Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
File:                     REhMnzpz9xlXK4vIoaH9nln6hPY.mft (raw, json)
Hash identifier:          +i4ALueFsjTHuLEWo3rmcfrbrBPELnkqsfHEHga83go=
Subject key identifier:   71:9F:72:59:02:0D:A2:31:7E:F0:28:CF:E6:32:0E:CD:AF:B6:09:37
Authority key identifier: 44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6
Certificate issuer:       /CN=A91BD73B/serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6
Certificate serial:       3513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
Manifest number:          3513
Signing time:             Sat 28 Feb 2026 15:17:23 +0000
Manifest this update:     Sat 28 Feb 2026 15:17:22 +0000
Manifest next update:     Sat 07 Mar 2026 15:17:22 +0000
Files and hashes:         1: REhMnzpz9xlXK4vIoaH9nln6hPY.crl (hash: CUETF4SC/X+8J9WldgP/HYteugUDqTzMJE54A9LDnSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.crl
                          rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13587 (0x3513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD73B, serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6
        Validity
            Not Before: Feb 28 15:17:22 2026 GMT
            Not After : Mar  7 15:17:22 2026 GMT
        Subject: CN=69a30703-eb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:ad:ea:22:a9:1b:fc:f1:0f:0b:77:d4:6a:
                    03:96:a6:48:98:72:30:97:a0:83:5b:5d:65:63:f6:
                    cf:f2:a4:96:ee:13:21:6e:6d:0b:cd:88:b2:1b:fa:
                    87:af:30:b1:8a:88:28:7a:03:44:11:89:bf:73:6f:
                    59:0f:da:ed:cb:ef:16:d4:ca:e4:17:14:0b:45:14:
                    07:c8:a6:4e:27:a2:0a:27:0a:d6:fa:1a:3a:1b:07:
                    69:64:23:21:ec:5d:2c:54:7e:1b:9d:19:27:03:f3:
                    98:74:b0:8e:33:75:2e:53:1f:95:5e:db:d5:32:62:
                    8c:25:9d:fd:af:3b:0a:25:0b:a1:4d:bd:88:db:53:
                    87:a3:7f:b7:3d:f9:b1:4d:b9:3f:43:41:b4:2b:40:
                    12:1e:0e:4f:e6:09:36:0a:ca:77:5a:28:ca:f3:5b:
                    45:11:72:07:ff:37:0a:ed:c9:f2:9a:28:fb:f7:84:
                    6d:c2:ba:13:d5:c4:8f:ce:43:bb:a4:58:dc:89:7a:
                    5c:8e:25:38:98:bd:b1:8d:51:78:37:a2:dc:f4:56:
                    48:19:40:3d:c7:3b:63:31:ca:34:5a:54:2b:03:a0:
                    4f:26:34:f3:d4:9d:27:c8:77:28:72:d1:83:98:97:
                    8a:07:68:61:3e:fc:2a:e9:a3:f0:0b:80:ae:15:33:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9F:72:59:02:0D:A2:31:7E:F0:28:CF:E6:32:0E:CD:AF:B6:09:37
            X509v3 Authority Key Identifier:
                keyid:44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c0:35:4b:70:d5:4c:1d:7e:26:df:6b:8f:59:24:bb:3e:27:
         92:88:23:10:ed:29:90:78:5f:12:df:19:79:58:f5:c2:84:e1:
         21:af:ce:69:71:8e:8f:25:fd:8b:35:7f:a5:54:a0:39:f7:54:
         0f:63:5c:df:0f:6b:c4:55:c4:53:2d:e7:01:c3:a1:08:a9:a8:
         3c:7f:8b:6a:02:81:7d:b7:91:a9:24:a1:c6:36:3e:f2:8e:6f:
         3d:c4:b0:48:cf:f5:1f:5f:b4:73:d4:a9:c8:53:bd:6d:2e:22:
         d0:b7:34:84:74:4f:d9:c3:17:86:c5:3c:40:b1:66:e1:48:8e:
         88:bd:0a:30:86:9d:c9:ca:5e:75:76:90:2e:96:c7:31:a1:57:
         e3:3e:9c:18:a2:31:80:a6:e3:39:13:01:70:17:5b:92:80:56:
         18:e7:1e:75:a6:f8:8c:7b:26:c9:76:50:d7:f4:09:c8:e2:cc:
         e3:6b:11:ca:26:ed:38:2b:5e:69:d4:be:a8:d7:e7:c0:e0:0b:
         9e:69:fe:8f:57:35:8a:c3:d5:fe:5c:a7:bf:62:a9:83:47:d2:
         e5:cd:55:4c:85:b9:15:fd:f5:b7:3b:38:fa:41:e3:ff:1e:ba:
         44:40:29:8c:ff:02:df:c7:a5:23:3c:23:63:be:b0:9a:bc:85:
         ae:7b:e3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:39 2026 by rpki-client