Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
File:                     x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json)
Hash identifier:          CCPTEZ6ns/JPzHbGC2Qsj6SUN/Ghll2Uvs2lRtwqiVs=
Subject key identifier:   AA:1A:DF:0D:08:9E:9C:97:3F:39:26:3E:4F:DD:63:D6:FD:0F:89:45
Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09
Certificate issuer:       /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
Certificate serial:       122B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
Manifest number:          1221
Signing time:             Sat 28 Feb 2026 17:12:22 +0000
Manifest this update:     Sat 28 Feb 2026 17:12:21 +0000
Manifest next update:     Sat 07 Mar 2026 17:12:21 +0000
Files and hashes:         1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: YSbKJc1M9RJp2gW/WN1cG0D/LGlBYMoxvULcodGnj48=)
                          2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: S4PonvpkLuqmrbtgnv8T9QMFORQi4oK8GF7Qf1Ow3ok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl
                          rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4651 (0x122b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609
        Validity
            Not Before: Feb 28 17:12:21 2026 GMT
            Not After : Mar  7 17:12:21 2026 GMT
        Subject: CN=69a321f5-d57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d4:71:5c:f9:ce:74:a1:a7:28:89:bd:de:7d:
                    d5:35:65:a6:69:7e:1c:31:80:83:2a:ad:6e:1f:c6:
                    be:a2:95:ef:6a:a0:15:61:c7:ea:11:37:5c:40:27:
                    d8:8a:36:95:a6:3e:40:d1:d8:f2:38:92:bf:cf:5c:
                    88:04:a9:58:cf:24:07:9d:c3:2f:60:73:e3:17:b6:
                    14:a4:44:f7:33:9f:59:5e:16:55:2b:8a:f1:0d:77:
                    2f:ee:a1:b4:9d:0a:09:3c:38:f0:9d:f8:8f:dd:04:
                    d8:0b:b9:f6:bc:89:92:5a:da:e0:f3:a7:cd:ab:e0:
                    eb:70:70:70:8c:a0:64:12:c1:d3:2c:59:04:46:c5:
                    ab:37:87:b5:ba:52:a1:ea:f1:11:9b:cf:84:47:ba:
                    18:a3:f7:5f:04:a2:e2:73:e1:06:45:d1:11:85:e8:
                    03:8f:2b:59:66:70:09:ec:e3:2c:0c:29:ae:ad:ad:
                    ad:c4:03:67:e9:4a:f9:2e:1b:06:7f:e1:4e:8e:3f:
                    f4:c5:15:93:28:e6:9e:65:2f:d0:51:f2:b3:03:11:
                    2f:b3:b1:06:a8:71:2c:39:20:96:b2:ee:47:f5:84:
                    3e:11:74:8a:b3:44:0e:d4:4a:0b:52:be:94:b5:e6:
                    06:19:0f:5b:8c:bb:d7:df:60:b2:64:de:bb:df:bb:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1A:DF:0D:08:9E:9C:97:3F:39:26:3E:4F:DD:63:D6:FD:0F:89:45
            X509v3 Authority Key Identifier:
                keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b7:dc:b1:c2:cc:9f:f3:10:4a:c2:65:cb:a5:42:2d:83:d5:
         df:db:f1:a9:88:49:71:70:21:94:ae:9b:8d:92:71:ed:ef:ce:
         4e:85:61:a5:2f:96:1c:35:db:aa:c0:80:c2:86:18:64:64:08:
         1f:fc:b8:13:42:22:be:29:d8:a4:9d:20:fc:9d:39:34:0f:8a:
         fe:2b:5b:0d:ff:14:81:ed:83:c6:98:9e:85:57:61:cd:a0:25:
         a8:a4:66:30:0e:49:9e:84:86:cd:ed:e2:60:71:ea:fa:21:d0:
         62:1b:6b:81:41:fa:fb:6f:c3:ff:e1:b4:5c:07:a5:6e:44:d0:
         4f:d7:5b:d1:b7:e7:85:c2:24:9b:c3:e7:04:b4:59:43:2a:69:
         2d:61:d6:c3:f3:47:11:16:78:03:68:b1:74:8a:42:17:3e:07:
         b9:ef:33:24:9a:f5:80:4e:47:25:a6:2e:9f:c3:f4:dc:f0:72:
         9b:ee:d5:06:d9:54:36:32:d1:6f:40:4b:e4:59:c9:d4:a3:96:
         b4:06:ec:0c:74:81:dc:91:a2:17:52:2e:37:92:32:89:df:ce:
         1c:c3:d5:6d:98:5c:66:d3:26:ae:90:56:30:7c:e4:58:37:03:
         26:cf:d5:32:93:c1:59:75:0a:65:4b:ef:16:16:e2:97:44:b8:
         c8:08:a7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:09 2026 by rpki-client