Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
File:                     iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json)
Hash identifier:          risKz45dxfTpFZHFmJYh7VWW6MuIdTTC5CX11G342LA=
Subject key identifier:   C8:66:CF:22:BE:AD:C4:11:3D:A1:88:8A:F4:5F:BA:86:BE:2B:0B:CF
Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF
Certificate issuer:       /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
Manifest number:          011B
Signing time:             Sun 01 Mar 2026 06:51:30 +0000
Manifest this update:     Sun 01 Mar 2026 06:51:29 +0000
Manifest next update:     Sun 08 Mar 2026 06:51:29 +0000
Files and hashes:         1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: ZPgmj38F6329Kvhn7Gf5Iaz1s8xSyBE6b6zJxm6lZy8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl
                          rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF
        Validity
            Not Before: Mar  1 06:51:29 2026 GMT
            Not After : Mar  8 06:51:29 2026 GMT
        Subject: CN=69a3e1f1-b5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:33:42:c3:c0:72:fa:43:b1:0f:36:8a:6c:eb:
                    b0:3d:25:8b:9c:2d:c9:11:c7:b7:b5:7e:7a:34:de:
                    d8:ba:f6:ab:48:86:62:95:fa:a2:17:24:d4:6f:b1:
                    82:e3:1a:36:4a:ce:df:32:8c:e6:b3:f4:a6:2e:0d:
                    10:25:67:8f:d9:f2:b5:3b:c9:2e:76:2f:d0:5c:8e:
                    cf:46:09:68:fc:92:11:fb:07:84:ac:10:a9:b2:40:
                    e3:07:c8:34:53:23:ed:27:a6:aa:41:a7:07:78:9a:
                    26:96:63:85:e8:0b:2d:ab:81:b2:5c:0a:4f:f6:6a:
                    b6:96:78:0e:d3:d6:a0:33:c9:83:58:af:be:2c:15:
                    5b:cc:1e:b3:27:8d:02:35:cf:64:cd:a7:0b:ff:63:
                    58:0d:96:cd:14:0d:71:36:dc:7e:33:8f:fd:4c:91:
                    94:54:79:62:b5:74:b1:f1:3f:2d:10:25:bd:cf:90:
                    b1:40:ff:31:12:fa:c2:0e:9e:cf:ce:df:99:dc:2c:
                    57:10:f1:63:5a:54:99:7b:99:03:48:72:b2:3d:04:
                    c5:a2:15:5b:85:12:f9:e2:ee:bd:59:d1:ce:f2:c0:
                    8b:93:29:32:2e:b2:12:5e:fb:00:fd:63:63:d6:b7:
                    0c:aa:bb:bb:f1:89:85:ee:ec:b7:43:9a:82:b0:57:
                    12:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:66:CF:22:BE:AD:C4:11:3D:A1:88:8A:F4:5F:BA:86:BE:2B:0B:CF
            X509v3 Authority Key Identifier:
                keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a5:7c:79:7b:15:42:59:5d:24:dd:f9:77:8f:33:e6:67:f7:
         6a:a2:34:77:2a:62:59:16:11:46:d6:7b:94:ad:98:bc:72:e0:
         fb:b3:39:2b:69:5f:1b:91:c3:e3:54:66:7a:f1:6f:db:9d:9c:
         2d:03:41:28:23:80:b8:21:54:ad:0a:04:b7:9a:24:6c:9a:4b:
         66:ae:49:2d:77:1b:fc:3a:e0:fe:a6:1d:38:1d:e7:64:74:67:
         97:17:44:39:b4:20:1a:0e:62:50:eb:cf:80:5c:3f:65:6d:83:
         48:47:a6:6f:91:25:71:ea:98:94:51:ce:84:d4:5a:6d:aa:ae:
         b8:1c:ae:83:35:be:e7:60:30:75:85:54:32:e4:1b:ad:1b:5d:
         b1:b0:88:27:3a:9b:47:1b:cb:46:bd:ad:a1:3b:21:13:82:34:
         6a:65:7b:92:fa:9d:e4:40:50:e2:4a:77:7f:c3:1a:30:46:42:
         cf:4f:f4:14:cb:25:4c:a2:7c:23:30:f8:49:b5:3d:29:1f:cb:
         ed:39:57:73:cb:5e:81:4f:a3:14:34:1a:cd:4c:fd:20:b8:4a:
         15:2e:f0:08:e9:b4:5e:6b:e8:e3:14:da:35:5b:da:3f:60:64:
         1d:09:3c:21:18:9d:9c:c2:d5:3c:64:40:b5:38:f0:60:01:f6:
         b6:ff:8a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:32 2026 by rpki-client