Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
File:                     -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json)
Hash identifier:          gxv+F9opv6bO0DfLzevuD7mDFWAy4yTn5j4wssJzIjs=
Subject key identifier:   26:E3:7E:DC:39:D9:51:3C:22:66:24:0D:94:82:A1:29:2D:EB:42:46
Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
Certificate issuer:       /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Certificate serial:       02C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
Manifest number:          02BF
Signing time:             Mon 02 Mar 2026 02:33:07 +0000
Manifest this update:     Mon 02 Mar 2026 02:33:05 +0000
Manifest next update:     Mon 09 Mar 2026 02:33:05 +0000
Files and hashes:         1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: beOH56xsnsCqpP0k9auBSGsQp+oW5JmciyqR0Ctlokg=)
                          2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: GbpqXFDJ3pyAqstflVRvzDmIefskzdDNysQF63XsH8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
                          rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
        Validity
            Not Before: Mar  2 02:33:05 2026 GMT
            Not After : Mar  9 02:33:05 2026 GMT
        Subject: CN=69a4f6e2-2784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:b7:04:ee:cf:74:4a:3a:0a:c2:04:97:e6:
                    ff:39:5b:f7:75:3b:82:34:a7:47:3f:b9:4f:0b:06:
                    d1:78:ca:1c:e6:1d:b2:3d:de:28:64:08:34:62:ef:
                    c8:cf:61:82:41:2c:84:d6:bb:0e:c5:61:b9:6a:97:
                    e1:b6:06:8d:24:ee:ea:ff:23:21:e8:0c:75:22:44:
                    cb:09:1f:a4:86:71:b1:a8:70:7a:b9:38:63:b7:c0:
                    de:30:df:9e:d1:8d:d1:d7:85:e8:d1:6a:59:45:0e:
                    fc:db:3b:6e:d0:8c:a3:d1:cd:ca:c9:94:d0:0e:f2:
                    e5:ab:6a:93:95:e5:85:8b:21:31:6d:28:87:02:14:
                    ec:13:9a:cc:27:99:5d:9e:08:ba:d1:98:62:d6:a8:
                    36:76:b5:c1:19:d9:40:a7:73:7d:88:eb:b6:74:a0:
                    fc:76:a8:cb:25:2d:24:98:f2:2f:c8:94:13:b0:ae:
                    3f:66:32:36:55:ca:9b:87:94:f0:d9:84:27:29:90:
                    21:3e:a9:b4:c0:3f:c3:43:c3:f7:47:f6:fb:6b:6b:
                    81:82:69:2b:b5:cd:66:b4:f7:f7:6d:14:fd:4f:07:
                    b9:52:6e:3c:d5:06:26:d7:17:79:a4:72:92:da:22:
                    e2:a6:77:a7:ac:e9:20:8d:c1:38:ec:4c:86:1e:32:
                    cd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E3:7E:DC:39:D9:51:3C:22:66:24:0D:94:82:A1:29:2D:EB:42:46
            X509v3 Authority Key Identifier:
                keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:a6:1a:35:71:08:12:54:a3:0a:bf:a3:d8:5c:b7:b4:3f:eb:
         66:d2:e5:a4:e2:ec:3d:c9:17:5f:cf:57:92:21:98:97:5d:09:
         69:ca:00:26:b4:2c:59:71:7b:54:88:02:4a:f1:44:f5:7a:0a:
         c1:f7:00:38:c6:91:7f:b1:23:42:ae:ad:23:00:57:29:a6:ca:
         9b:cb:9e:69:0b:fd:53:52:c6:bc:ad:3c:c5:c5:e8:31:ed:cd:
         e9:a7:90:b0:b4:c8:6e:e4:63:e2:bb:54:55:f4:5e:a9:f4:83:
         dc:7b:a9:17:eb:82:62:82:10:e6:ed:38:66:44:c3:5a:87:d0:
         ae:3b:25:3d:8f:0b:38:f0:5b:83:31:77:54:e4:cb:8e:14:d4:
         11:46:10:19:67:f6:c6:d0:15:d7:cd:33:a6:d8:0e:00:4d:4f:
         0a:53:ec:ee:36:4b:a3:e1:52:18:b1:65:50:e1:a9:a5:39:b1:
         e9:a8:6e:b3:05:6b:8d:a4:c0:41:f5:df:d9:94:30:22:b5:ed:
         9b:89:02:af:c0:9d:02:b3:9f:2d:f7:0e:9c:76:07:23:3e:58:
         04:30:92:b3:3d:50:1d:4f:79:60:8f:68:af:2d:ac:c4:2b:f9:
         57:8c:a5:a7:92:5c:4e:1b:0f:11:ee:8f:b2:e7:bd:cc:5f:98:
         b5:60:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:55 2026 by rpki-client