Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
File:                     72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json)
Hash identifier:          iryA/yJR6aQtN8LgwW4moPCZIN9o3gxq66tiCq9vAJo=
Subject key identifier:   05:D7:2C:8E:A8:4E:9A:48:1F:AC:EE:4B:CC:C6:7B:FD:97:25:62:BC
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Certificate issuer:       /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial:       131F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
Manifest number:          12F8
Signing time:             Sat 28 Feb 2026 17:06:21 +0000
Manifest this update:     Sat 28 Feb 2026 17:06:21 +0000
Manifest next update:     Sat 07 Mar 2026 17:06:21 +0000
Files and hashes:         1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: BvuEKPP/A12+PLz+rXh753wwQvppoAQtpHbxZahEFvg=)
                          2: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: nxXSdnwoUfmzLx95eiSN62zk0YbQxEgJtgpJheqOOz4=)
                          3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: gcGbaS+C10OxA3/sWZJEHnaLaEauoh+9kGT7bNc0D6Q=)
                          4: 08DCBB24DC8011F0AB4C816E3A6F56BC.roa (hash: WXCmLL//FoCjMGfjt8pRmkTjKi9B4euZO4lNoEtZDGU=)
                          5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: 3BEJ1gCiaz/4ZdrE3qzkDJ5+ojL/iMHnMesKRyA+c6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4895 (0x131f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
        Validity
            Not Before: Feb 28 17:06:21 2026 GMT
            Not After : Mar  7 17:06:21 2026 GMT
        Subject: CN=69a3208d-7f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:f8:44:ee:43:fb:17:73:3e:74:31:19:45:
                    0d:b4:a7:4b:d6:81:c6:80:36:4e:bc:b7:23:2b:13:
                    e7:9f:8f:35:33:9d:c4:dc:b1:8e:0b:04:52:58:d8:
                    4b:e6:bf:a6:c6:aa:df:15:c0:48:18:70:09:e6:06:
                    88:4e:4a:e1:fc:bc:1d:1b:8d:6c:b0:65:87:fd:5a:
                    10:99:6e:c9:04:06:31:da:2e:d9:f5:cf:34:45:d3:
                    0e:06:06:52:1a:7a:27:29:25:07:61:92:92:c0:18:
                    3e:9a:fa:c6:7f:f4:f3:e0:44:ae:cd:36:e5:44:f6:
                    3f:c4:bd:88:6b:3d:40:50:44:1e:64:a2:35:b6:87:
                    8e:30:95:61:cb:f6:17:13:33:fe:a8:ac:43:62:b9:
                    40:89:ea:da:9e:ba:f1:3d:5d:94:cf:29:91:f1:55:
                    32:e9:84:95:1b:57:6a:df:3f:4a:d7:65:0c:37:ac:
                    8d:ef:0f:d0:43:22:6f:0a:3d:75:76:83:05:36:d7:
                    71:f1:7e:fd:84:81:84:76:cc:99:21:50:2d:e7:5f:
                    0e:82:f2:ae:5d:d3:68:99:a0:ab:d9:79:c4:9a:76:
                    0e:9f:f8:25:a9:5f:2d:ce:42:21:fd:2e:b0:a8:31:
                    36:a7:e3:84:8c:00:20:71:e2:d4:42:24:f7:93:87:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D7:2C:8E:A8:4E:9A:48:1F:AC:EE:4B:CC:C6:7B:FD:97:25:62:BC
            X509v3 Authority Key Identifier:
                keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:6b:f7:f6:f7:94:3c:55:9b:f4:4d:00:cf:06:ae:54:98:f5:
         1e:cb:41:de:3c:37:91:a6:6f:37:6e:6b:13:31:73:f1:76:1e:
         35:4c:ee:1f:22:55:1f:c3:6c:18:57:92:5b:f6:c2:e0:da:76:
         0e:4a:56:b3:df:62:b3:62:c0:c7:c3:bf:f3:a5:09:c3:91:60:
         65:41:0e:5d:ba:2b:a3:6d:e3:b2:df:78:eb:10:c7:a3:2a:7e:
         c9:5d:50:4b:6e:2d:fc:c0:8b:87:12:25:03:40:af:14:62:10:
         86:93:88:cf:58:5f:bd:c8:ac:60:65:85:4c:6b:79:cd:79:28:
         81:1e:76:37:f4:53:27:65:19:46:3a:96:c9:a8:d2:dc:8d:23:
         9d:ea:1c:bf:51:2d:33:e6:5d:c8:fb:e4:be:d1:5a:72:78:f6:
         2d:20:e2:58:26:d0:0e:d1:d8:93:63:2d:a7:23:0d:05:0a:b0:
         23:5f:18:d6:d5:81:5e:b4:ba:a8:f1:a1:fd:e0:15:cf:70:88:
         c3:3e:4d:78:d8:8a:31:92:65:72:24:5c:6c:2d:18:44:09:39:
         f5:46:75:80:22:f8:be:d7:d1:cf:75:e6:fa:f6:e4:3c:cc:2c:
         8b:aa:f4:a8:e2:ca:b9:a2:52:3d:a8:17:2a:03:27:e0:9c:80:
         20:44:54:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:51 2026 by rpki-client