Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
File:                     MRUQtiC24M1CLhwrbpUrYEil8eI.mft (raw, json)
Hash identifier:          NBgd76X2GXpL1oH3/Q9sNgRMcEHIsS6xvDbSzM/pCjw=
Subject key identifier:   A0:D8:77:26:E7:6B:07:A1:05:EC:58:21:E1:97:AF:FC:DD:F0:3E:45
Authority key identifier: 31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2
Certificate issuer:       /CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2
Certificate serial:       0420
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
Manifest number:          041F
Signing time:             Sun 01 Mar 2026 01:10:16 +0000
Manifest this update:     Sun 01 Mar 2026 01:10:15 +0000
Manifest next update:     Sun 08 Mar 2026 01:10:15 +0000
Files and hashes:         1: MRUQtiC24M1CLhwrbpUrYEil8eI.crl (hash: ezpuhEtLsU1H6/DKoyGohYpaEZVpaPh/GgKZabaTSIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl
                          rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF979, serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2
        Validity
            Not Before: Mar  1 01:10:15 2026 GMT
            Not After : Mar  8 01:10:15 2026 GMT
        Subject: CN=69a391f7-f761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:07:30:eb:9f:0f:0f:ce:53:61:e5:21:d9:1e:
                    75:3b:b3:d8:00:4c:0f:50:e5:ce:b1:72:e6:b2:8c:
                    71:43:09:d4:df:ed:0f:46:b4:be:cd:e5:eb:32:65:
                    95:ed:e4:47:84:2a:5d:45:36:cb:5e:71:35:28:85:
                    d7:7d:ca:75:2f:87:cf:e0:c7:20:31:25:3e:e0:4e:
                    f4:d9:81:95:24:81:2d:81:7f:e5:4b:ab:e2:50:37:
                    a0:cc:ea:f8:5a:9a:e0:9e:db:4a:16:e2:6a:20:55:
                    80:2b:89:1d:91:db:28:83:6e:f8:97:8c:95:fe:4d:
                    96:0e:29:8a:7f:ea:38:3d:0d:d2:bb:2c:5e:9b:63:
                    83:cd:ba:bd:5c:99:1f:71:c8:a9:1c:d8:b3:08:79:
                    3c:0c:d5:e1:df:ad:d4:65:9e:ca:ca:fd:a4:c2:ff:
                    fe:9e:08:1c:a4:33:34:ed:04:b6:b5:e3:3d:71:a2:
                    e5:9b:b5:81:0e:2d:98:f6:1a:0c:c5:72:6a:13:a1:
                    1d:81:11:ac:e9:37:7f:12:4a:da:0f:b7:fc:c8:47:
                    06:f8:70:dd:7f:ad:b1:f3:28:fc:b4:54:2a:e2:84:
                    cc:bc:f7:25:84:ce:19:a9:76:54:10:67:39:f4:7e:
                    f9:6f:02:9e:44:d5:66:07:6a:dc:13:16:2e:74:77:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D8:77:26:E7:6B:07:A1:05:EC:58:21:E1:97:AF:FC:DD:F0:3E:45
            X509v3 Authority Key Identifier:
                keyid:31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:bf:fa:e3:1c:e6:9b:43:ec:9d:6b:8c:4b:57:3e:be:f0:58:
         56:d9:07:c1:11:12:46:0d:84:8b:ba:06:b6:b1:a5:12:af:52:
         06:3c:d6:e0:f4:b3:81:62:d0:2f:38:9f:12:66:5e:b4:b9:fd:
         a3:97:e5:26:f5:13:5d:db:a4:78:5e:28:df:bb:9d:6e:48:13:
         06:3a:1e:a2:c0:f5:ee:42:62:64:7c:83:ee:16:f4:09:c6:f1:
         d9:4a:53:ab:52:f9:98:cf:de:0c:62:bf:ea:97:62:6c:0a:9a:
         4f:1e:ad:9f:c1:5e:f8:d5:87:81:65:cf:08:0e:ce:af:5e:8e:
         94:5c:44:66:38:79:0d:bf:f0:96:f5:82:18:62:1d:02:5a:21:
         ec:3e:34:b6:bf:7f:d5:89:5f:9e:a5:21:4d:e1:06:50:ab:db:
         d3:27:e0:b6:d5:12:0c:47:a1:37:3e:73:51:74:25:e3:d8:22:
         0b:ae:e6:17:0e:f7:fc:00:15:51:e1:3f:0e:0c:c2:11:e6:05:
         4e:fc:26:40:71:28:e5:bb:17:63:51:91:09:25:21:7b:de:71:
         1f:f9:90:cb:ac:fe:90:e9:b6:b4:6f:19:91:55:a0:6f:0d:c4:
         99:a1:51:48:81:93:23:fa:2c:10:66:6e:2f:28:1f:e2:f7:11:
         14:f6:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:17 2026 by rpki-client