Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
File:                     AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json)
Hash identifier:          LqO8/f7VYHojPQCO5Y7kYg2oIBYGN/pMLrEHc7x7K4s=
Subject key identifier:   3F:F0:3D:7C:BE:6A:73:88:E9:7D:31:1E:0A:1F:38:6D:F1:CA:75:A2
Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A
Certificate issuer:       /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
Certificate serial:       05A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
Manifest number:          058F
Signing time:             Sat 28 Feb 2026 23:51:08 +0000
Manifest this update:     Sat 28 Feb 2026 23:51:07 +0000
Manifest next update:     Sat 07 Mar 2026 23:51:07 +0000
Files and hashes:         1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: ElYmr+ZB3t1KFSWArxE5K2pJH2H5OfjD3xQFeBq8q9I=)
                          2: C1CDEDC6950711F0AFD0F30BC4F9AE02.roa (hash: FoFgJ52gigvatl9XWLd8n5vp/LlZbDCQ2ZgQjZFRqxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl
                          rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1442 (0x5a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A
        Validity
            Not Before: Feb 28 23:51:07 2026 GMT
            Not After : Mar  7 23:51:07 2026 GMT
        Subject: CN=69a37f6c-b61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:2b:62:0a:ec:3b:a5:e9:78:34:2a:59:dd:
                    81:1e:db:8a:8d:2a:75:91:ae:0f:0e:1e:4e:6c:b7:
                    ce:33:7d:a2:ae:bd:30:88:0e:55:6a:3d:6e:98:db:
                    9e:a9:7c:ce:f9:b0:68:06:20:2d:4b:8c:76:c4:04:
                    ca:66:bd:30:1e:90:71:29:1e:98:25:f7:97:fb:f7:
                    0b:8a:d0:b8:6c:ea:5e:09:97:ad:f8:29:b5:d4:3c:
                    1d:38:08:d0:fd:a9:20:87:97:3c:ac:36:f8:7f:ac:
                    2e:a1:1b:ba:b2:b9:3d:65:f8:1f:64:ab:ba:29:c8:
                    4d:7d:9f:53:54:98:a1:ed:cb:71:ea:21:fc:12:01:
                    75:37:23:e5:da:82:a8:3b:1d:84:7c:07:0e:c6:e7:
                    59:59:43:6c:a1:94:a8:23:dc:bc:bd:77:26:f4:af:
                    d2:62:b6:d5:7c:50:78:fc:51:54:ea:e3:42:62:ec:
                    b1:8a:ba:1d:b3:e3:4a:88:f2:e9:e1:db:21:87:84:
                    81:8b:c0:5d:05:ca:35:0e:dc:03:18:7c:50:65:a9:
                    c5:ae:df:03:5c:ae:6f:6f:5d:7c:a2:02:71:d7:86:
                    12:0b:73:23:52:47:af:88:5b:c7:42:ec:6f:8f:f5:
                    82:75:b9:23:98:8e:28:54:7d:3b:84:93:f0:bc:f2:
                    73:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F0:3D:7C:BE:6A:73:88:E9:7D:31:1E:0A:1F:38:6D:F1:CA:75:A2
            X509v3 Authority Key Identifier:
                keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7e:80:5e:b5:5a:99:d4:87:45:8e:ca:f7:34:26:83:bf:1b:
         21:76:2e:d8:f0:e4:ff:08:72:63:6f:fc:99:8a:7e:d1:f4:5d:
         82:71:2e:23:dc:06:42:74:a2:3b:8c:b9:d7:75:35:e3:0e:32:
         83:2f:0c:36:b2:60:96:0c:8e:b1:b4:80:18:11:97:4a:26:95:
         f7:3b:ee:c6:19:01:6b:05:76:58:df:16:ca:14:af:a1:56:87:
         76:60:31:c5:4f:8e:eb:41:b5:dc:80:a4:2c:e2:70:b9:12:90:
         72:dc:81:39:30:1b:68:8d:28:96:f7:4e:f2:8b:55:b3:cd:9a:
         2d:6f:d6:b0:64:61:25:e4:5b:c1:e6:ec:15:93:79:6d:f7:9b:
         ea:e9:11:71:d3:8d:29:21:ee:84:05:9a:fb:1a:ad:a3:44:1b:
         5e:93:a9:f4:32:d2:6f:e8:65:5e:eb:44:8f:08:8b:72:83:e2:
         cb:8b:47:79:53:1c:6f:4e:9b:48:0a:41:b9:76:9c:9f:07:96:
         0c:08:fc:79:0c:c5:f7:22:88:36:f9:39:55:12:8d:a2:b2:f4:
         d1:43:e2:ac:ae:e2:1f:aa:ef:de:80:fc:1c:67:a2:b7:d2:8e:
         f8:31:dc:38:de:fe:dd:09:5d:aa:f6:f0:4f:b1:44:29:07:74:
         24:c5:e4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:33:44 2026 by rpki-client