Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
File:                     0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json)
Hash identifier:          dUY7aMRw/Z0JnmJ2amDIySbTQcCIH4D9sD0YQ6RcZQc=
Subject key identifier:   36:3B:7E:93:C4:5F:EE:80:F7:02:14:9C:8B:11:BC:0C:33:81:05:91
Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
Certificate issuer:       /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Certificate serial:       0784
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
Manifest number:          076A
Signing time:             Sat 28 Feb 2026 22:12:19 +0000
Manifest this update:     Sat 28 Feb 2026 22:12:19 +0000
Manifest next update:     Sat 07 Mar 2026 22:12:19 +0000
Files and hashes:         1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: ehxinWBLmv4Fvp1W3xxq6R36hl1dE1vhl44BhZRwzMU=)
                          2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: XOASvti6ud5g+bg6fmEVqaS6rrzh4jfzKANNowS0mB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
                          rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924 (0x784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91606AF, serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
        Validity
            Not Before: Feb 28 22:12:19 2026 GMT
            Not After : Mar  7 22:12:19 2026 GMT
        Subject: CN=69a36843-fcc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:9d:78:ae:10:b2:5d:80:46:b7:5f:8c:9e:
                    76:1e:97:c8:0c:dc:10:dd:19:52:3e:5e:da:79:cd:
                    6e:40:bc:df:a4:bf:7e:44:10:fd:af:4b:59:ed:c7:
                    8b:06:3e:c6:f2:b1:ff:ec:fc:8c:0d:9f:3e:70:e4:
                    e1:b2:16:f0:2e:68:cf:a0:5b:60:e6:53:c7:f7:61:
                    c3:cd:e9:57:e5:d1:6d:f1:1b:d5:4e:c6:f4:e4:4d:
                    fd:4a:c4:00:9d:bd:dc:bf:4b:c5:a4:8e:f9:2c:4d:
                    fe:55:c5:b4:02:fb:42:e5:70:5e:92:eb:c3:dd:90:
                    94:a0:d9:cf:20:d6:76:a4:65:98:a9:41:0f:d4:81:
                    ea:9e:cd:37:92:50:e8:a8:91:a3:d8:04:17:45:f9:
                    3c:58:74:90:d8:8e:0c:99:c4:b3:0f:45:c2:8b:cd:
                    22:ed:7d:62:7f:68:67:18:6a:64:a9:81:63:9a:fa:
                    4b:4e:bb:97:8d:15:a4:27:03:2c:b8:03:81:48:20:
                    04:21:33:57:d7:d9:ca:22:76:ef:c0:68:11:9b:d9:
                    2e:f6:57:95:be:f3:22:51:3f:4e:b2:74:de:86:c5:
                    2d:4b:64:02:6d:85:27:34:97:3b:b2:3e:5b:0c:74:
                    d1:82:e0:c6:10:72:37:74:6e:57:a2:e1:93:b4:5e:
                    6a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3B:7E:93:C4:5F:EE:80:F7:02:14:9C:8B:11:BC:0C:33:81:05:91
            X509v3 Authority Key Identifier:
                keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:29:48:c2:53:02:c8:12:a3:91:8a:46:f7:d0:a9:00:34:f9:
         5e:96:f1:65:7f:c1:f5:f2:c3:0f:df:c6:83:e8:40:f4:4c:3f:
         dd:04:99:0c:1f:7c:1e:09:9e:4a:54:c1:26:e6:aa:88:cc:a2:
         5b:5a:f9:94:aa:bc:10:26:4e:c2:00:39:6d:f3:33:eb:7a:07:
         31:f9:90:89:47:aa:93:43:fc:9f:03:4b:06:b7:e2:7d:06:99:
         20:ab:83:6e:61:00:6b:8f:f5:eb:1b:f7:10:14:86:eb:c1:90:
         fc:87:76:5e:b4:be:f0:69:56:88:43:ca:2a:25:7c:c7:14:c8:
         72:6f:36:6f:a1:54:66:af:76:08:95:17:0b:bc:bd:af:f0:c2:
         52:8a:97:c4:74:28:47:e8:18:38:00:0c:8f:78:ad:e7:6e:fe:
         50:4f:c1:21:6a:41:84:dd:3e:94:e3:6b:9a:d3:29:28:a1:8b:
         f6:c6:b1:b4:1a:06:91:c6:64:ad:ff:f4:cb:bb:02:83:35:2f:
         6e:48:6b:91:18:c9:ab:84:f3:51:74:84:66:5d:e9:f2:ec:55:
         b9:f6:89:68:49:3a:7f:c9:80:0e:5f:61:e6:71:f1:0d:14:01:
         cb:f5:a0:a8:28:11:2c:88:f8:49:c5:54:38:62:93:05:da:54:
         e1:58:3a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:14:15 2026 by rpki-client