Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
File:                     C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json)
Hash identifier:          zLck3kDVD9W9G+lNtPt9sAUS2DkZPZiRy3iMpBiR0bQ=
Subject key identifier:   78:F3:60:87:1C:2C:31:D3:0F:C0:72:50:0F:88:CD:88:37:33:95:28
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Certificate issuer:       /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial:       0678
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
Manifest number:          065A
Signing time:             Sat 28 Feb 2026 23:14:04 +0000
Manifest this update:     Sat 28 Feb 2026 23:14:03 +0000
Manifest next update:     Sat 07 Mar 2026 23:14:03 +0000
Files and hashes:         1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: ra9GHsecLfR5/5C/byNv9Uo8dmSjg42WQgG9aNDTa3Q=)
                          2: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: AWiL7Ku+LhuTzw8yYOes8DFZCiFrs+UOfXRiEC5RaE4=)
                          3: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: R8MAXcI9/yvxzT89z1WDBO8OZ5lHOE8A6WUOtaaft6k=)
                          4: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: JjwRM28UWpqUpm8V4jbamMbdEhJ8x26HdODuQra73JI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
        Validity
            Not Before: Feb 28 23:14:03 2026 GMT
            Not After : Mar  7 23:14:03 2026 GMT
        Subject: CN=69a376bc-9302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c9:59:56:f2:6b:72:9f:08:53:53:64:ac:e2:
                    b9:1e:5c:e6:d2:5f:5c:aa:3d:2b:4c:b8:12:95:da:
                    1c:fc:04:f7:0a:0b:d6:7e:0c:55:8c:1d:74:06:d7:
                    69:0a:5a:84:fa:b0:8c:c0:b5:78:6a:07:d5:ae:4f:
                    d5:26:04:7a:2d:e0:30:34:3a:75:2d:94:f1:de:3c:
                    af:c5:9a:ae:2a:57:ed:08:06:0b:6a:ad:38:76:ba:
                    0f:78:50:4b:ad:b7:e5:0f:ed:22:30:7e:5e:c8:0c:
                    10:5e:2a:25:93:cf:4e:1a:0b:4b:b3:b1:b9:ee:e6:
                    1c:4a:44:1f:01:7e:86:db:70:4a:19:8a:af:ee:f2:
                    65:68:f8:0c:53:57:a4:ff:f7:71:88:75:0f:ee:ec:
                    a8:30:89:5d:8f:37:fd:2b:a4:da:82:dd:22:57:42:
                    c4:21:ef:04:5c:bf:f1:f6:70:bf:ce:d1:c7:36:f7:
                    b6:0e:d7:dd:b8:b5:66:3c:e2:ad:98:e9:51:56:a9:
                    69:05:eb:67:b5:d9:9c:5f:5e:65:44:56:b4:3f:4a:
                    14:2f:9a:c0:36:38:9a:e2:a4:3f:41:28:92:3e:9a:
                    09:39:a8:b3:8c:ae:45:eb:db:47:c3:b5:80:50:a3:
                    04:ca:be:84:f4:d2:7c:34:8a:f6:72:75:58:98:c4:
                    57:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F3:60:87:1C:2C:31:D3:0F:C0:72:50:0F:88:CD:88:37:33:95:28
            X509v3 Authority Key Identifier:
                keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:36:21:ac:ad:9b:f3:c8:a8:39:b2:f1:b8:44:a4:50:a5:60:
         51:84:d9:c2:90:27:2e:2a:4e:d6:25:47:b9:37:f4:a5:b1:60:
         36:e6:6e:7b:3d:d8:f1:0e:7d:ab:63:dc:d7:59:97:2b:69:b5:
         ce:db:ff:59:b1:9f:9e:78:23:25:79:79:12:f9:13:06:09:09:
         8f:23:ab:ea:fa:97:15:b2:36:e8:c6:4c:2d:71:64:bf:05:a6:
         3a:e4:33:b3:87:85:54:29:f1:20:86:d2:5e:1e:42:80:f8:85:
         d2:cb:d1:80:b0:3e:c0:47:2c:c3:d2:41:4b:2f:01:a7:5b:03:
         fd:79:40:b0:66:4d:1d:92:33:e8:81:60:36:95:ba:f1:80:ea:
         17:af:35:97:ae:51:a2:75:23:00:01:82:8c:f1:c6:0e:55:af:
         be:9e:5d:48:8b:39:cf:cb:a3:35:3d:10:22:9e:2c:bf:d5:39:
         86:4c:51:48:1e:ef:9a:fc:5e:5a:ae:16:db:73:05:5d:3e:b9:
         91:8b:17:08:b5:8b:cc:70:fa:aa:6c:06:f3:7b:3c:27:a1:b4:
         39:2e:24:64:2d:40:80:b2:bd:61:b3:d9:87:b0:2f:6f:05:8c:
         68:78:5a:f4:63:0a:65:17:36:42:8b:57:b5:0a:fa:58:1e:a5:
         2d:b7:39:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:37:31 2026 by rpki-client