Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft
File:                     DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json)
Hash identifier:          qQZmTQc087roefAha0lW776EpKqoLXix+Ih0AhvoMo0=
Subject key identifier:   46:35:5C:BF:22:78:56:0E:70:7F:C1:D7:2B:13:64:8E:C7:A8:A4:16
Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57
Certificate issuer:       /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57
Certificate serial:       0A2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft
Manifest number:          1399
Signing time:             Sat 28 Feb 2026 20:00:39 +0000
Manifest this update:     Sat 28 Feb 2026 20:00:39 +0000
Manifest next update:     Sat 07 Mar 2026 20:00:39 +0000
Files and hashes:         1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: e1LNvkM+W8p25O+psd/JZyNc/J94tmmAUqS37xwAC20=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl
                          rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2604 (0xa2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57
        Validity
            Not Before: Feb 28 20:00:39 2026 GMT
            Not After : Mar  7 20:00:39 2026 GMT
        Subject: CN=69a34967-60db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:ee:1d:d9:cf:fb:4b:40:71:7c:34:4e:47:
                    a1:d5:1b:f8:d0:f5:64:5a:5b:a3:0c:c5:bb:b5:71:
                    91:31:1d:d0:79:f6:8b:1c:de:23:3c:5b:5f:74:a0:
                    c0:13:55:8d:f7:a4:94:46:17:4c:a7:8c:c9:57:ff:
                    37:36:32:c3:59:3e:ee:d5:bc:91:7b:b5:be:c4:b9:
                    47:a2:60:97:3d:6d:f4:2f:6e:78:17:33:14:6b:1f:
                    ad:86:89:cc:ac:dd:39:76:0f:67:4a:3e:dd:09:1f:
                    83:15:c7:f5:2f:53:3a:d5:06:af:da:99:56:9c:3d:
                    fc:e0:e6:72:c0:c3:92:09:35:13:1e:6d:bc:d5:fd:
                    f6:2e:f2:77:4e:7f:1b:c3:66:f6:a7:b0:55:94:3c:
                    ea:ac:34:a6:3f:87:47:00:93:fd:17:8f:7a:94:29:
                    35:b5:cd:b2:48:7b:77:e3:53:f5:8d:d0:e1:4e:70:
                    9a:2c:72:95:ef:c5:d1:84:ce:37:d2:44:9d:a6:f5:
                    61:55:c5:6b:4d:93:14:1c:82:c8:ab:f7:00:8f:9f:
                    35:58:cb:53:56:58:63:af:b0:26:a5:b9:2b:b7:b4:
                    06:27:92:6f:2c:3a:4c:b3:b5:d8:9b:aa:f6:f2:6a:
                    1d:13:8a:8c:d7:0d:91:64:01:03:91:09:f9:d9:7b:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:35:5C:BF:22:78:56:0E:70:7F:C1:D7:2B:13:64:8E:C7:A8:A4:16
            X509v3 Authority Key Identifier:
                keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1d:70:87:ec:ed:4b:43:50:33:fb:51:3e:12:fc:72:b3:a7:
         8c:51:50:f0:b8:fa:fc:04:96:2a:00:9b:aa:2e:cc:a1:c0:dc:
         49:79:4a:15:59:20:8e:11:49:99:d7:18:3b:96:b5:6b:08:52:
         e7:0c:25:7f:c2:87:d1:a4:ab:ba:fd:6b:63:80:e0:78:01:db:
         a7:3c:f5:39:25:af:65:08:3c:18:63:87:bd:54:6e:02:fd:d4:
         24:d6:bd:af:fc:6b:91:3c:5d:5a:33:57:f1:b2:4f:5d:03:dc:
         58:21:1d:4d:45:8f:80:97:5d:e1:b8:19:84:3d:e4:54:cd:70:
         d3:77:f5:9d:25:d2:fa:43:5f:00:7f:16:27:b5:9b:2a:a0:40:
         ea:27:23:13:2d:94:6e:ee:4d:1f:d4:46:38:ea:b5:0a:7b:97:
         71:5c:50:aa:31:5f:36:0f:cc:5b:bd:ec:d2:0a:5d:30:58:92:
         7d:51:16:d7:e1:49:04:f5:44:22:45:40:4b:3c:92:3d:bc:c0:
         d0:16:4d:07:e5:a3:cb:b8:1c:2c:0b:b1:7c:07:a0:60:3d:25:
         38:02:e9:78:20:db:76:1c:55:ad:0f:53:78:5d:13:99:cf:1e:
         6e:b8:24:1e:c5:0b:24:4f:2c:0d:ba:87:99:da:d3:02:1d:b4:
         bd:e7:8c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:29 2026 by rpki-client