Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
File:                     kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json)
Hash identifier:          NAOpRlZAVCZw3WGKtshBUwW2Vx4/BjOQs531UmJEin8=
Subject key identifier:   18:E8:85:EF:AD:82:52:DB:7E:AC:EC:2C:1B:EF:AE:4F:82:2B:37:C2
Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
Certificate issuer:       /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Certificate serial:       10E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
Manifest number:          10E1
Signing time:             Sat 28 Feb 2026 17:23:32 +0000
Manifest this update:     Sat 28 Feb 2026 17:23:32 +0000
Manifest next update:     Sat 07 Mar 2026 17:23:32 +0000
Files and hashes:         1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: 8oTZPT69yiATeTlyp1JG5YBC8zAPB1mHdWq/3eLEs+A=)
                          2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: XAfo1PZPIVH3Y+cfsdpgLhiwJGHrd3PGIzfnpG6VlMU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
                          rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4329 (0x10e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
        Validity
            Not Before: Feb 28 17:23:32 2026 GMT
            Not After : Mar  7 17:23:32 2026 GMT
        Subject: CN=69a32494-0916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:00:93:12:1c:e4:8a:b0:b8:15:21:7b:cc:14:
                    00:ba:15:08:79:1a:b3:fc:a5:30:e1:a7:36:0a:19:
                    60:29:16:4b:7c:27:f3:68:26:c7:f4:8a:80:4d:39:
                    64:09:fb:8d:58:9d:f1:47:3a:3e:06:28:20:3e:ac:
                    26:13:77:be:70:92:43:62:29:c1:03:d5:c6:0b:41:
                    ba:a8:ab:a3:20:14:62:2e:55:00:d6:8c:e5:04:c9:
                    96:f9:a1:d2:59:86:ab:1f:67:67:bf:e6:95:d6:44:
                    36:3b:cc:b9:36:ee:1d:81:c5:f4:63:a8:12:84:36:
                    7d:e5:f1:4b:e8:df:03:2c:64:cc:d7:dd:46:fd:52:
                    04:8a:6c:f5:09:6b:3e:bb:71:b6:5e:3a:80:d0:cf:
                    16:4f:57:93:24:20:81:67:21:5c:b9:a2:59:22:af:
                    46:05:ac:37:b2:df:fa:1e:bd:a0:4e:91:ce:0f:51:
                    6e:4e:e5:2d:e6:9c:4f:36:2b:f4:be:19:34:54:e0:
                    4c:b9:f2:a7:4d:db:e8:2c:fd:2f:59:61:54:15:36:
                    88:4f:ce:6f:9a:95:51:91:4f:cd:29:6b:00:3a:2f:
                    a7:6c:62:50:22:7b:91:77:06:f8:82:26:6b:92:c8:
                    15:35:af:96:1c:d5:29:31:64:c8:ef:18:ea:7f:64:
                    a8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E8:85:EF:AD:82:52:DB:7E:AC:EC:2C:1B:EF:AE:4F:82:2B:37:C2
            X509v3 Authority Key Identifier:
                keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5d:b5:7c:fc:01:c2:d3:bc:d5:99:f1:72:d6:89:d6:4e:d4:
         0e:fc:cd:0d:5c:15:80:e0:81:b3:f9:79:2f:ed:f3:e5:c7:72:
         22:b2:b1:f0:a4:4d:4a:cd:98:fa:62:33:bf:f9:d0:3c:dc:f0:
         7a:20:81:74:18:b9:08:98:60:80:e6:e2:db:65:0e:12:da:11:
         d4:06:09:85:ff:3d:23:8b:97:57:b7:bd:61:26:9c:3b:23:88:
         56:80:39:3f:a3:d3:d4:cb:79:99:5a:75:05:13:0f:9e:67:60:
         da:9c:81:78:f6:d3:70:9b:e6:08:2c:f2:3d:c7:05:9a:46:39:
         40:f9:c4:04:9a:8e:3e:f7:e3:12:20:b6:c5:8d:44:74:60:21:
         29:e1:63:d4:d6:b0:be:fa:98:ff:d2:e0:29:1b:af:2d:fa:c3:
         e5:ae:26:e1:ad:b8:d8:11:e6:09:ca:b8:fc:18:4e:5d:ee:55:
         e3:12:6b:81:1f:8f:2e:e4:75:ca:88:29:4b:79:e9:eb:f9:6a:
         05:5c:7c:c4:b3:cc:24:b2:30:ac:2c:b5:98:bc:08:4c:15:46:
         48:3f:7c:57:b5:b9:04:cc:bc:43:ed:ed:50:4b:85:d0:1b:99:
         1d:b1:e9:0e:29:ee:9f:8b:68:af:bc:10:22:85:25:0e:bd:20:
         52:7c:79:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:50 2026 by rpki-client