Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
File:                     Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json)
Hash identifier:          AEa0krc5Hogi1FgVlozu4s0tbuGKXU1sVfEbxAVpZVQ=
Subject key identifier:   7F:05:1C:19:58:12:DE:6E:3B:85:3D:92:FE:36:1A:53:88:BD:EB:9D
Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88
Certificate issuer:       /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
Certificate serial:       0D61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
Manifest number:          0D39
Signing time:             Sat 28 Feb 2026 18:13:21 +0000
Manifest this update:     Sat 28 Feb 2026 18:13:21 +0000
Manifest next update:     Sat 07 Mar 2026 18:13:21 +0000
Files and hashes:         1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: FzLyApMlE68NF5RpbOLZczKAVpsPGIXDNsmNqLESIY4=)
                          2: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: I0QziAIo3oazYojvFNhbt9C/zSWf1Md92KB9f4lH27c=)
                          3: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: iAcBe9JsIgejkunApnFizR8kcd9hvKFDEaA+fu50sDE=)
                          4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: CTDwhtj/lvv2X5UcpQAPIBaNmpDgoQygeS9l2k6Fjz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl
                          rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3425 (0xd61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91642A0, serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088
        Validity
            Not Before: Feb 28 18:13:21 2026 GMT
            Not After : Mar  7 18:13:21 2026 GMT
        Subject: CN=69a33041-c01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1c:60:07:fb:72:1e:c3:a5:ff:a3:75:6b:f4:
                    99:34:9e:eb:ed:41:e2:b9:5b:bf:65:9e:42:29:30:
                    91:79:b4:65:d0:5d:b6:fd:c6:c6:87:4b:d0:85:60:
                    7a:cc:ee:ae:d8:e6:54:53:64:c4:f1:c2:34:1d:9e:
                    6e:6b:a1:73:ac:be:dd:6a:71:ba:71:37:e4:66:55:
                    8d:32:38:48:46:f2:97:dd:e7:f9:4b:ba:19:9d:25:
                    68:30:c8:de:e9:bf:48:46:51:5b:c7:5e:26:e1:f3:
                    06:2b:42:d1:ed:25:36:07:8a:4f:d9:fa:e5:4e:14:
                    a6:5e:75:10:43:22:30:c0:20:3f:25:13:ee:74:18:
                    ac:9d:58:44:da:08:9e:49:2e:b9:38:34:42:fc:4f:
                    62:e7:77:12:19:68:69:8d:eb:bf:f2:6a:f5:cf:6c:
                    aa:2f:04:24:24:5d:53:15:9c:fb:d5:0d:33:d7:7e:
                    e5:40:9e:bd:98:bb:fd:12:86:6c:bb:86:e4:f2:17:
                    8c:2e:4f:dd:bc:b9:df:c6:f1:c2:42:34:ca:51:e4:
                    2c:37:e8:4b:d3:44:34:43:08:82:36:22:71:fc:90:
                    a7:9b:43:d5:5a:4a:a8:32:3e:f5:e8:bc:0b:11:5e:
                    b5:9c:47:eb:83:81:4a:b7:7d:10:1c:15:30:af:32:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:05:1C:19:58:12:DE:6E:3B:85:3D:92:FE:36:1A:53:88:BD:EB:9D
            X509v3 Authority Key Identifier:
                keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c0:6b:1a:b8:67:e3:33:45:08:11:ac:9d:da:6e:d7:6b:db:
         c7:15:3c:2d:67:6a:77:1d:f8:07:43:82:cb:d3:2c:ed:12:d5:
         90:0e:4c:d6:3a:75:ee:ae:3d:1f:8b:b6:fc:fa:1e:09:e4:d7:
         f9:40:46:7e:ed:51:93:02:b0:6b:9c:a2:28:f7:f4:41:79:49:
         94:d5:19:25:47:59:fc:ff:d5:3a:59:e1:45:66:86:d1:8d:ef:
         a6:f3:b3:04:6e:8e:85:f9:57:eb:14:01:dd:b9:aa:ce:2c:85:
         c2:3c:89:43:0b:c1:6b:4d:77:42:05:81:65:89:fa:e1:94:b4:
         9d:ea:fb:49:26:3c:27:7b:dc:55:05:8a:b2:09:3b:ef:4c:14:
         61:e5:84:04:03:c3:85:1e:88:ff:31:06:ce:fc:0d:14:6a:21:
         65:4e:87:04:fd:7f:91:81:7e:14:f7:2b:86:2f:a3:f5:48:d1:
         5c:c6:06:4a:a9:b5:ab:75:07:aa:7a:e2:6a:c7:fe:9c:91:79:
         55:99:bd:c3:4c:b4:53:29:2c:dd:95:96:5c:51:e4:81:80:55:
         d3:b9:ef:2e:fe:c1:44:67:c9:b3:10:3b:fe:97:01:2b:7d:7d:
         fe:6b:6d:57:5f:f3:e8:92:f7:60:8e:24:03:51:8f:f6:df:ea:
         12:bf:09:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:00:32 2026 by rpki-client