Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
File:                     72i9vAcsq0VbbaMWDt-PtsSI3RU.mft (raw, json)
Hash identifier:          tjbSh9XnlU6+m1LYXiwqQS7oS/52YSz3FJosYqpYxhY=
Subject key identifier:   FB:39:90:AB:FC:FF:08:96:4D:91:C7:0B:37:BC:DA:52:DD:76:69:9B
Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
Certificate issuer:       /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Certificate serial:       3542
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
Manifest number:          3535
Signing time:             Sat 28 Feb 2026 15:02:09 +0000
Manifest this update:     Sat 28 Feb 2026 15:02:08 +0000
Manifest next update:     Sat 07 Mar 2026 15:02:08 +0000
Files and hashes:         1: 72i9vAcsq0VbbaMWDt-PtsSI3RU.crl (hash: rMWNiS3GIuOcFr3oTFLPSeQd9zs5QG++dhThBEOJJgA=)
                          2: C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa (hash: v6QDKHGNgQsriG4lPK9GtQgpf0BZUi9e8DtrdXFAk8A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13634 (0x3542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
        Validity
            Not Before: Feb 28 15:02:08 2026 GMT
            Not After : Mar  7 15:02:08 2026 GMT
        Subject: CN=69a30370-dc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:81:8e:ce:4f:76:f4:1f:51:61:dd:ef:ef:
                    68:ca:24:02:b9:43:08:5b:b6:5f:87:13:0a:41:44:
                    fd:5b:22:66:f4:9d:66:42:44:d1:17:e6:ea:64:4f:
                    46:01:4a:78:3d:61:f7:ec:63:9f:83:4c:70:bb:d4:
                    6e:b9:ca:7d:d8:a9:be:d4:bd:90:06:e7:71:51:6a:
                    bf:13:cf:f4:af:15:8d:da:ef:39:9a:a3:dd:44:10:
                    9a:e8:cc:8a:cd:ea:1e:e0:50:40:4b:c6:a8:fc:b6:
                    a2:5a:91:a9:30:3a:ac:12:a9:01:c6:12:10:cf:be:
                    73:94:20:ab:ab:cf:bc:87:56:a7:0a:d9:8d:6c:b4:
                    c9:2d:55:cf:7b:e3:88:c4:70:0f:d9:cd:c7:cc:5e:
                    95:51:fd:d8:e9:a0:8a:f0:21:3f:cb:f9:54:e5:89:
                    4f:3c:1a:d5:8e:cc:e2:1d:7c:45:ee:cc:20:8e:c5:
                    da:1d:97:05:7a:a1:e3:9b:0f:57:9b:ea:6a:6f:bd:
                    f6:6e:1d:05:f1:b1:19:ac:8c:ae:75:7e:89:63:9b:
                    86:3c:db:ce:3c:88:bd:cd:a3:86:ee:30:0e:1e:1d:
                    be:40:2c:63:76:44:57:7e:8e:40:d8:6a:86:07:4c:
                    ed:3f:11:fa:b9:e5:e1:42:49:df:87:72:49:92:3c:
                    f9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:90:AB:FC:FF:08:96:4D:91:C7:0B:37:BC:DA:52:DD:76:69:9B
            X509v3 Authority Key Identifier:
                keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:94:92:50:9f:d3:d4:39:e5:0b:fc:cd:a9:2c:2a:a2:f6:04:
         f5:40:37:ae:c2:a2:c1:bb:d2:87:ee:d0:d8:ac:75:be:e2:54:
         ac:a9:8d:b4:3f:98:3b:ca:3f:7e:9e:e2:91:7d:bc:ea:3b:6d:
         f6:4a:96:d0:d9:13:99:ad:70:9d:a0:d4:90:6e:5b:b3:88:a0:
         76:74:38:ae:46:4b:bc:eb:0e:4a:b6:2d:91:ab:e2:cb:de:d8:
         b6:8b:1f:e6:f2:4c:7a:c3:ac:f1:0d:07:c4:84:50:0d:15:ba:
         02:77:2f:89:a1:36:c3:11:f5:88:de:a1:f5:12:0b:28:c2:57:
         c8:ea:a6:ef:96:d3:40:80:54:6d:ed:81:72:d6:83:44:a1:23:
         e5:f8:01:4c:4d:71:89:ec:9a:33:30:ad:63:e2:90:42:5e:60:
         bd:8a:71:ce:48:8f:e4:c2:c1:e4:c5:c3:73:01:c6:3e:21:01:
         8a:d6:a0:df:b0:c8:d0:f0:2e:4d:c9:98:09:b3:85:ca:04:2c:
         d3:76:a2:02:9a:1c:d1:9c:82:52:a6:78:58:c4:67:59:c8:7d:
         2c:88:41:f5:32:a2:ef:e6:79:94:e7:3d:fb:ae:5c:2d:43:9b:
         41:cb:82:b6:c8:15:a2:ae:16:04:4c:d2:ec:b3:fd:ae:7a:a9:
         89:54:c1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:06:38 2026 by rpki-client