Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
File:                     _i41K0L3TxDVdoNTA6LpeOHEN7Y.mft (raw, json)
Hash identifier:          GLU154G9gyi7unr5j52+SnNKVWR94TmcutjkeCJQ16Y=
Subject key identifier:   72:C7:2E:B4:D0:A7:4F:7E:0D:8C:F7:EA:9D:A3:CC:D5:A1:17:D1:42
Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6
Certificate issuer:       /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
Certificate serial:       027A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
Manifest number:          0276
Signing time:             Sun 01 Mar 2026 02:31:03 +0000
Manifest this update:     Sun 01 Mar 2026 02:31:02 +0000
Manifest next update:     Sun 08 Mar 2026 02:31:02 +0000
Files and hashes:         1: _i41K0L3TxDVdoNTA6LpeOHEN7Y.crl (hash: IncUGlZMoNNtzDWIHR2L8Cun9BiAPre/FejG6lLE/ew=)
                          2: FA13BAAC504611ED9AE40711C4F9AE02.roa (hash: ih5APdD+Nurby0NtdsRTrQ51xACa7dPtth9SlQyC+ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5CC0, serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6
        Validity
            Not Before: Mar  1 02:31:02 2026 GMT
            Not After : Mar  8 02:31:02 2026 GMT
        Subject: CN=69a3a4e7-17ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:aa:02:8d:12:b7:26:a1:2a:2c:3a:91:2f:
                    e1:18:67:28:b8:19:75:03:51:c1:9f:72:85:6e:a6:
                    52:7e:b8:d6:7d:f8:e1:ff:02:de:09:e0:75:c8:e1:
                    be:b5:53:5a:54:75:e9:0f:9d:33:4c:1d:bf:57:69:
                    ad:62:b6:f7:67:7e:c2:e5:de:52:73:bb:74:15:3e:
                    c8:73:ff:e3:16:4b:37:fc:eb:9e:08:48:fb:a2:bd:
                    7c:de:e7:ea:8e:41:54:30:5a:41:a5:44:5b:7f:15:
                    12:2e:59:70:50:2a:ec:24:25:80:5c:63:ff:b4:69:
                    cc:8c:c9:3b:29:f3:92:a4:10:29:59:9d:b9:6c:3d:
                    12:82:70:60:09:13:91:a7:f0:4e:1c:00:f5:22:ed:
                    a1:2e:3f:ce:9e:b1:4e:63:f4:59:c3:80:dd:6c:32:
                    a4:33:0a:60:5e:37:a1:70:8e:53:d5:7f:d8:c3:e5:
                    d3:6a:65:41:bc:f2:72:8c:ef:ed:37:d5:54:39:60:
                    fb:fc:18:8b:56:6b:6d:40:db:b3:0b:66:74:b7:04:
                    94:5b:5f:c8:d3:79:97:3e:de:4d:06:f1:9d:9f:a7:
                    b3:8a:e7:c2:e7:6c:1e:1e:ee:26:8f:18:43:1d:55:
                    f5:79:69:f7:03:8c:bf:df:e6:9c:2d:d5:01:f4:85:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C7:2E:B4:D0:A7:4F:7E:0D:8C:F7:EA:9D:A3:CC:D5:A1:17:D1:42
            X509v3 Authority Key Identifier:
                keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:a9:c0:0b:a3:26:40:ad:a7:43:73:38:0f:fc:82:4d:fa:f7:
         99:fb:cf:16:d5:95:09:eb:f6:fb:f2:5e:ac:75:e1:ce:75:d1:
         b9:d3:71:45:9b:e6:e9:61:f3:57:11:ef:dc:7b:6a:f2:61:de:
         f9:19:e4:95:61:04:48:3b:e0:fe:01:98:c3:4b:9b:3a:83:2b:
         9e:c0:c0:6a:a8:0e:54:8f:ed:42:7b:99:67:4d:6e:bf:a5:c2:
         11:0f:16:7c:5d:f0:98:85:70:8e:f6:87:93:76:b6:1d:c9:33:
         9e:99:f9:98:30:31:2d:4b:d8:f8:98:7c:50:4a:00:7d:73:92:
         f3:e1:7e:95:a8:f9:1e:7c:bf:06:04:4a:a8:6a:1f:59:88:9f:
         f6:4a:c0:14:c3:e5:56:db:10:70:a9:25:95:77:e8:98:19:d3:
         cd:a4:43:d4:14:04:ee:44:92:5e:c3:8a:6a:6e:34:69:e5:eb:
         3e:b7:5f:68:e1:3f:c2:29:ce:d8:82:65:eb:a5:f4:48:84:89:
         ae:0f:72:21:03:a0:5d:58:67:70:d9:ae:92:ec:13:32:38:e8:
         f0:7d:3d:f8:bb:94:cd:74:7e:b2:bc:e5:86:b0:72:d7:5a:ed:
         d8:a1:99:ab:8f:65:d8:2d:7f:90:b5:0f:ef:5c:a1:37:31:95:
         6e:a3:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:12 2026 by rpki-client