Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
File:                     neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json)
Hash identifier:          uZN5qoxwVyA++T2GOw6jchpzUe7HbkvZmg7Anq4o+iY=
Subject key identifier:   45:49:AC:A8:3F:53:44:C9:F1:D8:3B:30:41:20:D2:8D:1F:91:E9:EC
Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
Certificate issuer:       /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
Certificate serial:       0727
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
Manifest number:          5441
Signing time:             Mon 02 Mar 2026 15:08:37 +0000
Manifest this update:     Mon 02 Mar 2026 15:08:37 +0000
Manifest next update:     Mon 09 Mar 2026 15:08:37 +0000
Files and hashes:         1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: 12YG9yQf21YOC1Fc0dtnbTu1UKh0QlcF5VX+85FboSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl
                          rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:08:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1831 (0x727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B42CA, serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
        Validity
            Not Before: Mar  2 15:08:37 2026 GMT
            Not After : Mar  9 15:08:37 2026 GMT
        Subject: CN=69a5a7f5-c66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:cc:cc:f9:15:42:25:85:3b:c6:12:b2:76:
                    8f:9e:40:5e:c4:56:46:de:2f:97:11:c5:b1:44:36:
                    d6:68:d3:87:4a:1c:cd:99:d8:98:61:46:38:81:e0:
                    36:f0:55:28:f6:99:40:5f:ec:85:d7:88:69:bb:43:
                    b5:c4:a9:9f:ff:3f:d6:be:a1:2d:70:e0:fb:22:00:
                    cf:f9:a2:b1:af:5c:91:97:ae:79:3f:a3:64:5a:07:
                    e0:25:db:96:27:12:a4:9d:06:1c:b3:0f:78:5c:bc:
                    a1:f6:f4:a9:92:a3:d0:08:12:10:06:45:13:f0:35:
                    3c:56:e7:04:fe:80:fb:f2:95:be:bc:c3:fe:6d:9b:
                    77:7c:af:7e:3d:24:35:be:8d:66:28:65:d3:7f:c4:
                    4f:4f:04:e9:31:8a:b9:74:46:e9:fa:98:75:8e:8e:
                    8a:23:8f:ab:0b:f1:b6:cb:d9:c2:62:7a:13:a2:26:
                    b2:99:04:2b:fa:29:b6:12:b5:a7:9b:6c:8e:b8:c8:
                    72:4f:b7:db:43:11:18:9f:f0:21:e3:c1:e3:7c:be:
                    5d:06:37:22:e8:26:bf:d1:15:23:71:a2:5e:12:ce:
                    35:26:da:40:2b:f3:5c:9f:b5:28:43:0c:78:8f:2e:
                    54:94:b8:39:91:7e:f7:23:65:d7:05:c2:2a:60:53:
                    d4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:49:AC:A8:3F:53:44:C9:F1:D8:3B:30:41:20:D2:8D:1F:91:E9:EC
            X509v3 Authority Key Identifier:
                keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2b:62:87:3a:9e:d7:d7:eb:c3:94:8a:31:c0:ad:ba:18:2f:
         19:94:d5:6e:ad:50:44:b2:1d:79:e4:bf:09:1d:d5:7e:89:83:
         08:ab:23:a3:5a:99:51:e2:5d:9f:d3:6f:61:9f:f1:f8:3e:0c:
         94:fa:d1:d8:89:ad:74:dc:0d:6f:9b:4e:2f:7c:50:16:45:e8:
         06:e5:d3:75:ff:fe:e9:a7:b7:21:5f:af:b7:a1:62:17:2f:06:
         28:a7:0d:1a:51:e2:91:f5:5c:1e:0a:b1:e9:ac:0e:64:1e:60:
         09:67:ec:b4:d4:0a:d2:af:76:a3:39:f0:fe:4f:80:40:be:51:
         52:b9:84:7e:0d:e6:da:5f:8b:26:19:8d:8b:22:48:21:85:bd:
         54:e0:90:e6:12:5c:a9:a7:a6:78:4e:c7:bb:d3:89:b8:12:ea:
         44:8b:98:2d:b0:23:2c:d1:36:39:17:d5:71:fa:94:2f:26:63:
         8e:fe:66:56:02:45:03:1d:8a:d1:15:6b:dc:d7:a0:c0:86:d1:
         7e:60:38:76:8e:c8:6e:0e:81:f6:a6:32:48:93:58:80:cd:9e:
         38:b0:24:7f:74:79:01:ff:f9:ce:90:03:64:81:ff:e6:6b:6f:
         e9:0c:b9:bb:7a:ec:af:ac:f7:65:74:bd:5a:b4:ba:e2:77:7d:
         25:83:14:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:33 2026 by rpki-client