Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
File:                     xPuRgT57oJnZHpxIFyCUuZBcDxE.mft (raw, json)
Hash identifier:          3mseZuxSbk99yQuEmhytXieOq+2lJ9EtTN+z76rZtkE=
Subject key identifier:   98:FD:D5:28:8D:89:B8:0D:84:22:14:1F:3D:A2:DC:C7:52:A6:C9:01
Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11
Certificate issuer:       /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
Certificate serial:       1EBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
Manifest number:          1E9E
Signing time:             Sat 28 Feb 2026 16:05:52 +0000
Manifest this update:     Sat 28 Feb 2026 16:05:51 +0000
Manifest next update:     Sat 07 Mar 2026 16:05:51 +0000
Files and hashes:         1: xPuRgT57oJnZHpxIFyCUuZBcDxE.crl (hash: kkO9qaBQaATAHUMo6Hh2kQ5Q6Gtuvu5DtZjllKa2vOs=)
                          2: 6553E9461A0611F08E7AD42AC4F9AE02.roa (hash: gPUSFmbihFfUmrLnrNcUaLZQc5vn//4bgSoy5gzJdZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl
                          rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7869 (0x1ebd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11
        Validity
            Not Before: Feb 28 16:05:51 2026 GMT
            Not After : Mar  7 16:05:51 2026 GMT
        Subject: CN=69a31260-c685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:14:c7:3d:9a:cf:7d:b7:5e:74:e3:0d:33:
                    90:bd:55:5a:3c:27:73:7b:bd:89:66:84:30:26:31:
                    be:78:ed:ab:09:89:fa:61:b6:af:3a:0e:ac:32:57:
                    01:26:44:40:77:e9:da:42:c7:3d:6d:8b:4b:51:a1:
                    37:65:38:cc:c6:68:a7:11:d8:e6:e9:56:ee:72:05:
                    69:1f:e6:81:08:5d:28:2f:74:4d:46:d1:61:d3:18:
                    5e:41:c0:0c:9a:6c:5e:5a:a6:61:f9:2c:d7:23:24:
                    46:04:52:5c:c1:ec:77:8b:50:2b:65:c9:ad:ce:18:
                    46:56:36:7d:a9:4d:f0:90:0d:88:3c:cb:06:b1:6d:
                    5f:40:e5:38:89:78:8b:ae:c5:12:ba:11:5f:70:91:
                    87:0d:7c:a3:5c:14:fe:65:44:d8:82:6b:35:c5:ec:
                    70:ed:d2:ed:3a:ed:b1:4a:b0:38:7d:5b:28:6d:0d:
                    8d:f8:bb:e7:ca:66:a9:bb:0b:2c:37:dc:ea:de:1c:
                    b6:3b:ab:9c:16:fe:30:f5:97:a5:82:97:f3:f0:8a:
                    39:66:39:b7:44:34:7a:0d:16:f3:fa:31:2b:f1:96:
                    34:22:7f:f4:ec:76:95:c1:53:68:89:63:8d:89:94:
                    9b:dd:d4:77:67:da:c9:1b:67:49:3d:1e:e6:34:ec:
                    f0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FD:D5:28:8D:89:B8:0D:84:22:14:1F:3D:A2:DC:C7:52:A6:C9:01
            X509v3 Authority Key Identifier:
                keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fd:72:c4:ad:99:bd:d9:ba:cb:7a:c3:84:81:1c:0a:a7:85:
         ca:14:e7:ab:a8:20:b5:47:d3:30:a2:de:2d:48:aa:fc:73:f8:
         25:71:62:2a:70:30:6e:48:fc:ff:d7:3a:f5:7b:1b:b2:8a:06:
         35:63:63:aa:35:69:aa:77:f9:66:45:63:eb:44:42:71:0e:40:
         78:87:dc:9a:ff:9b:8b:ed:7b:52:27:1d:ad:b7:26:b0:c0:7b:
         98:7d:2e:35:55:1d:5a:ba:bc:ee:eb:08:e6:6d:59:1f:5f:67:
         1f:bb:f8:5f:3a:a2:22:a8:84:3b:4b:19:54:e7:9e:2e:a2:3b:
         28:5d:98:54:39:4b:dc:52:08:5c:f4:f9:c1:f4:65:4b:d2:ac:
         f5:ab:4d:db:c9:77:95:91:e8:53:68:2f:ab:1b:97:3c:18:23:
         a6:34:e4:e9:19:74:d6:3b:29:50:0b:4c:a4:98:59:58:83:d9:
         eb:e7:57:80:4f:48:28:3f:7e:2d:19:95:62:e8:07:14:4f:f1:
         a0:59:8d:ff:e6:5c:af:9d:50:34:22:6d:a4:fe:87:a8:b6:fa:
         e5:f0:a4:11:62:20:de:9b:ce:09:fd:b9:63:ae:e2:77:16:c1:
         32:43:01:94:5a:65:9e:75:f7:d3:c6:58:ac:99:21:bc:fe:70:
         4e:4d:d1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:02:12 2026 by rpki-client