Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
File:                     MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json)
Hash identifier:          YXq/KYf2F0LB0m9XDx/MVSNjLEgMAymuuBi1NvoF+fs=
Subject key identifier:   C6:16:21:EB:F1:93:6C:B0:1A:2C:3F:62:63:B7:C6:53:0A:1E:29:7F
Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11
Certificate issuer:       /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411
Certificate serial:       06F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
Manifest number:          06EC
Signing time:             Sat 28 Feb 2026 22:35:39 +0000
Manifest this update:     Sat 28 Feb 2026 22:35:38 +0000
Manifest next update:     Sat 07 Mar 2026 22:35:38 +0000
Files and hashes:         1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: fmw/NeGRCgq1slggwzjGvg9pX0PB5RaoT2bV9rjj8B4=)
                          2: 4863E7886BEA11F0AA50230BC4F9AE02.roa (hash: GcIFK8Guk5Mw4MCQJvhTgzOgqMQrjbwbQ9Fg20gZQJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl
                          rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1CF4, serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411
        Validity
            Not Before: Feb 28 22:35:38 2026 GMT
            Not After : Mar  7 22:35:38 2026 GMT
        Subject: CN=69a36dba-91a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:bf:93:56:b6:99:21:0c:cb:c9:cf:bc:0e:
                    b7:e7:56:bc:de:4e:fa:ce:ad:b5:80:d2:60:c1:da:
                    30:7f:12:d8:db:59:79:a2:4f:9b:a9:ac:c0:51:06:
                    f7:09:58:a5:a3:59:d9:f9:9c:c4:b4:64:2b:9f:fa:
                    ea:45:b1:1c:b0:f7:17:78:c5:ba:2b:36:eb:ad:b4:
                    22:11:93:ef:3c:3b:6c:96:d4:d7:65:7b:69:ba:c7:
                    4c:f5:a3:98:00:3d:41:67:ad:b1:33:36:31:88:cc:
                    d3:d8:95:47:f2:3c:77:8b:85:6c:c7:30:4a:ac:11:
                    10:4d:1e:97:3e:2e:f7:6a:aa:4c:a8:b9:5c:85:03:
                    31:ed:4a:9d:30:63:f9:aa:54:7a:01:41:c5:20:68:
                    5b:09:49:30:ef:92:03:35:58:a3:86:e9:6b:e7:87:
                    a1:ff:cb:bf:e7:70:44:f5:d2:68:a4:7b:aa:f1:74:
                    66:06:6e:98:b7:5a:c9:e9:20:15:b5:d6:35:6b:16:
                    41:f8:89:91:9d:6e:7b:4c:79:b3:c1:09:3d:8b:c2:
                    93:7d:c1:04:f6:ac:4f:26:44:25:fe:45:26:a1:64:
                    f7:e0:34:f1:42:fe:1b:8d:3b:3c:66:9f:bf:0c:92:
                    58:bf:fd:4b:f9:ce:c5:bd:00:d6:0c:0d:5c:27:16:
                    21:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:16:21:EB:F1:93:6C:B0:1A:2C:3F:62:63:B7:C6:53:0A:1E:29:7F
            X509v3 Authority Key Identifier:
                keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:29:02:0d:ea:6c:f8:22:b4:df:4b:eb:2c:a4:aa:d1:6d:fd:
         39:eb:b5:a2:dc:d0:b3:cc:3a:f5:af:d3:06:7f:1e:3e:3c:51:
         d0:6e:60:87:ee:d1:50:9c:58:b9:e3:e7:ae:ed:7a:9e:7f:e4:
         8b:76:c4:83:6c:34:05:69:0a:89:f1:24:bd:00:74:74:30:a6:
         58:72:65:28:8c:4a:e6:12:6a:a4:2e:03:34:d6:16:a0:63:23:
         c7:05:eb:5f:2b:96:c6:a6:84:6d:a3:1d:25:09:a4:dd:54:60:
         a5:16:85:22:d9:f7:70:8d:6e:a9:ee:4e:fb:7b:57:20:e4:55:
         44:8c:aa:d3:50:ba:1b:9a:4d:ef:75:51:e6:32:4a:01:50:f3:
         b2:b9:16:b7:d7:8b:71:91:a5:62:2e:d3:9a:3a:66:53:e8:90:
         0e:df:88:23:99:dd:a9:24:aa:d1:d7:bd:a9:0e:06:c9:e6:50:
         93:db:0e:7f:4f:77:c3:4a:49:8c:84:a7:c0:59:39:59:ce:27:
         26:20:a6:49:82:4e:11:ab:9c:2f:69:04:f6:13:c4:08:a1:c6:
         be:2d:53:95:39:fe:39:bc:fa:28:97:f0:08:9c:97:b3:f5:b6:
         9d:4c:38:b1:92:9a:be:50:7d:6c:57:b5:f7:a8:63:3e:95:e2:
         bf:e5:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:04 2026 by rpki-client