Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
File:                     U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json)
Hash identifier:          jOL2elNPGGhSrLQMyKbCs142WIsRPD+n8HeedzR0sBc=
Subject key identifier:   59:17:E4:2E:82:28:CF:AC:BE:EF:BC:F1:B8:F2:3D:22:F4:60:08:9B
Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
Certificate issuer:       /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Certificate serial:       05D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
Manifest number:          05C6
Signing time:             Sat 28 Feb 2026 23:36:48 +0000
Manifest this update:     Sat 28 Feb 2026 23:36:48 +0000
Manifest next update:     Sat 07 Mar 2026 23:36:48 +0000
Files and hashes:         1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: BRRIsEhbGutaO8HHssROgEGCX13iEIhUn5zXv7o2b4k=)
                          2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: bYFWsdvkvj/YP0lWqT722iQHX6ldCjoCu3l/f+mKfk8=)
                          3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: CWQZ2s8MFSjBmURLoXYowyPCs3y0c7wnZAfg2tROfa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1488 (0x5d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
        Validity
            Not Before: Feb 28 23:36:48 2026 GMT
            Not After : Mar  7 23:36:48 2026 GMT
        Subject: CN=69a37c10-c31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:60:e5:35:c2:14:1b:d7:70:ee:a2:36:7b:
                    cc:2a:0c:51:6b:0c:04:3f:14:3c:8a:28:2a:25:34:
                    c9:dd:85:9b:ba:f9:aa:0b:1a:bd:ba:50:76:78:f6:
                    d1:67:ed:86:39:f1:c1:57:45:2e:b5:64:a4:1c:4a:
                    b2:a3:56:ce:7d:9b:07:50:dc:ce:91:49:61:5f:51:
                    70:22:5d:27:a1:d7:ea:74:67:ba:1e:11:43:9e:67:
                    9d:5c:f9:c2:07:88:0d:20:53:ba:45:4f:d9:37:72:
                    15:e0:bf:c4:58:9a:14:ff:1f:e1:a6:67:8f:2a:b3:
                    4e:90:82:7d:b1:ae:12:67:d0:84:72:7c:e1:2e:bc:
                    48:c0:09:70:0a:aa:7f:03:c3:41:41:42:b3:1a:fc:
                    d5:86:c2:dd:d9:66:62:46:17:39:0e:dc:98:be:28:
                    b1:ee:c4:5b:de:c7:00:dd:a5:e6:3c:46:42:b7:93:
                    75:e9:0a:fd:19:d1:53:b6:17:8c:01:45:ff:73:ab:
                    e2:e2:db:e4:aa:77:8c:22:c7:21:18:fe:24:fb:17:
                    77:40:8b:a2:0a:38:53:63:a5:bc:69:15:ee:2e:c5:
                    6d:b4:6e:05:96:a1:7b:32:b8:c0:f5:4b:e1:40:0c:
                    21:2b:da:ba:df:70:1e:65:aa:98:08:03:e3:a6:bb:
                    cf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:17:E4:2E:82:28:CF:AC:BE:EF:BC:F1:B8:F2:3D:22:F4:60:08:9B
            X509v3 Authority Key Identifier:
                keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:8f:02:56:26:11:fe:69:81:5a:bf:e2:ce:f1:38:fc:70:d2:
         da:90:83:8d:d3:d0:fb:c2:17:d4:ba:99:3b:a8:a3:1b:89:6d:
         a5:9c:33:82:0f:39:e3:fd:15:85:17:d2:c2:d6:75:cb:f2:ee:
         1f:9f:fc:70:fe:96:85:c6:33:a2:f7:14:d3:94:4d:fd:7f:0c:
         aa:c0:14:11:c8:93:60:2a:f6:f7:92:1f:61:ca:5a:e7:7e:ac:
         14:83:6a:49:af:1c:58:73:81:12:47:c0:e9:1c:27:8f:88:b1:
         a3:c8:29:11:df:fc:65:40:22:7b:b8:fd:d5:e8:b5:59:e7:a9:
         72:57:20:f4:4d:e7:28:9c:fc:c2:e4:e0:60:bb:26:b6:dd:98:
         bb:01:64:f4:28:51:30:04:41:bd:4f:cb:5c:bc:32:70:74:60:
         65:8f:e7:d4:99:cf:e5:fc:68:5f:f9:9b:25:22:7a:a6:72:17:
         60:43:7c:56:df:79:df:cf:68:3d:1e:1a:21:9a:ed:89:4d:35:
         7a:79:bb:fb:65:6a:5b:97:b4:ed:a0:d5:ef:92:f6:5d:17:39:
         88:5b:76:8f:ae:8d:cf:26:d4:d2:da:cd:ad:54:48:40:b0:e6:
         0a:f5:dd:76:e2:2f:b5:ea:db:59:00:93:a2:00:ad:5c:3c:de:
         24:ae:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:46:48 2026 by rpki-client