Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
File:                     X3A2SNc_YGlFARjbom-WaC1a5so.mft (raw, json)
Hash identifier:          9NwD/sqkq5edrQ3taEnpFbcSgLavBqUo5WQ1MFjsz+Q=
Subject key identifier:   18:7E:AF:79:B1:57:A2:1D:80:5A:F3:FB:EF:B5:1C:F2:A4:C3:D0:80
Authority key identifier: 5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA
Certificate issuer:       /CN=A91508BB/serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
Certificate serial:       3513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
Manifest number:          3513
Signing time:             Sat 28 Feb 2026 14:39:25 +0000
Manifest this update:     Sat 28 Feb 2026 14:39:25 +0000
Manifest next update:     Sat 07 Mar 2026 14:39:25 +0000
Files and hashes:         1: X3A2SNc_YGlFARjbom-WaC1a5so.crl (hash: fbMntPuAm5WJo/tcwYBT4HiarGq4BdJlhPg4vp6TrPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl
                          rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13587 (0x3513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91508BB, serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
        Validity
            Not Before: Feb 28 14:39:25 2026 GMT
            Not After : Mar  7 14:39:25 2026 GMT
        Subject: CN=69a2fe1d-70d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:55:b5:5e:bf:00:87:4e:b3:03:5f:63:06:
                    05:84:f4:0a:a3:a4:76:66:01:03:99:cd:f1:44:72:
                    29:0e:31:32:cf:df:4c:f8:76:84:a6:4e:7f:eb:2d:
                    d9:94:13:d7:cb:52:bf:59:94:aa:a8:9b:79:ff:92:
                    65:5c:1d:9a:8b:34:94:ef:66:a8:6d:2f:f2:1f:9d:
                    43:7d:01:1f:ab:63:fa:9a:fc:ba:2a:22:19:c4:46:
                    fe:9e:e0:c9:65:a3:d9:63:3d:e8:db:f6:2b:70:b0:
                    32:43:ae:a1:9a:d6:2b:0d:57:43:83:65:5d:c0:2a:
                    0a:4f:d6:7f:4b:a8:d6:c2:f7:a8:27:b9:79:2d:38:
                    e8:55:d7:23:41:af:d6:04:0b:b0:9f:5a:d6:ac:10:
                    87:5b:d7:41:8d:ce:23:f3:7b:f5:47:6c:bf:53:a2:
                    7e:75:c7:e7:18:8c:74:16:12:55:c8:79:50:3e:7e:
                    5d:42:0d:ec:9c:72:1a:ff:da:fe:90:e7:dd:b8:b1:
                    5a:b8:08:dd:93:d4:81:4d:bb:ed:0d:a3:fb:a6:35:
                    9c:49:b7:ee:c0:4f:4b:cc:54:2a:5a:65:7a:5e:8f:
                    05:60:54:a2:e8:92:b4:5a:32:54:25:af:fb:ed:86:
                    6d:fb:de:6d:8e:35:39:a9:8b:68:e1:b9:8d:cf:4e:
                    10:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7E:AF:79:B1:57:A2:1D:80:5A:F3:FB:EF:B5:1C:F2:A4:C3:D0:80
            X509v3 Authority Key Identifier:
                keyid:5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c6:68:08:1d:85:7b:1b:00:fa:2c:87:6c:56:82:a4:1c:d3:
         ef:a0:3d:44:61:84:99:17:68:8f:04:06:e4:c4:98:21:0b:3e:
         46:5d:05:1f:96:c1:28:58:f7:75:ed:ad:db:1e:f4:ac:a0:e8:
         3d:0b:ea:19:20:e3:41:77:62:94:ab:db:88:87:38:99:49:c3:
         ae:f7:ab:cd:4f:ef:a4:25:cb:56:c6:df:40:b6:7b:02:b4:9c:
         3a:fc:ed:d7:c8:91:25:63:f0:a2:85:42:f1:23:80:98:80:b1:
         cd:8f:9a:9f:b0:c4:79:28:e8:f6:d9:1c:5e:cf:9d:b2:de:a3:
         2e:1a:56:5d:c6:fb:bc:0e:b5:27:95:77:74:ae:17:5a:a2:81:
         dc:f6:30:46:6d:3f:9d:f4:b3:3f:8c:3c:0d:90:1c:9e:93:a3:
         22:05:33:74:0a:b5:ef:72:98:84:3b:05:43:a8:04:9e:c6:1f:
         d9:99:03:a5:28:00:47:05:61:c4:03:f3:f9:d2:fa:ad:3e:4f:
         5e:de:6a:59:0f:d5:b8:5e:9a:4b:b0:3f:40:10:64:82:d5:59:
         df:94:71:de:d8:3f:34:18:b0:37:df:8b:b0:ba:a7:d8:6f:3a:
         70:bc:b3:d1:c3:6b:15:b3:7c:ab:cf:62:c4:b6:5d:02:36:a4:
         85:7c:16:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:32:29 2026 by rpki-client