Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
File:                     CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json)
Hash identifier:          zADUh+a1XKx+FICz0YmaNVRvWRdBEdMI0LWr+QJePD0=
Subject key identifier:   6B:34:CD:CF:AD:DF:F2:62:7D:0A:57:55:B7:01:F4:DF:B7:9D:56:EF
Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9
Certificate issuer:       /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
Certificate serial:       0246
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
Manifest number:          036E
Signing time:             Sun 01 Mar 2026 03:18:30 +0000
Manifest this update:     Sun 01 Mar 2026 03:18:30 +0000
Manifest next update:     Sun 08 Mar 2026 03:18:30 +0000
Files and hashes:         1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: Upd5bfrLKMB4ooiX6FTg9W27SNt/1cODZWWEblEuAbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl
                          rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 582 (0x246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9
        Validity
            Not Before: Mar  1 03:18:30 2026 GMT
            Not After : Mar  8 03:18:30 2026 GMT
        Subject: CN=69a3b006-3d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ac:ab:8b:14:e4:f9:fb:7c:bf:6b:6c:5a:3d:
                    58:28:9f:d5:98:03:4d:59:d8:04:7c:ff:fb:e1:cd:
                    82:1d:f2:a9:38:d5:7a:3d:af:d1:c6:26:7c:b2:18:
                    67:a8:59:f3:46:9a:5e:81:95:33:7f:ac:a6:90:47:
                    da:7e:81:3d:d9:f5:70:0b:c8:49:92:20:7b:3d:c4:
                    99:80:59:91:7c:2b:08:a0:55:b0:5b:72:57:75:33:
                    ea:4a:76:e0:ca:b1:4c:41:4c:24:15:aa:ae:76:1a:
                    1e:55:22:2b:4b:62:da:1b:ff:96:cb:4b:55:9a:3e:
                    a6:48:6a:b8:25:89:16:3d:da:3f:5b:19:25:76:b8:
                    6e:d4:40:ce:6a:51:0e:3b:89:43:74:17:de:a1:e1:
                    ba:77:18:30:82:bf:a7:4f:a8:c9:eb:2f:fa:6e:9d:
                    92:f8:04:4a:ff:cf:2a:b2:47:fc:11:b8:ef:aa:a4:
                    73:1c:94:83:9d:6a:27:b9:de:d8:1a:13:b1:6b:b3:
                    23:a6:01:7c:1b:6a:8d:a1:0d:ce:ce:79:5b:68:40:
                    b6:fc:7a:10:77:0f:d6:74:b6:82:b4:69:a7:77:fa:
                    c8:91:dd:c3:91:47:f8:5e:82:cd:dd:4e:3e:f6:20:
                    0f:5d:88:7e:92:0b:40:45:89:19:83:dd:45:77:b0:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:34:CD:CF:AD:DF:F2:62:7D:0A:57:55:B7:01:F4:DF:B7:9D:56:EF
            X509v3 Authority Key Identifier:
                keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:14:6d:cf:f3:2a:24:3a:07:ab:fe:91:3f:33:0c:a3:f6:57:
         99:e8:87:0d:aa:a3:28:9e:9e:7d:ee:4e:de:69:8d:4e:17:4f:
         f1:11:db:cf:f8:4c:b8:46:64:03:b1:2f:eb:bb:f7:e9:0a:2d:
         95:48:f4:b1:c6:68:36:01:5e:1a:7f:bd:74:b5:3e:c5:1d:ab:
         c2:63:55:35:fd:57:76:da:1d:95:28:80:91:81:6a:ea:94:93:
         09:71:09:ba:29:29:0b:57:1d:8b:58:29:46:ea:6b:40:24:fc:
         b8:5b:cb:4c:6e:7e:8f:8f:ec:14:26:25:21:20:76:f6:ed:7f:
         a2:21:a7:67:7b:c6:f4:e4:4f:23:c7:49:91:4a:48:14:3d:5e:
         31:0a:20:e4:e9:6a:46:28:ce:59:01:f8:99:27:73:d9:3a:0c:
         e7:64:c4:13:bd:bf:76:41:55:cd:24:34:04:22:2e:b8:12:c5:
         13:65:a0:2d:55:56:5d:c7:4b:66:07:05:13:85:5f:61:99:04:
         cb:56:f5:c1:14:ff:a0:ad:7b:d5:73:ea:2d:7f:b5:9d:e5:5c:
         ee:c6:44:72:bd:46:ca:b8:b6:b7:f3:17:03:33:bd:ce:0f:7d:
         67:43:98:6f:21:68:2f:85:2c:7c:ca:53:50:74:ec:e6:6e:3a:
         fb:02:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:37 2026 by rpki-client