Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File:                     rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier:          5CCDfbwP+9gahBxUICRgJvCOjHpIMQfb+LTQVFb+wMU=
Subject key identifier:   BE:F0:24:A7:68:97:B7:45:DE:85:23:2D:1C:D4:A8:84:00:44:B8:F2
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer:       /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial:       1C27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number:          1C0E
Signing time:             Sat 28 Feb 2026 16:16:17 +0000
Manifest this update:     Sat 28 Feb 2026 16:16:16 +0000
Manifest next update:     Sat 07 Mar 2026 16:16:16 +0000
Files and hashes:         1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: b84Wclvl24nkntU98EBKiD5N6nu+ams5pavhtabH5m0=)
                          2: C98708BE477711EBB4044E31C4F9AE02.roa (hash: rfB6cKoGstk7sIp1asdLZKTU/mLRnkq24gAeVkCxYNw=)
                          3: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: LlTpQ+lB51NJTsADg9wIZbeo2X5klSC9ytPou8casL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7207 (0x1c27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
        Validity
            Not Before: Feb 28 16:16:16 2026 GMT
            Not After : Mar  7 16:16:16 2026 GMT
        Subject: CN=69a314d1-de51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:21:7c:30:0b:f8:fa:e8:70:79:4c:cd:69:
                    c9:b7:f3:d2:53:b1:b9:46:c9:a5:cb:eb:6d:c2:d0:
                    d0:14:56:88:93:49:e1:bb:cf:33:eb:31:b1:30:c5:
                    64:44:b4:4d:ed:da:db:40:6e:24:bc:b7:f7:c9:c5:
                    8a:48:d6:8e:16:65:b1:d2:2c:cf:9b:25:45:d0:b4:
                    00:3e:a3:1d:27:53:2f:6c:07:ca:5d:ff:ef:38:c8:
                    b1:23:ab:d3:34:6f:a7:9c:66:7c:05:80:00:02:ab:
                    b5:fb:93:a4:19:23:f4:bb:fd:96:6e:1c:ed:fd:eb:
                    4d:ae:56:3d:6e:8d:3a:a0:25:2e:9e:6f:8f:08:cf:
                    fa:f2:da:48:80:2a:ea:96:8a:ea:8d:61:76:9e:12:
                    01:b0:af:37:de:93:fd:40:db:b6:26:23:c8:c1:16:
                    fb:c3:bb:77:c9:e1:39:3c:09:9a:e2:2c:5d:93:69:
                    81:5b:5a:35:fd:d1:99:58:b8:27:02:57:7d:8b:cc:
                    a7:96:85:33:71:e7:12:67:c0:9f:b8:f3:d9:46:ce:
                    be:f3:3c:c8:56:28:88:c2:ac:18:08:ef:75:82:da:
                    80:25:64:be:c7:36:9b:5c:15:10:ff:40:36:6d:8a:
                    40:fc:48:61:7b:f4:4a:c2:55:35:02:b9:20:e1:4d:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F0:24:A7:68:97:B7:45:DE:85:23:2D:1C:D4:A8:84:00:44:B8:F2
            X509v3 Authority Key Identifier:
                keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b4:39:81:da:55:a7:48:69:3f:d3:c7:e6:5d:9b:4f:f3:df:
         8f:44:95:7b:16:2c:48:57:48:2a:7b:1a:2a:4c:98:cf:4f:8b:
         fb:9c:f3:56:ad:47:0f:b4:81:b4:51:01:b4:8f:7e:9c:6a:8a:
         a8:cc:e9:0b:9b:4f:15:27:1f:0a:e4:dd:f6:c0:2f:99:14:b2:
         b8:a1:8e:65:fb:37:8b:6b:86:f0:fd:ea:a9:53:bd:57:d0:47:
         91:cc:aa:b6:87:cf:47:b4:54:b7:a7:6c:6d:09:c4:62:74:98:
         a5:75:c8:ed:81:43:13:e4:3c:8c:e8:85:a4:7e:53:0b:1b:b0:
         4f:95:3c:72:84:e8:04:f2:24:9d:4d:9d:98:e0:f6:9d:db:57:
         16:e9:58:35:72:9f:3b:c3:23:26:66:46:94:a1:bf:5e:6f:1b:
         47:97:91:09:10:9b:43:27:92:e7:9a:ae:7a:5f:d5:ee:14:66:
         89:2a:bf:e7:6f:f0:3b:f6:80:6c:4b:f7:66:df:c1:ae:8e:28:
         fb:ff:4e:b7:3a:34:d8:45:13:34:3b:69:70:5c:58:6e:6b:b2:
         ae:33:73:60:bf:5e:2e:03:ea:d4:fa:c3:fb:3a:2b:96:03:cb:
         a0:89:55:06:1c:fa:01:96:51:56:98:da:d1:e9:e9:fa:bd:21:
         0e:c5:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:22:11 2026 by rpki-client