Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
File:                     XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft (raw, json)
Hash identifier:          lEdXNrbIa8QorYx6RCBsPodjPxSWRRZ3d8YjfH1aX8w=
Subject key identifier:   81:8A:C2:52:BD:F5:97:0A:5D:1D:BB:C0:B5:8D:EB:66:AA:D8:54:13
Authority key identifier: 5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08
Certificate issuer:       /CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
Certificate serial:       0B76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
Manifest number:          0B6F
Signing time:             Sat 28 Feb 2026 19:24:08 +0000
Manifest this update:     Sat 28 Feb 2026 19:24:07 +0000
Manifest next update:     Sat 07 Mar 2026 19:24:07 +0000
Files and hashes:         1: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl (hash: V/tevW+3bF+BfR1G4NH4PJzfWYeI0dUO75XXmJnbAn4=)
                          2: 43272DE249AA11EABABC8610C4F9AE02.roa (hash: ArNuSAGS500F2Au8BkBemb4Fqw5PMgC4H5tbUjnLNK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl
                          rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2934 (0xb76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A467D, serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08
        Validity
            Not Before: Feb 28 19:24:07 2026 GMT
            Not After : Mar  7 19:24:07 2026 GMT
        Subject: CN=69a340d7-e18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ef:bd:bf:3c:47:0b:74:cb:f7:0b:82:7b:9d:
                    c6:ce:da:f8:71:ee:0d:3b:a8:4f:fa:f2:fb:be:24:
                    b1:0f:24:1c:56:67:2b:a1:92:75:17:fe:82:28:f7:
                    2b:f5:c0:5a:15:fa:5b:4f:ae:f0:9e:c2:63:e5:ac:
                    9d:1b:00:a1:8f:04:56:22:39:18:73:62:86:50:ce:
                    e8:2e:7f:3e:cb:36:a2:a6:58:25:c7:14:64:42:5d:
                    5e:0f:4c:26:e3:b7:5f:23:2f:00:0a:f5:cf:4a:b0:
                    74:02:fb:00:27:f7:d7:55:15:41:6a:bd:ba:84:00:
                    b9:22:9e:65:1d:50:a0:72:e8:63:16:81:40:27:52:
                    6c:e9:8b:2c:48:f3:d9:5c:27:48:dd:9a:b2:40:a1:
                    b8:e0:36:4a:ca:ef:13:3a:15:e7:bf:9c:21:65:4b:
                    18:91:0e:64:83:8d:d4:5c:0d:51:51:56:0a:a8:17:
                    31:ed:d6:2e:6d:66:2d:00:e8:38:1e:66:7e:4d:33:
                    b9:93:5c:12:2c:4f:8e:98:22:b5:f0:85:2d:27:72:
                    f1:f7:78:80:ac:bb:01:41:75:5f:10:74:11:53:b9:
                    86:28:64:79:8b:2e:4a:d9:6e:9d:c0:4c:e3:32:8e:
                    b0:1a:b9:44:45:28:f5:e0:44:f4:c2:06:d2:7a:a1:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8A:C2:52:BD:F5:97:0A:5D:1D:BB:C0:B5:8D:EB:66:AA:D8:54:13
            X509v3 Authority Key Identifier:
                keyid:5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:cf:08:0e:5d:13:aa:d3:24:11:37:3e:6a:c8:75:0b:9c:e0:
         56:fb:36:47:e1:da:68:7e:08:e4:d4:71:17:b9:f0:70:d1:68:
         14:58:91:53:f4:e6:3b:61:59:5d:18:f7:c7:1c:05:5c:c1:6e:
         64:18:fd:28:3a:91:6b:e0:a8:ff:c2:c5:78:66:0b:f3:f5:c5:
         3b:9d:78:cd:b7:89:8f:f8:e4:b8:e5:45:d4:23:71:ad:bf:c7:
         91:ca:46:4c:cd:84:80:18:51:a5:3c:f9:60:56:8e:54:9d:0b:
         4e:b3:65:3d:a1:35:21:e0:bf:8c:c9:f9:b1:9d:7e:78:6f:84:
         b9:d9:76:26:b0:aa:05:e7:e3:10:aa:93:03:39:9d:ba:8f:f3:
         64:f7:d2:71:cf:b2:e9:73:41:af:5b:2a:cb:e6:05:3f:da:0a:
         c5:45:39:66:b1:a6:7f:91:ad:f6:b6:a8:d1:20:2e:d1:44:45:
         08:93:0d:ff:4b:06:db:c0:ab:ee:3f:12:9e:5b:48:17:b8:c6:
         d7:c1:4b:b0:9c:d4:88:aa:04:5e:5e:b0:15:cf:77:79:ed:9a:
         39:dc:e4:d0:a5:60:be:ad:45:0d:f8:d2:72:13:4f:0f:83:4c:
         f8:5e:bd:8a:bd:3b:f6:17:65:10:8c:82:f7:79:fa:2c:53:be:
         3d:e0:95:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:06 2026 by rpki-client