Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
File:                     erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json)
Hash identifier:          817Vp21hpwAIPzAREGfasvLMe3epj8CM6k0Wz+tk6BE=
Subject key identifier:   18:97:91:1E:31:DB:25:C3:76:F7:48:96:85:20:78:25:59:A7:47:28
Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9
Certificate issuer:       /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9
Certificate serial:       0CEF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
Manifest number:          0CDF
Signing time:             Sat 28 Feb 2026 18:21:52 +0000
Manifest this update:     Sat 28 Feb 2026 18:21:51 +0000
Manifest next update:     Sat 07 Mar 2026 18:21:51 +0000
Files and hashes:         1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: 96CzD8XmrR6iGpOQZvSheZdUxGotKeBp7Yzbw234KKY=)
                          2: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: vTFXyGHYGe6s3SqvcZNP+dIhUxLeP7oO2VI4PVLGlrE=)
                          3: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: Wk7XsElJ9QejMrm05qJ4YVcTMAAYD+d8lLLUdBQZCXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl
                          rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:21:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3311 (0xcef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9
        Validity
            Not Before: Feb 28 18:21:51 2026 GMT
            Not After : Mar  7 18:21:51 2026 GMT
        Subject: CN=69a33240-9400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d7:1b:92:14:d2:6e:e7:b8:d2:5e:2c:89:ba:
                    04:f2:2f:d1:4e:0d:ec:d5:aa:be:1d:e5:0f:f0:01:
                    a3:d9:6b:ac:9c:ad:2f:6a:e1:76:25:4d:f7:22:36:
                    3c:f0:27:df:0c:d9:75:27:8a:86:c4:f5:bb:87:ff:
                    98:76:cf:76:6e:c2:42:3c:fb:ae:f2:b9:32:ff:07:
                    3c:ed:96:e1:3e:19:86:3b:ef:a5:21:3a:93:16:61:
                    07:81:86:f6:a7:94:40:ae:f6:6b:0c:a0:cd:9f:ea:
                    b4:8c:8d:df:c4:c8:de:85:13:1b:95:33:2e:9a:20:
                    42:be:e1:27:d3:a7:6d:75:2e:da:28:f7:42:cc:60:
                    7c:9e:39:03:0b:c4:f8:c7:b0:27:45:76:0b:f2:4e:
                    6a:85:eb:c1:8d:b5:98:76:32:34:de:72:a1:51:bc:
                    ef:8a:0f:84:4a:10:d0:d0:37:2c:17:26:84:fc:23:
                    64:79:28:30:66:6d:88:3b:19:be:2d:23:e6:0d:9c:
                    2b:92:ca:d7:62:0b:91:99:3c:bf:a9:23:86:22:0d:
                    35:2a:12:d5:fc:81:66:ef:04:60:50:d6:96:41:e8:
                    5c:37:74:f5:67:90:22:40:aa:4b:a6:32:86:33:2c:
                    5d:dc:2c:e4:d0:c2:a4:fe:10:fb:77:ed:32:59:e5:
                    82:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:97:91:1E:31:DB:25:C3:76:F7:48:96:85:20:78:25:59:A7:47:28
            X509v3 Authority Key Identifier:
                keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:07:78:59:cc:76:93:17:1b:73:20:ad:ec:fa:94:65:74:d2:
         21:51:60:d8:13:69:95:25:68:d7:a4:66:9c:fd:de:03:25:20:
         ea:ba:77:df:a7:8b:c5:f9:55:7b:27:70:fe:70:4a:94:f2:b9:
         ff:b9:77:c3:1e:78:07:09:69:10:a9:32:f5:4b:81:0b:eb:88:
         04:71:44:6c:0f:57:3f:63:12:b0:5e:94:8a:d7:e0:5b:6d:8d:
         c4:81:47:19:41:23:03:c2:96:a4:b6:0e:08:11:40:16:66:d5:
         c6:69:8e:bd:d0:c2:f5:b6:a4:0c:3a:90:e6:05:ed:ed:c4:f0:
         1a:d5:c0:ce:94:b5:da:d6:2a:ea:a4:20:a2:6c:79:6b:21:25:
         0a:c7:25:1e:5c:91:69:47:e2:f9:b1:98:45:ee:75:57:2b:28:
         31:51:f6:5f:2c:f5:95:8d:e0:46:81:4f:05:16:cc:5e:c6:2c:
         22:3f:35:ff:28:9a:e2:a5:38:5c:27:03:f9:bf:bf:cb:af:af:
         f5:ce:6c:16:5a:41:7c:fc:be:51:f4:0f:cb:2f:cd:9c:f9:e2:
         bf:54:2b:83:a9:8d:8d:00:64:8f:46:ba:3b:05:33:98:a8:64:
         2e:08:96:6b:9e:6f:88:e4:aa:ed:8c:1d:80:5e:95:18:2f:a4:
         95:02:29:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:44 2026 by rpki-client