29:97:34:0c:05:89:90:6c:14:
                    4c:08:d0:b8:6c:cf:7b:24:ef:fc:7b:5a:be:98:07:
                    e1:60:11:d6:2a:97:08:16:e1:45:da:ce:bb:a7:5d:
                    23:c7:d6:67:95:44:d7:ff:43:d4:2d:92:33:bf:91:
                    86:29:41:17:69:61:5e:e9:73:1e:8d:ed:44:dc:37:
                    cc:16:5d:0d:0c:01:48:a8:c7:ea:05:8a:0e:ab:7d:
                    7e:43:9c:f8:c2:bd:44:d5:e7:c7:ea:d0:c3:48:ae:
                    7f:2b:77:f9:52:4a:b1:55:21:62:24:fc:f6:d8:e9:
                    c0:6f:ff:a0:a9:12:a6:31:62:f5:f4:09:a7:87:ef:
                    72:45:75:cc:00:8f:c6:bb:a3:20:4d:e9:c1:bc:ea:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1D:D2:A8:49:B0:7F:69:AB:86:C3:D1:4B:80:2F:5F:B8:77:F5:F5
            X509v3 Authority Key Identifier:
                keyid:6B:D6:C8:CE:88:21:90:C8:16:9E:81:36:45:E0:ED:D9:B7:57:EB:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9bIzoghkMgWnoE2ReDt2bdX6xk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/a9bIzoghkMgWnoE2ReDt2bdX6xk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:97:67:39:81:57:be:9e:55:a5:8f:7d:89:b3:56:31:43:ad:
         e1:65:e9:be:f6:db:59:9a:35:d1:7a:ba:c0:36:91:9f:46:c2:
         08:fa:8d:ac:07:91:6d:8a:36:a4:0d:6c:3c:93:0f:6c:f6:9e:
         2e:f3:df:a4:c0:28:b1:0a:09:b2:5e:62:0a:64:68:99:2b:e7:
         b5:c8:2a:df:f3:d0:36:cd:d1:59:2b:58:83:8c:15:21:c0:00:
         3c:f4:f2:b9:83:6e:04:9a:d9:22:6b:09:a7:30:87:a7:83:62:
         bb:fb:4b:37:9e:49:55:27:74:84:fa:52:c1:66:f2:79:73:a2:
         a5:0d:26:e2:ea:0a:64:96:2b:5c:d0:06:d8:70:da:81:8b:66:
         33:ef:06:61:e3:dc:7b:12:29:7c:00:ad:fb:66:c2:26:36:ea:
         37:6f:92:5e:79:50:17:02:8d:1d:fb:4d:c9:7b:71:0d:88:93:
         e0:59:c0:c3:84:c2:00:fe:c3:08:23:2f:df:3a:d7:00:9d:33:
         65:95:10:01:db:32:13:b1:fe:28:04:90:4c:48:82:02:4a:bd:
         c6:3e:c5:18:15:39:5e:04:1b:25:23:3d:62:11:9c:4b:ce:69:
         8c:82:9f:f3:81:ba:dd:1b:e3:03:bf:12:61:0b:d9:29:1c:ca:
         bd:04:c8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:34:55 2026 by rpki-client