Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
File:                     PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json)
Hash identifier:          UKUMbo772XujqwJiwdwqZQ0RxN9z4z5mijvbx+KBVjI=
Subject key identifier:   0A:7A:19:97:45:EC:9A:86:0B:C9:D2:ED:E2:35:1B:14:45:28:07:5A
Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98
Certificate issuer:       /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
Certificate serial:       08B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
Manifest number:          0867
Signing time:             Sat 28 Feb 2026 21:22:54 +0000
Manifest this update:     Sat 28 Feb 2026 21:22:53 +0000
Manifest next update:     Sat 07 Mar 2026 21:22:53 +0000
Files and hashes:         1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: 2qJcZolYPXwDfEr0+RtO9ksPSZvu40sWKmyNd1L5tRs=)
                          2: CD1E94321A7D11F09A63C576C4F9AE02.roa (hash: 5BqSDCb15g3L2o9fQ1ke/5Fkmm/nvPJuSCgZ7bCjG3s=)
                          3: DD8B40E41A7E11F098A37378C4F9AE02.roa (hash: 5G9zJ1q6v1SCobM0pZtOHjxJx12iZO1eyhni/bfT9Gg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl
                          rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2230 (0x8b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91450A4, serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198
        Validity
            Not Before: Feb 28 21:22:53 2026 GMT
            Not After : Mar  7 21:22:53 2026 GMT
        Subject: CN=69a35cae-ecab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:40:33:fc:b5:47:8d:2b:46:e4:dd:db:e8:
                    43:90:3a:9e:45:50:5d:28:1b:f2:77:74:33:73:cc:
                    e3:7e:e7:36:56:bc:7d:63:f7:fa:c7:1e:96:ae:41:
                    a1:60:0d:55:b4:96:77:57:2d:12:4a:32:16:af:0c:
                    1e:15:c3:3e:0a:4e:f7:70:7a:a0:79:22:da:bb:ae:
                    e1:b2:c3:75:9d:e5:03:57:cc:a1:ad:ee:e6:1f:64:
                    27:8a:56:84:4c:02:31:d5:db:8e:59:fc:e2:73:50:
                    e4:30:11:c2:2b:a3:2f:cc:eb:8a:68:9a:44:ed:eb:
                    a5:cf:60:23:22:79:18:57:cf:d1:b8:98:a7:ce:b9:
                    fb:2c:e6:08:df:61:da:00:10:80:40:3e:87:57:34:
                    54:4a:bb:01:5b:e7:5c:02:ef:33:10:0b:a4:72:34:
                    f2:9e:2c:f4:4a:83:fe:d3:e5:a3:04:4f:9b:38:52:
                    21:c1:0c:72:90:fe:cd:22:85:7c:44:05:df:f2:a0:
                    c4:ed:ee:99:bc:c1:64:c6:e2:ed:7c:b7:b3:ce:92:
                    29:15:e8:a6:7d:17:1f:0a:d8:3b:3d:7c:54:e4:96:
                    f6:51:db:7c:33:eb:8e:66:bf:ca:4d:07:32:2d:ee:
                    d0:e2:65:09:3f:47:45:c6:d7:55:de:da:40:04:b3:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7A:19:97:45:EC:9A:86:0B:C9:D2:ED:E2:35:1B:14:45:28:07:5A
            X509v3 Authority Key Identifier:
                keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b8:52:e9:6e:7d:4f:9f:06:c8:29:fb:f9:a9:e7:c7:4c:56:
         e1:b8:3d:19:cd:23:d9:5c:14:6b:7b:f3:32:a9:24:e4:a2:fd:
         1c:89:89:83:da:c3:0b:0f:7b:12:02:6d:c1:26:fa:36:f8:42:
         19:cb:8a:a4:0b:01:5a:13:28:a1:b0:ae:85:cb:b4:78:3d:5b:
         29:ec:87:50:0f:00:8a:29:bb:d5:2f:77:57:8f:1f:42:e2:32:
         2e:c2:4b:d1:a5:aa:4b:81:f3:de:c7:b6:92:da:f6:c8:35:f5:
         6a:4c:eb:60:e6:fb:77:31:a1:96:d1:99:70:48:06:ca:d6:06:
         91:a0:61:07:5a:5b:e4:6c:11:04:0e:e7:29:09:59:d0:92:c9:
         54:2e:1d:d8:14:e3:d6:fa:75:28:27:b2:94:b7:0b:09:83:0e:
         5b:c0:35:0f:f6:f5:b4:66:3f:21:34:3d:af:16:4f:ec:11:a3:
         ec:1c:08:52:f8:79:09:af:89:3f:22:d8:67:4e:3a:06:32:60:
         fd:a4:d5:9a:5c:24:e7:5b:22:c6:e7:e2:8b:d7:17:73:10:d5:
         92:17:87:01:53:08:00:bf:7d:97:80:d7:58:54:75:35:dc:64:
         93:c7:ad:51:1c:78:5f:4b:d4:09:d4:c5:fd:6a:fc:45:16:83:
         8f:a6:0e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:59 2026 by rpki-client