Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
File:                     xEWgBPxE11F5WpGduE8UoWBFOJE.mft (raw, json)
Hash identifier:          ziGEJ7NN4JzSHP8nvcBHTaNcImlsyoNlUzXegXKdxWM=
Subject key identifier:   62:13:EA:7A:1B:0B:22:E6:1D:5E:F9:30:5C:A3:AA:95:2F:7D:E9:05
Authority key identifier: C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91
Certificate issuer:       /CN=A91A7F3D/serialNumber=C445A004FC44D751795A919DB84F14A160453891
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
Manifest number:          37
Signing time:             Sun 01 Mar 2026 09:59:47 +0000
Manifest this update:     Sun 01 Mar 2026 09:59:47 +0000
Manifest next update:     Sun 08 Mar 2026 09:59:47 +0000
Files and hashes:         1: xEWgBPxE11F5WpGduE8UoWBFOJE.crl (hash: f/WfIeV2wJnEMijmpoCOXFoO4fZMGp6ZfzjVINqPTqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F3D, serialNumber=C445A004FC44D751795A919DB84F14A160453891
        Validity
            Not Before: Mar  1 09:59:47 2026 GMT
            Not After : Mar  8 09:59:47 2026 GMT
        Subject: CN=69a40e13-7618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:46:3a:72:07:f5:4f:73:cc:b3:9e:4c:bb:f9:
                    73:d3:93:ec:f5:a4:4d:86:d4:2b:d4:2c:47:f0:bc:
                    e7:c0:95:89:b7:6f:fe:b1:22:cb:0f:4e:81:86:f6:
                    5e:aa:49:13:15:88:9e:c6:df:d3:28:f1:de:f6:15:
                    45:66:7a:95:ac:da:20:05:ea:36:39:83:23:70:fb:
                    46:ec:d7:04:55:9e:2c:1e:47:4c:ba:0b:1e:ea:9a:
                    6c:2d:d2:c0:5b:5d:d8:2c:f6:e7:f9:5d:ea:7f:17:
                    5b:d1:76:43:e8:88:74:ec:80:33:62:b7:81:77:24:
                    01:f4:6a:43:05:d1:a0:cb:6e:63:97:4b:f4:c0:7f:
                    00:6b:c5:ba:81:15:81:e5:4a:6f:ef:d7:08:41:c2:
                    7a:27:c3:53:4e:5f:79:ed:2f:76:ef:de:8f:47:1a:
                    3e:00:bb:7c:d2:e5:65:1c:7b:50:a7:c0:c3:ce:99:
                    34:9f:96:70:18:a7:d7:e2:bd:bd:05:c3:ff:35:6f:
                    f2:bb:c6:ad:d6:e4:99:03:9d:43:cd:b6:34:65:57:
                    43:00:89:f2:d4:5e:5e:cf:9e:c6:1c:04:d9:64:70:
                    62:9d:6c:6f:7c:77:22:b4:b9:e7:f6:5f:a6:36:fa:
                    5c:5e:f4:b6:30:5a:16:50:43:f4:46:8c:ab:24:c1:
                    5c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:13:EA:7A:1B:0B:22:E6:1D:5E:F9:30:5C:A3:AA:95:2F:7D:E9:05
            X509v3 Authority Key Identifier:
                keyid:C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:07:a7:27:aa:07:68:fa:9b:f6:af:8f:d9:de:c6:61:14:9a:
         57:2b:b5:84:f6:93:63:11:62:5d:3c:f6:09:53:b2:27:22:f5:
         7a:51:78:a9:0f:91:2c:7c:14:a4:63:4d:44:2b:13:3d:93:2a:
         cd:de:b0:f5:ad:dc:9f:c6:c6:3b:a3:3a:3f:70:07:39:a2:1b:
         0f:34:03:24:4d:d4:e4:f3:22:84:61:05:28:06:4e:22:f2:c3:
         cf:23:a4:91:1a:23:e4:08:be:14:25:a6:fe:4f:b6:1f:59:8f:
         73:ee:1d:65:79:b5:7b:7e:31:14:8d:ce:e1:52:71:73:6e:99:
         73:b7:ec:23:9f:6f:e5:60:7a:2c:5e:bb:c5:f6:d5:1d:a4:07:
         ce:0e:42:02:b7:82:4d:cd:1a:3b:31:d4:9e:38:7d:dd:7d:d8:
         e6:11:c8:bc:63:e0:83:7c:ed:80:8c:aa:b1:bd:47:5b:bd:3f:
         65:be:4d:1c:fe:61:e8:02:00:fe:8a:ab:0d:29:9c:b2:25:fc:
         61:af:3c:c6:3f:df:e7:34:e8:fb:02:38:85:3c:f1:7f:06:fa:
         51:68:0e:9f:f0:1d:ce:1a:b3:a8:f4:4b:53:82:a9:14:b4:51:
         75:36:98:14:57:fd:cb:1a:ac:a2:b7:87:99:f4:7f:bd:6d:58:
         77:78:27:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:52 2026 by rpki-client