Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
File:                     mYWbHvAhS7n86OW_FSbzvRHsKAc.mft (raw, json)
Hash identifier:          OKslLciy1fRGxxhOTujMqpSixarStLleK01mfd0vNzQ=
Subject key identifier:   4F:AC:72:18:AF:79:A4:18:E6:B5:AF:4E:20:CF:B6:22:AC:8A:94:A9
Authority key identifier: 99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07
Certificate issuer:       /CN=A91BF026/serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807
Certificate serial:       17CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
Manifest number:          20B2
Signing time:             Mon 02 Mar 2026 01:24:55 +0000
Manifest this update:     Mon 02 Mar 2026 01:24:54 +0000
Manifest next update:     Mon 09 Mar 2026 01:24:54 +0000
Files and hashes:         1: mYWbHvAhS7n86OW_FSbzvRHsKAc.crl (hash: 1iatTbntVG4pKEKWgcdKEK8oLqcRI/tE+JmEm20c6IM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl
                          rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:24:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6090 (0x17ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF026, serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807
        Validity
            Not Before: Mar  2 01:24:54 2026 GMT
            Not After : Mar  9 01:24:54 2026 GMT
        Subject: CN=69a4e6e7-c1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:4b:72:65:d3:89:a6:4e:e2:bd:33:a9:0d:
                    49:3a:aa:2a:93:4b:f5:6b:38:86:3d:f5:7d:5b:27:
                    d0:37:6e:65:33:5b:1e:19:4a:45:d0:fa:bb:0f:7e:
                    6b:9e:35:de:44:d2:46:f6:57:94:69:d3:64:98:24:
                    a7:b6:aa:7f:de:84:1a:7d:3e:99:ae:1b:c8:16:e3:
                    3c:79:c6:54:de:47:1b:6b:2a:44:45:d0:8f:ca:57:
                    02:69:1b:ef:7f:19:16:a7:1c:c8:b5:bd:e1:54:62:
                    5d:a7:38:04:2a:ab:01:e8:67:1c:0c:75:fd:26:9e:
                    44:2a:73:b1:0d:93:ba:63:0f:27:7d:99:25:ee:99:
                    5c:39:9e:2c:1d:5f:04:4e:dc:16:f4:8a:b0:54:5a:
                    95:4f:a1:d7:5d:a3:ad:aa:62:33:92:3f:4b:b2:86:
                    b2:6f:e6:27:d8:28:71:b6:b3:49:50:6f:77:2f:2b:
                    f3:ec:7d:bf:f6:03:f0:fb:a8:ad:7e:ec:ee:7d:91:
                    8c:73:d0:fd:64:03:1a:ad:9e:5f:46:bf:ec:af:2f:
                    1d:01:a3:8a:bd:2b:93:cb:01:8c:87:da:55:bb:13:
                    1a:2a:43:dc:8b:a1:07:d4:b6:1c:73:37:c8:ce:99:
                    a9:83:53:02:c3:07:a9:1c:0a:00:c7:4d:36:c6:4b:
                    27:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AC:72:18:AF:79:A4:18:E6:B5:AF:4E:20:CF:B6:22:AC:8A:94:A9
            X509v3 Authority Key Identifier:
                keyid:99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ee:cf:1a:05:8a:0b:ef:4e:8f:cd:63:69:e6:8d:78:c3:2e:
         ee:c1:ec:7a:37:c7:a9:55:e5:58:37:e8:2d:1e:19:ae:1f:cf:
         01:72:bc:df:9d:05:7b:2c:54:2b:1f:97:78:7e:62:12:86:15:
         39:fe:13:65:9f:0b:96:f0:69:44:95:60:54:20:1c:38:67:0e:
         90:2b:38:a6:d1:12:5a:6f:ac:0d:cc:1e:f7:65:c6:5e:af:7e:
         d7:a1:50:82:6a:b8:79:8f:af:ce:10:c3:52:ae:8f:56:82:ae:
         ab:0c:66:2a:dc:96:a9:2d:9e:95:4d:81:e4:62:a4:78:46:87:
         b4:94:d1:af:6e:de:b0:a3:1c:43:6b:39:af:90:49:3c:f5:91:
         45:cf:eb:2a:b9:39:59:13:aa:aa:83:d4:90:60:f3:11:c8:f9:
         24:1b:97:52:6e:fb:8f:0e:20:da:0d:26:79:5c:6d:a9:22:0d:
         85:29:6f:2d:e4:ea:67:75:b6:a3:e6:67:bc:6f:8d:a7:eb:40:
         cf:53:3b:73:0d:cb:05:da:ee:58:47:87:40:fa:55:ff:cd:f3:
         fa:2d:64:65:f6:e5:3f:ff:df:d4:4e:be:b8:0f:b1:e6:c7:d2:
         e7:09:c4:ef:28:d7:69:83:63:c8:08:4c:db:44:2b:04:7f:cf:
         a1:d5:5c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:42 2026 by rpki-client