Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
File:                     oC73fAXKEwwiKYXNdK6TjaeaT78.mft (raw, json)
Hash identifier:          tZc+eWeITy8TuHro7g3r+sQnJm9ygoPAXBGWCVpnITc=
Subject key identifier:   5A:97:58:30:2D:8B:20:F8:47:E1:6D:10:35:A1:7A:28:58:90:5F:B9
Authority key identifier: A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF
Certificate issuer:       /CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF
Certificate serial:       09CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
Manifest number:          216B
Signing time:             Mon 02 Mar 2026 01:43:50 +0000
Manifest this update:     Mon 02 Mar 2026 01:43:48 +0000
Manifest next update:     Mon 09 Mar 2026 01:43:48 +0000
Files and hashes:         1: oC73fAXKEwwiKYXNdK6TjaeaT78.crl (hash: X22C7TaT5V+zn5tXnfVJbmCDMMT/E/6iw8IeHlpVWG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl
                          rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2509 (0x9cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398E5, serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF
        Validity
            Not Before: Mar  2 01:43:48 2026 GMT
            Not After : Mar  9 01:43:48 2026 GMT
        Subject: CN=69a4eb56-fa57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:68:e3:4b:6e:b2:05:bc:73:51:03:ae:9a:88:
                    cf:87:0c:75:45:38:c5:d3:07:80:e7:99:c3:7f:69:
                    11:0a:0e:46:52:5a:09:77:9e:05:26:18:64:4e:9a:
                    95:e5:bd:57:11:af:19:0e:b4:a4:c1:85:47:ed:e7:
                    d0:14:15:5c:7d:df:10:3f:04:13:eb:a3:cd:c4:34:
                    fd:45:7e:35:ff:80:cf:6f:7e:7e:c0:8b:c0:5e:48:
                    cc:60:b2:e5:06:42:47:5b:7a:49:d4:3a:8b:d8:fb:
                    90:7c:14:d6:6b:c7:c7:c0:d9:9a:b5:2f:64:4b:bf:
                    a3:2c:83:07:43:73:21:02:d8:10:c7:f9:ae:c4:9a:
                    ac:b5:c5:5c:16:75:c3:2e:c8:f5:c4:29:12:9f:a2:
                    9e:24:3c:ff:4d:2a:88:65:a1:6d:d5:47:be:61:83:
                    e8:e1:94:c6:54:42:fe:81:43:f2:9a:93:c7:97:ae:
                    f3:29:ac:3d:e2:02:6d:d2:3e:04:93:18:4d:ae:71:
                    ca:01:67:1e:bc:f2:67:a5:70:26:d9:f5:9f:73:22:
                    43:54:e1:df:68:bb:d3:56:9c:3f:b4:08:c4:e1:f0:
                    46:fd:4f:4c:9e:a0:4d:c7:dd:eb:8b:0b:21:55:69:
                    b2:45:fe:7b:54:a5:df:98:5d:60:48:60:3f:df:48:
                    01:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:97:58:30:2D:8B:20:F8:47:E1:6D:10:35:A1:7A:28:58:90:5F:B9
            X509v3 Authority Key Identifier:
                keyid:A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:16:27:49:ef:f8:9d:8b:51:04:f4:4e:bf:60:a5:5d:51:86:
         b9:21:c8:e4:d6:2c:7e:a5:8f:b6:72:54:8b:86:5e:d0:7d:c7:
         3c:ab:1b:81:b8:96:3d:27:0b:6c:a6:a9:b9:52:cc:ad:46:a5:
         05:ab:f7:f3:c1:ec:13:41:85:e3:85:22:02:00:1e:c5:3d:14:
         96:cd:9b:1a:e9:8a:80:b9:41:e1:c1:b4:c6:52:f0:1c:a0:ba:
         ca:55:8b:c3:fc:40:57:22:7b:69:fc:ff:7d:7b:35:ee:5d:ad:
         0f:08:08:64:ae:ab:10:04:af:19:01:ec:03:1a:c4:6b:46:e9:
         db:42:b5:92:2b:d9:0d:a0:f4:d5:e0:3b:98:1e:c2:76:71:62:
         a2:ab:26:b4:33:fe:ee:53:65:78:a9:9e:3e:42:98:9c:02:ea:
         d4:69:79:fe:7f:f7:d2:0c:63:00:e2:54:4d:e8:bb:a2:6f:40:
         d6:27:14:bd:2c:94:b0:3a:ab:53:40:07:20:23:8b:89:fc:1d:
         36:54:32:a9:58:4b:ef:67:c9:e7:f6:8b:96:03:4b:f6:c6:b1:
         fd:43:2f:9d:3c:d0:07:57:3c:ab:09:ba:36:8a:00:0d:8d:87:
         a3:bf:5a:a5:64:82:09:0b:5f:c5:c4:09:35:e9:72:ed:6d:3f:
         9a:ac:f3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:03:07 2026 by rpki-client