Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
File:                     gFLXiRiFOIg0vD1ozrIclvdiXmc.mft (raw, json)
Hash identifier:          KLFs6+DLRlyAZuEQE0o79+j1zH7LUKHHH+G6+7qHDdk=
Subject key identifier:   23:8D:9F:E6:7E:56:CC:C2:9F:73:B5:14:7D:84:92:BD:7B:40:85:A2
Authority key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
Certificate issuer:       /CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
Certificate serial:       1EE8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
Manifest number:          1EE7
Signing time:             Sat 28 Feb 2026 16:03:49 +0000
Manifest this update:     Sat 28 Feb 2026 16:03:49 +0000
Manifest next update:     Sat 07 Mar 2026 16:03:49 +0000
Files and hashes:         1: gFLXiRiFOIg0vD1ozrIclvdiXmc.crl (hash: hFdSJ0KiQ1JqgR2IEa/S0ROU3fOhMET+sDzIC7IYSNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl
                          rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7912 (0x1ee8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBE89, serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
        Validity
            Not Before: Feb 28 16:03:49 2026 GMT
            Not After : Mar  7 16:03:49 2026 GMT
        Subject: CN=69a311e5-46bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:72:7d:7b:b9:88:7d:fb:2f:cd:61:fb:bd:
                    a1:51:a9:db:7e:fa:e5:f8:ba:2d:87:e9:dc:3d:af:
                    cc:e4:fe:3f:7a:ce:a7:67:74:f3:e0:35:ca:be:9c:
                    7f:c5:f5:52:a7:7e:ed:fe:ba:f6:e6:d9:34:3c:26:
                    e1:52:4c:c9:37:76:96:bf:1b:92:ff:23:a9:45:97:
                    45:65:dd:8c:1e:d3:41:bb:49:a8:ea:1e:d9:52:4d:
                    a3:55:ca:e0:7a:7a:c3:b0:0e:e1:14:84:23:90:d3:
                    0b:14:cd:4f:f9:b9:45:94:58:24:ae:0c:93:1b:e8:
                    8f:1f:ac:21:bf:8f:6d:20:ef:68:82:ec:be:d6:d4:
                    e5:94:e0:ca:04:2b:6b:f7:d7:9c:38:c5:ee:cb:c9:
                    f3:b7:c9:73:21:ef:88:da:53:16:ab:09:96:86:4f:
                    3f:59:cc:82:d8:58:74:bf:e7:13:5b:33:41:b5:a2:
                    39:6e:26:a0:23:e7:d9:eb:3d:15:6a:81:f5:6e:fa:
                    8a:85:8e:51:40:69:9e:ce:91:1c:ab:4a:72:4e:29:
                    5a:55:d3:6c:60:a8:54:bf:57:10:1c:b6:60:f1:02:
                    a0:6e:d6:8e:e6:0b:35:04:57:04:57:dd:00:12:1b:
                    90:8f:99:1a:b2:70:5f:02:2d:9d:d5:e4:a2:91:29:
                    c0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8D:9F:E6:7E:56:CC:C2:9F:73:B5:14:7D:84:92:BD:7B:40:85:A2
            X509v3 Authority Key Identifier:
                keyid:80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:74:02:51:d1:84:34:db:5e:1e:74:ee:73:3c:c7:45:87:89:
         d3:45:dc:3c:30:b3:76:0a:42:b3:1c:9f:b6:d3:8d:cc:c6:7d:
         10:6c:14:e8:71:bb:0b:b6:74:ec:69:47:86:8d:b2:85:b0:fe:
         bf:80:aa:55:3b:b2:31:e3:06:ea:e2:f7:9a:9c:65:bf:a9:bd:
         c7:cf:8b:de:f9:29:87:20:db:da:64:40:30:4b:ca:80:d1:bd:
         04:16:38:d9:b9:b4:a8:26:ae:4e:c6:6e:73:4a:91:36:7a:bd:
         38:98:71:a7:9f:e3:e5:b5:da:32:43:df:ec:2a:37:50:f5:16:
         ea:b6:b2:e5:bd:2f:45:5a:25:f7:a8:05:83:c1:8e:43:43:8a:
         5c:e7:03:70:e7:65:b3:a4:40:b9:c7:7f:95:41:05:76:e0:77:
         7a:da:6f:8e:8f:bb:4e:0d:e1:c2:dc:40:09:46:21:3d:ef:11:
         a5:ef:d3:bf:c9:fb:1e:06:ac:ce:e1:5d:88:05:49:7b:cc:74:
         ca:9d:0e:ef:f2:48:39:c8:8d:01:1f:e7:ba:a9:77:67:91:db:
         e8:2e:d3:0d:8f:88:f5:fe:17:1d:77:ce:54:35:eb:4e:ba:7a:
         b0:8a:4a:35:9b:65:9d:68:12:3c:d9:59:9c:9d:35:3c:fe:ff:
         a7:d3:cf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:17 2026 by rpki-client