Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
File:                     1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft (raw, json)
Hash identifier:          MJBdeQC0Uz9xppuhRZtoMmzVP2w2soESjFWozoA5A8Q=
Subject key identifier:   5F:19:2C:95:4C:95:1F:15:77:57:05:C7:3E:6D:50:06:A2:54:7D:EE
Authority key identifier: D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2
Certificate issuer:       /CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
Manifest number:          0130
Signing time:             Sun 01 Mar 2026 06:33:02 +0000
Manifest this update:     Sun 01 Mar 2026 06:33:01 +0000
Manifest next update:     Sun 08 Mar 2026 06:33:01 +0000
Files and hashes:         1: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl (hash: vyn5wp6EFUAyrB3JBk/dnpVAlYI+zjWqEwJK6o1hZAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB629, serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2
        Validity
            Not Before: Mar  1 06:33:01 2026 GMT
            Not After : Mar  8 06:33:01 2026 GMT
        Subject: CN=69a3dd9e-1e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:e4:19:2e:b6:c2:a7:8e:8f:94:af:44:a0:
                    1e:e7:c5:b6:ba:b2:35:08:56:12:70:ed:93:a4:05:
                    69:07:c5:f0:4f:d8:12:bf:15:4d:ae:fd:56:10:55:
                    24:98:a4:eb:f0:b4:2c:88:87:f2:3d:92:4b:b7:01:
                    38:f2:07:12:27:1d:08:17:35:cc:be:18:84:d8:4e:
                    4e:0e:33:2b:e1:9c:64:d4:e1:b9:ab:9e:5b:b8:db:
                    63:da:9b:ea:04:00:2e:27:67:b7:52:29:ef:92:e2:
                    98:ff:fb:44:a5:3a:bc:7a:71:42:4c:1d:ad:c1:6d:
                    02:8a:f1:9c:6e:27:4c:94:86:49:a6:e7:f2:67:9d:
                    6a:40:a3:5d:d2:2e:e4:7e:2b:ff:0c:a5:1c:67:82:
                    c9:8f:6a:f9:59:b8:e8:8f:54:d2:b2:08:4d:58:f0:
                    d0:ee:fb:24:a2:79:83:cd:25:81:f3:7b:58:21:56:
                    3b:36:3f:eb:2b:06:07:80:5d:c2:50:6d:05:53:9b:
                    ea:36:7b:eb:eb:83:f4:04:1e:59:16:32:da:ae:8a:
                    8c:53:d5:b5:2a:fa:d3:46:37:dd:3d:0e:f3:88:12:
                    35:50:d3:e7:79:c9:28:cf:4e:a3:d4:cc:db:c1:3d:
                    60:92:52:c8:36:3b:42:93:3b:3b:f0:60:e2:28:5a:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:19:2C:95:4C:95:1F:15:77:57:05:C7:3E:6D:50:06:A2:54:7D:EE
            X509v3 Authority Key Identifier:
                keyid:D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:51:49:9f:61:ce:dc:e4:fc:db:21:f1:8e:c3:c9:dc:a6:19:
         8e:fb:42:df:a6:2b:d1:34:87:3f:ca:0a:2c:a6:1b:e5:54:cc:
         a4:a3:c3:5e:f0:6e:f4:a3:bb:55:60:a2:71:31:3c:9d:66:f7:
         c1:6a:c5:97:bf:5d:29:9c:b7:73:4d:57:b1:4d:ae:66:76:82:
         8d:d5:c6:41:ed:34:3e:a5:a3:ea:a0:18:0e:aa:1d:88:48:a3:
         bd:10:39:b1:b5:7a:03:a8:91:9b:fa:dd:7e:1a:0c:52:9c:77:
         2a:d5:23:e0:ad:7b:a4:c6:74:8f:3f:a6:a2:62:3e:84:0f:5c:
         c0:28:42:1b:a7:25:d0:6d:11:da:ee:c4:25:de:05:73:97:11:
         9e:d6:bd:dc:ea:6e:85:0c:b9:8b:fb:68:f5:b3:cd:fa:3d:1c:
         49:ae:b8:d3:aa:c3:c3:fe:d9:ab:56:2c:b2:3c:5a:e0:76:0a:
         73:58:51:3c:bd:ab:62:77:65:63:24:1b:9b:3a:3b:ed:a1:95:
         69:91:fc:16:5d:72:61:fc:00:55:9d:0d:02:23:2a:c0:8b:46:
         96:44:87:ff:ac:38:62:89:9a:9f:2c:20:c7:5a:02:91:1e:83:
         77:74:ba:2f:2f:4e:3b:e1:f4:d2:2e:b0:7b:a0:04:98:40:ba:
         7b:a3:44:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:45 2026 by rpki-client