Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
File:                     rKBb-WKVthwuROndPExIxFm56Vw.mft (raw, json)
Hash identifier:          oQo/9tN5hEE8SotM3bdM6CoJ9/U+UtSU9TN5wEMz+qY=
Subject key identifier:   EE:C1:73:C4:4B:B5:9E:14:DF:CD:F5:B1:BB:34:33:9E:2A:45:DE:CF
Authority key identifier: AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
Certificate issuer:       /CN=A91547EC/serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
Manifest number:          5D
Signing time:             Sun 01 Mar 2026 09:28:24 +0000
Manifest this update:     Sun 01 Mar 2026 09:28:24 +0000
Manifest next update:     Sun 08 Mar 2026 09:28:24 +0000
Files and hashes:         1: rKBb-WKVthwuROndPExIxFm56Vw.crl (hash: Zq1XUNopXXwGczZqAJKfyDUWJ3EjzQgI02uiITnpW3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
                          rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91547EC, serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
        Validity
            Not Before: Mar  1 09:28:24 2026 GMT
            Not After : Mar  8 09:28:24 2026 GMT
        Subject: CN=69a406b8-89e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:da:43:99:76:be:40:e1:b9:4a:7c:0e:fb:89:
                    cc:26:38:5a:46:61:72:2d:fb:9c:55:c8:7e:70:3e:
                    62:e9:a9:06:ce:c4:82:81:18:9e:87:23:cf:aa:86:
                    3b:d3:db:3b:01:19:78:b2:32:1a:05:96:18:2d:a9:
                    37:1f:58:6f:95:4a:93:6b:87:86:e4:82:e6:ad:09:
                    2a:28:a5:41:02:dd:fe:5c:4d:69:6c:62:80:1f:7d:
                    c6:98:c6:cf:0e:c3:da:6b:6d:a1:d5:af:e3:d1:c1:
                    98:6f:6d:17:13:76:e2:2a:0d:9a:40:e6:3b:8f:d0:
                    5e:1b:a0:f5:fd:38:c5:a0:73:38:cd:8d:1a:e5:09:
                    db:5e:22:ab:56:41:db:49:da:f3:2b:73:6e:08:86:
                    dd:aa:64:ba:4e:a7:21:61:e0:07:10:f5:40:75:32:
                    4c:66:d5:eb:59:db:84:07:a2:b1:d0:3d:68:ca:4c:
                    d7:0b:d7:c3:9a:53:82:ed:35:ea:3d:69:2e:05:c3:
                    b3:21:4a:04:d3:5a:6f:3f:17:0b:8a:b7:a1:0a:83:
                    fb:e1:55:f2:4c:fe:7e:24:5a:a0:f6:c5:53:49:58:
                    90:07:42:cd:75:ba:10:b1:8d:fc:12:7c:3c:10:83:
                    9d:82:83:01:29:c7:9b:74:db:fb:80:5a:3b:b3:57:
                    46:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C1:73:C4:4B:B5:9E:14:DF:CD:F5:B1:BB:34:33:9E:2A:45:DE:CF
            X509v3 Authority Key Identifier:
                keyid:AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:dd:25:55:41:3f:5f:e4:a5:0e:35:1e:6c:02:06:37:9a:bd:
         05:26:79:1a:e4:3b:c2:16:be:03:6c:2f:c9:a8:e5:5b:71:a7:
         73:69:11:f9:f3:e3:c3:77:55:1f:fc:30:bb:d0:d3:2f:85:ae:
         5e:b2:41:21:36:7c:1d:3d:e1:0d:2b:55:c2:94:60:1c:bb:72:
         72:f1:07:f9:ed:43:61:d2:95:1e:e3:f4:5c:d2:43:f0:22:27:
         e8:0f:50:27:4b:04:68:ad:57:52:75:7c:bd:91:30:52:34:98:
         bc:9d:a0:d6:c6:ea:f7:88:f7:4b:da:ce:01:43:3c:94:44:21:
         a3:d7:25:c3:c5:64:75:a3:b3:d8:23:10:8f:30:8a:98:e6:49:
         ae:77:09:2d:22:fe:ac:6d:64:43:1a:a6:1f:46:05:b3:39:99:
         49:4a:72:c2:15:45:70:0e:8c:8c:11:10:da:7d:b7:ad:27:1b:
         22:c7:ac:4c:47:46:99:60:2d:45:6a:58:9e:89:fc:ef:b7:27:
         2c:65:68:12:34:29:17:bf:e9:3e:de:a0:19:17:67:84:1e:b4:
         7f:45:8d:a8:fa:9c:a9:4f:25:3e:99:63:ff:53:d5:31:e4:57:
         1b:55:24:2c:98:45:7f:9d:d2:79:7a:fd:aa:47:71:07:49:da:
         bd:ec:e9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:03 2026 by rpki-client