Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
File:                     rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json)
Hash identifier:          2lMHYLSKQJnV0xYQcwL7JHsJYW+fmO5zHO1CvFMYGbk=
Subject key identifier:   E7:C0:4E:D6:04:7D:40:75:94:AA:4B:BF:A3:64:23:BC:6C:F6:55:C7
Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
Certificate issuer:       /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
Certificate serial:       351B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
Manifest number:          351B
Signing time:             Sat 28 Feb 2026 14:42:04 +0000
Manifest this update:     Sat 28 Feb 2026 14:42:03 +0000
Manifest next update:     Sat 07 Mar 2026 14:42:03 +0000
Files and hashes:         1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: y15kmzHNdL+MArqovppnmyh+P+3vys32N5KW6btM6is=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl
                          rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13595 (0x351b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
        Validity
            Not Before: Feb 28 14:42:03 2026 GMT
            Not After : Mar  7 14:42:03 2026 GMT
        Subject: CN=69a2febc-8630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:e8:bb:b5:b3:5d:34:e4:20:3f:57:3d:48:
                    b6:b0:6e:cd:01:d4:99:af:14:9e:ac:63:71:67:a6:
                    59:85:9c:12:dc:ba:19:9b:26:c6:18:79:a8:27:03:
                    0f:c4:12:45:52:6d:41:fa:20:f7:4c:85:a2:d1:5a:
                    8a:24:11:68:da:5c:bb:a3:27:42:43:56:ad:7d:31:
                    57:7e:9f:28:c7:80:7c:7d:7d:19:18:ed:7b:ee:19:
                    5c:0d:7b:04:a8:77:5e:f8:9e:18:1e:59:6a:bb:ec:
                    74:ca:42:61:55:95:0d:ba:e1:a9:c2:55:87:07:9c:
                    2f:3b:0a:8c:44:4d:9e:c2:6b:7b:8d:f4:76:d0:65:
                    e4:0b:22:ed:90:6a:4a:a9:8c:2b:bf:cf:f5:33:45:
                    53:ed:06:2a:3f:09:e1:a1:e1:f4:fd:50:8a:5e:20:
                    94:e2:ab:8e:b0:11:55:d3:ff:d7:18:88:0d:79:67:
                    f2:79:7c:0f:06:56:02:b9:65:68:66:0d:a0:1c:f1:
                    cf:ef:2a:36:c6:09:f3:a9:03:48:16:aa:63:14:97:
                    1a:08:76:ac:e8:51:e6:20:0e:8d:c2:5e:52:2b:b9:
                    c0:1d:b2:80:7d:63:c0:6d:0b:de:f6:2f:7c:ac:58:
                    d9:7c:f8:3d:70:95:e8:5b:f2:ef:93:f5:e5:dc:aa:
                    0b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C0:4E:D6:04:7D:40:75:94:AA:4B:BF:A3:64:23:BC:6C:F6:55:C7
            X509v3 Authority Key Identifier:
                keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6e:2a:a4:a5:65:a7:2b:0d:4b:16:71:62:e9:f2:b7:1a:d6:
         1c:c4:fe:c9:e2:65:3a:ab:55:0c:15:ac:77:f0:25:b1:11:0a:
         fb:b1:29:da:2e:0e:93:0d:a2:4b:43:89:77:be:b1:e8:f4:22:
         08:93:08:64:43:85:23:b9:39:a5:56:47:67:6b:4a:cc:3f:1f:
         f0:ff:99:bb:21:0e:70:77:a7:04:13:90:a3:75:ba:90:52:08:
         da:ce:80:5c:84:41:83:a9:26:b6:5b:64:14:32:a5:5f:6c:89:
         7c:88:b4:22:f0:43:bf:07:25:7a:de:e2:0b:3e:39:f7:d1:9b:
         75:a5:5e:73:26:2b:9b:dd:cf:8e:05:20:e5:db:5c:e0:09:98:
         56:05:66:bb:d5:de:3f:49:68:b2:ac:96:5f:29:f8:db:c9:b0:
         86:02:a5:80:19:ac:39:2c:3f:ec:3a:1c:82:bd:05:7d:a6:dd:
         3b:e9:88:fe:f5:a0:e3:a1:8f:2b:40:4e:1c:4c:38:49:a2:7d:
         06:10:43:f5:0e:90:b3:7a:c4:36:d3:b6:f7:72:61:b9:14:0d:
         83:d4:71:82:68:86:09:58:b8:ef:ba:6d:05:d3:e6:cc:ef:e2:
         2c:33:1e:5d:f7:01:0f:92:74:06:c1:56:e2:a6:e7:a4:fe:f8:
         db:89:c4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:39 2026 by rpki-client