Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
File:                     F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json)
Hash identifier:          N6SC7GGQqN0frzPRdKPmQqwGnuH9O3rmT2whvALas2s=
Subject key identifier:   B5:AF:A0:7D:0C:8C:72:E1:F9:5C:30:FB:C8:37:20:7D:C4:32:5E:06
Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
Certificate issuer:       /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
Manifest number:          CA
Signing time:             Sun 01 Mar 2026 07:59:02 +0000
Manifest this update:     Sun 01 Mar 2026 07:59:01 +0000
Manifest next update:     Sun 08 Mar 2026 07:59:01 +0000
Files and hashes:         1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: ikWNYjBzqB7rtVY8M//favalRk0yardfOD1bDs2MT8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl
                          rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
        Validity
            Not Before: Mar  1 07:59:01 2026 GMT
            Not After : Mar  8 07:59:01 2026 GMT
        Subject: CN=69a3f1c6-dbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:eb:fc:bb:e7:c4:a7:ad:9f:a8:ff:6c:07:
                    dd:41:18:00:f3:58:f3:76:a4:14:72:33:25:9f:db:
                    55:13:b4:3b:4e:83:f1:b9:da:20:40:70:e8:c7:fc:
                    d6:45:3b:e1:85:b5:91:29:d3:22:9d:5f:3b:f2:dd:
                    94:a7:c3:ec:d5:ac:f0:58:5b:24:c4:c8:e5:dc:e0:
                    4a:d2:30:7c:1a:f7:7e:9e:3a:3e:70:1f:c9:dd:32:
                    fd:29:a7:13:74:8b:7d:55:d5:d7:fa:1e:e2:64:c9:
                    6f:cd:7d:be:7e:cd:ae:bc:49:88:00:2c:9f:fb:17:
                    59:f2:c4:19:66:3f:03:11:ff:42:47:01:ed:b3:ef:
                    6f:44:ae:7a:b1:50:48:b7:5e:a8:e7:18:33:64:35:
                    6c:8c:ed:dd:85:ad:16:8d:7f:81:52:1d:ed:b4:34:
                    82:98:2b:63:8e:a6:47:6e:19:d3:1c:dd:9b:cc:2b:
                    4c:60:ee:4f:b2:09:16:0d:66:ff:58:e2:8b:cc:de:
                    17:a8:e3:2b:99:01:70:e3:cc:a2:c3:22:62:84:7c:
                    e3:07:c9:c4:5d:4d:1f:ab:8d:df:af:d9:32:5e:48:
                    10:1c:a6:23:49:16:a7:6a:5d:d6:91:7e:e9:e4:47:
                    c0:c8:5c:78:2f:d5:df:32:a7:69:50:b8:18:e2:e2:
                    7f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AF:A0:7D:0C:8C:72:E1:F9:5C:30:FB:C8:37:20:7D:C4:32:5E:06
            X509v3 Authority Key Identifier:
                keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:37:14:61:73:e4:2b:25:9c:9f:af:01:53:7a:7a:3b:9d:26:
         70:b8:13:7e:a2:87:8c:bd:a4:1c:a8:1c:db:a7:0f:fe:43:6f:
         44:20:6b:bc:bb:92:e7:45:a5:31:9e:bc:85:e3:6b:a8:f5:b4:
         2e:6e:54:6a:8b:68:0e:77:e6:d1:fc:02:23:b0:d5:25:36:84:
         6b:f4:c7:2b:ac:e4:3e:95:62:ea:10:26:1e:4f:6c:5e:35:10:
         28:e8:ac:fd:58:1e:ab:fc:d8:84:98:a3:45:d9:82:f3:aa:84:
         32:d2:82:60:dd:d8:f0:7e:90:c7:d9:b3:b4:6b:20:3c:e1:1d:
         45:49:44:14:80:5f:05:5a:80:8a:fc:91:6e:2c:8e:ab:96:6f:
         32:0d:04:f8:a4:45:b8:0e:7a:d7:01:0b:cf:ec:ad:a6:ff:53:
         65:27:d5:71:8f:08:91:7b:ae:c7:7e:e3:0b:f9:ce:0e:2f:21:
         fd:ee:11:be:43:c8:dc:ed:64:28:19:42:ca:f9:64:eb:4c:1d:
         8d:77:3e:e3:11:15:de:94:84:f6:0f:6e:3e:f4:33:9f:e6:9d:
         d9:3f:df:1f:13:80:7e:37:2a:57:9b:8b:58:04:a5:c4:89:09:
         7f:ab:2c:ae:0a:05:51:7a:22:b7:ef:7a:97:f0:bd:e2:f5:77:
         47:3b:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:54 2026 by rpki-client