Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
File:                     xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json)
Hash identifier:          d7lWDiZMDShw6AoRP6l07aMSI39DAobMfZivb2PBFAU=
Subject key identifier:   6E:C8:0E:B8:B2:59:0E:61:B5:D5:37:1D:AD:05:4C:D2:67:09:8C:8C
Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A
Certificate issuer:       /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
Certificate serial:       085B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
Manifest number:          084F
Signing time:             Sat 28 Feb 2026 21:09:42 +0000
Manifest this update:     Sat 28 Feb 2026 21:09:42 +0000
Manifest next update:     Sat 07 Mar 2026 21:09:42 +0000
Files and hashes:         1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: Vq+Bj3mgUoLtUzp4JEW9HNzjr4uKL411yP3zPoAEhQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl
                          rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
        Validity
            Not Before: Feb 28 21:09:42 2026 GMT
            Not After : Mar  7 21:09:42 2026 GMT
        Subject: CN=69a35996-b689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:98:2f:65:dd:76:58:7e:09:6f:46:de:df:20:
                    a7:a9:65:68:ae:ef:78:2e:fe:ff:eb:6b:08:c3:2a:
                    9b:f6:ab:3b:3c:9d:3b:bb:85:77:9a:3f:61:8e:d7:
                    9c:05:a2:91:d8:52:3d:da:53:0f:2d:c2:82:20:b3:
                    88:bb:32:a4:1b:e9:e9:dc:ef:c7:07:60:d8:73:b3:
                    53:d8:44:9d:60:20:f6:83:25:31:67:b2:c8:b9:3b:
                    49:4c:34:a6:1d:4b:f2:70:d6:7d:d7:71:de:ab:ae:
                    fe:db:f5:d9:71:af:23:73:1f:1a:83:7c:c5:50:cf:
                    78:9e:b0:dd:f0:9d:cc:73:9d:ad:03:4b:32:51:a5:
                    44:b2:36:95:7a:68:34:6f:1d:12:74:0a:0a:dd:43:
                    b6:47:13:66:9c:16:bd:b6:a1:60:a8:c6:fc:16:41:
                    5b:06:c8:f8:cf:df:f3:e4:88:34:02:09:20:6a:c9:
                    a8:9a:18:60:78:f8:5e:4a:7f:39:49:ee:e7:a4:f9:
                    d0:ab:e4:4c:be:1d:36:42:a9:ee:71:f1:7f:37:d8:
                    d7:7f:b4:30:b0:3d:a4:f1:ab:7e:c1:61:93:1b:4b:
                    4a:11:74:ec:74:cc:a0:cd:2c:76:09:ec:c7:26:cf:
                    6a:b7:0d:54:cd:73:4d:5c:18:70:01:d1:af:c3:82:
                    12:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C8:0E:B8:B2:59:0E:61:B5:D5:37:1D:AD:05:4C:D2:67:09:8C:8C
            X509v3 Authority Key Identifier:
                keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:42:df:f8:6f:12:38:16:2d:36:e1:72:6e:ab:e7:b0:c0:df:
         f7:f0:59:e1:74:54:71:49:9e:36:85:64:8a:41:d7:1f:49:12:
         8e:00:18:df:6c:3f:31:9b:7b:79:3d:fd:61:bd:15:1c:87:a5:
         4f:b5:4c:cb:c3:15:71:36:9c:70:db:97:fa:78:39:fb:67:65:
         14:35:db:a5:be:cc:88:ab:96:80:86:b1:cf:49:b6:eb:bf:51:
         5c:2c:24:af:fd:e5:c8:20:90:e0:35:e5:06:35:01:56:93:c5:
         79:c4:de:45:1f:86:01:31:98:9f:5e:b0:04:63:91:f6:98:bf:
         33:07:7a:c5:5a:2b:a4:3c:02:8e:2f:c1:c5:49:83:01:2c:15:
         9e:9c:23:34:16:6c:25:84:15:39:ed:68:1d:56:ab:f8:62:e5:
         ea:91:f4:68:9f:46:3d:10:99:93:8f:9b:4f:a7:19:62:dd:71:
         df:d6:4c:02:a8:f0:2e:33:1a:74:df:93:c4:32:b8:31:47:f1:
         65:6a:4e:a6:3f:26:2a:9e:d0:37:3b:87:46:66:60:50:ef:ed:
         08:84:e2:46:09:c6:d8:8b:69:42:c1:65:8a:94:fe:51:38:dc:
         8f:7b:44:5d:c5:c4:84:9e:12:9b:1c:64:c3:e9:78:df:68:e3:
         2c:29:18:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE
RUE1MjU0OEEwHhcNMjYwMjI4MjEwOTQyWhcNMjYwMzA3MjEwOTQyWjAYMRYwFAYD
VQQDDA02OWEzNTk5Ni1iNjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk5gvZd12WH4Jb0be3yCnqWVoru94Lv7/62sIwyqb9qs7PJ07u4V3mj9hjtec
BaKR2FI92lMPLcKCILOIuzKkG+np3O/HB2DYc7NT2ESdYCD2gyUxZ7LIuTtJTDSm
HUvycNZ913Heq67+2/XZca8jcx8ag3zFUM94nrDd8J3Mc52tA0syUaVEsjaVemg0
bx0SdAoK3UO2RxNmnBa9tqFgqMb8FkFbBsj4z9/z5Ig0AgkgasmomhhgePheSn85
Se7npPnQq+RMvh02QqnucfF/N9jXf7QwsD2k8at+wWGTG0tKEXTsdMygzSx2CezH
Js9qtw1UzXNNXBhwAdGvw4IS2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG7IDriy
WQ5htdU3Ha0FTNJnCYyMMB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC
RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS
RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQkLf+G8SOBYtNuFybqvnsMDf9/BZ4XRUcUmeNoVkikHXH0kSjgAY32w/MZt7
eT39Yb0VHIelT7VMy8MVcTaccNuX+ng5+2dlFDXbpb7MiKuWgIaxz0m2679RXCwk
r/3lyCCQ4DXlBjUBVpPFecTeRR+GATGYn16wBGOR9pi/Mwd6xVorpDwCji/BxUmD
ASwVnpwjNBZsJYQVOe1oHVar+GLl6pH0aJ9GPRCZk4+bT6cZYt1x39ZMAqjwLjMa
dN+TxDK4MUfxZWpOpj8mKp7QNzuHRmZgUO/tCITiRgnG2ItpQsFlipT+UTjcj3tE
XcXEhJ4Smxxkw+l432jjLCkYOg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:24 2026 by rpki-client