Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
File:                     28byJW3eXCxGqA6yQy8lcu3FN9Y.mft (raw, json)
Hash identifier:          sSTejQ2SOWzWk4taeqTZAkNe7DVlo6E2aSW+bcFCoy0=
Subject key identifier:   DD:BA:6F:CA:C5:34:AA:9B:DF:E0:52:46:2F:B1:81:34:15:3E:DE:95
Authority key identifier: DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6
Certificate issuer:       /CN=A914D0E3/serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
Manifest number:          0101
Signing time:             Sun 01 Mar 2026 07:11:53 +0000
Manifest this update:     Sun 01 Mar 2026 07:11:53 +0000
Manifest next update:     Sun 08 Mar 2026 07:11:53 +0000
Files and hashes:         1: 28byJW3eXCxGqA6yQy8lcu3FN9Y.crl (hash: G6gpMIicrlnLdMCwnjOtEfdsk0AcXUDx1+c904zPjCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl
                          rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D0E3, serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6
        Validity
            Not Before: Mar  1 07:11:53 2026 GMT
            Not After : Mar  8 07:11:53 2026 GMT
        Subject: CN=69a3e6b9-d7ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:25:05:12:e0:e4:75:d1:8b:bc:13:fe:00:
                    71:33:f6:65:c7:70:80:b4:c1:dd:3e:ff:75:52:9d:
                    b9:bb:a0:86:61:78:de:b6:3c:c2:82:27:77:69:1d:
                    e7:97:b4:96:85:3f:f9:01:91:4c:ae:09:72:c6:c8:
                    57:bf:bd:9b:f2:22:b8:65:36:9c:53:ac:19:62:d4:
                    3a:9b:f8:9b:7e:a6:d4:7d:86:1b:13:cc:27:1a:27:
                    c6:ed:dc:13:28:c8:e8:6f:e9:c4:9c:b4:76:7e:11:
                    c6:8d:a8:b0:a9:cf:ba:0d:27:a0:96:4c:fa:8c:87:
                    ba:3e:bf:fc:28:c8:0f:8d:ca:ac:78:63:4b:d1:9a:
                    a8:41:32:d7:de:5e:36:98:1c:78:71:84:e5:a1:f9:
                    3d:9e:91:6c:4c:32:11:ce:bf:a0:1c:f0:3e:02:e9:
                    c5:b2:13:06:af:14:0e:9d:48:52:93:ba:8f:1e:45:
                    6d:f5:d7:55:a6:29:1d:c5:a1:56:78:b5:ca:d2:a2:
                    2e:31:31:05:9b:da:d3:e9:25:b9:6a:ca:a4:d2:cb:
                    7d:b1:f4:8a:fa:be:c5:2c:05:b0:e8:dc:46:13:13:
                    97:37:89:a5:ed:18:b5:6f:35:02:ba:90:77:d1:c1:
                    c6:f4:25:f8:06:52:4a:33:70:54:d2:9c:03:d6:cb:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BA:6F:CA:C5:34:AA:9B:DF:E0:52:46:2F:B1:81:34:15:3E:DE:95
            X509v3 Authority Key Identifier:
                keyid:DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:06:f8:ef:05:15:55:34:46:95:d1:d4:93:4e:6f:70:68:2e:
         7b:5c:7b:3e:6b:9f:86:0f:ee:57:b3:8f:9d:70:c2:5e:bd:d3:
         a5:9f:4d:3e:5c:44:f6:42:fa:4d:dd:f0:9b:86:e5:36:01:b0:
         51:b6:1d:9e:00:ce:e4:d6:47:6f:7e:93:32:05:16:52:d4:a2:
         dc:cd:97:16:56:2f:76:7d:c9:c0:68:c5:94:7f:2a:ce:76:2f:
         ea:9b:8d:01:21:2f:37:65:d8:97:99:57:4a:86:a5:36:53:dc:
         1c:4f:f8:3d:36:5a:1c:c8:4e:0d:ea:66:93:a2:29:5a:e4:58:
         00:ff:4a:ca:40:35:0e:b3:34:c2:b9:0b:d5:dc:16:a7:be:1a:
         5b:12:bb:58:48:28:96:58:da:4d:57:8c:8f:27:ee:14:ed:a1:
         45:12:39:a2:3a:17:b0:c5:b9:34:bd:d5:44:c5:1d:2d:8c:95:
         26:01:81:f2:0b:ac:34:6e:87:f1:82:13:7a:10:bc:31:bb:d3:
         e4:c7:c8:b1:64:79:0d:19:ea:8d:21:21:4d:cc:e6:c2:56:00:
         65:db:9a:c5:fc:a2:a6:9a:96:b0:ba:13:3c:f1:54:80:dc:0a:
         07:6d:72:f4:da:08:65:70:ea:66:64:aa:d5:09:c0:16:3d:22:
         cb:d9:09:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:15 2026 by rpki-client