Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
File:                     1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json)
Hash identifier:          nt+Cu8ZhiYiuo4LkQE+p2KPf/NlmHmcJK3UaPHsDjUc=
Subject key identifier:   B5:E6:AB:7B:1E:27:A9:32:79:27:24:D5:09:77:02:7E:BD:EE:A5:AA
Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC
Certificate issuer:       /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
Certificate serial:       1FB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
Manifest number:          1F88
Signing time:             Sat 28 Feb 2026 16:02:17 +0000
Manifest this update:     Sat 28 Feb 2026 16:02:17 +0000
Manifest next update:     Sat 07 Mar 2026 16:02:17 +0000
Files and hashes:         1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: oRp9tj9Ox7VGUF3cl1Bg+G+0IwFxEUBwRtx914Q4UAQ=)
                          2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: YUv0B1jusFdiY8GK2fZsHPwriPHntVEYOgnSki3/9Zk=)
                          3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: U+HOR1WWM3bWUanGm2xW2p0h9XaY3gPXOWuTGfO7XNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl
                          rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8112 (0x1fb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC
        Validity
            Not Before: Feb 28 16:02:17 2026 GMT
            Not After : Mar  7 16:02:17 2026 GMT
        Subject: CN=69a31189-e22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:87:02:31:22:32:0d:23:ca:eb:98:54:e4:
                    18:b6:d9:80:67:19:51:ce:ac:ee:21:34:bf:1c:d8:
                    7d:29:97:b3:63:43:68:51:f7:2b:2b:3f:1e:31:c0:
                    2a:c2:71:3e:01:58:81:54:b9:56:7c:ec:67:d1:74:
                    ef:86:b2:a9:b9:d8:7d:58:58:5a:4d:6d:58:c8:1c:
                    2e:01:a6:9c:be:64:18:d5:b2:92:35:75:62:67:df:
                    6e:e0:da:97:6c:15:f3:23:75:c0:15:ef:68:4f:c6:
                    e0:66:11:db:b4:e6:21:fd:a7:78:65:7a:ab:0a:ed:
                    e2:3e:66:1b:95:00:4b:46:fb:f7:5e:5c:62:28:cc:
                    53:3e:d4:8e:cc:fa:12:a3:f4:11:f4:7e:65:92:47:
                    4b:86:bb:35:7d:05:56:db:16:3e:5d:ab:ed:7f:14:
                    64:dd:32:be:24:a5:9d:49:10:7f:b5:70:f2:8c:38:
                    f4:f0:87:4b:16:de:bd:16:68:85:7f:1f:42:0d:0d:
                    2d:3d:af:f8:e8:96:fc:59:2b:c6:02:03:8b:bf:27:
                    a6:14:55:dc:df:98:dc:61:d8:67:d9:e6:93:f8:e6:
                    62:e8:fc:54:0e:f4:fc:15:04:a6:15:39:a0:11:a1:
                    61:95:bd:c5:06:52:cc:55:47:83:49:9d:49:2b:ad:
                    24:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E6:AB:7B:1E:27:A9:32:79:27:24:D5:09:77:02:7E:BD:EE:A5:AA
            X509v3 Authority Key Identifier:
                keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2e:45:83:ae:81:9b:45:59:ad:03:96:dc:9f:0b:64:72:a8:
         5d:ab:4e:eb:3d:fc:0d:8b:fc:ee:89:78:b1:f4:9c:cf:0f:60:
         88:3d:12:06:e0:4a:dd:97:f0:a3:58:8c:8d:70:c0:60:e5:e3:
         ac:e9:9d:7b:90:27:b2:f3:1a:1b:76:7b:8c:8e:2a:8f:a7:b5:
         95:05:3d:bc:7b:66:fe:83:3b:ce:f1:52:80:8d:3c:78:71:4b:
         67:2a:f4:eb:18:7b:65:56:d8:0e:cf:42:e8:d3:bb:f8:2a:52:
         2d:d0:c4:b6:1d:62:dd:24:ba:7b:22:9d:3a:95:38:58:76:64:
         70:0a:1f:09:dd:7e:a1:45:a4:1e:69:d0:67:79:f1:b0:54:43:
         3f:04:90:04:a4:9b:be:39:ef:75:a0:b7:07:21:7a:fd:7c:71:
         3e:c1:6e:4a:bc:5b:d9:e7:df:ba:9f:a2:66:c1:3a:85:d8:7f:
         62:e0:4a:1d:ed:73:39:7b:18:88:7b:1d:21:a1:1f:1d:1f:69:
         71:ce:92:de:5e:25:34:31:2a:91:e7:aa:9d:5c:d5:ec:66:1d:
         35:68:ab:df:24:a9:6c:53:70:84:5d:87:60:9d:28:47:55:58:
         8d:aa:46:58:68:75:5e:43:e0:ed:8b:74:5d:80:98:61:79:33:
         ed:b6:55:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:21 2026 by rpki-client