Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
File:                     4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json)
Hash identifier:          WbYLWw1Kh1sdbPJ9qrLcuFF1H7+sk3yu6xwf8CDzDsY=
Subject key identifier:   1C:A1:5F:39:27:5C:47:A2:31:BE:7F:25:DD:88:86:C3:68:4A:01:5C
Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6
Certificate issuer:       /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
Certificate serial:       0D80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
Manifest number:          0D73
Signing time:             Sat 28 Feb 2026 18:07:36 +0000
Manifest this update:     Sat 28 Feb 2026 18:07:36 +0000
Manifest next update:     Sat 07 Mar 2026 18:07:36 +0000
Files and hashes:         1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: A6pMnQCQzPu46646kqYTW2lJcxxP3O0SpT8gX7VZDHg=)
                          2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: 8PBc7rJDdj900RPfyfsyZOspVRuDEqIjR6MwkbVEKO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl
                          rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3456 (0xd80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC561, serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6
        Validity
            Not Before: Feb 28 18:07:36 2026 GMT
            Not After : Mar  7 18:07:36 2026 GMT
        Subject: CN=69a32ee8-1f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:b3:22:5e:9d:6c:95:a8:0c:0e:85:11:02:
                    3f:14:3a:03:18:65:b0:80:75:12:52:c3:27:20:33:
                    4b:b6:2a:4f:39:5a:bc:cb:64:2f:e1:03:3f:e6:b1:
                    32:71:3e:0f:bb:a6:7b:34:1c:39:af:65:be:14:33:
                    7d:45:9f:8c:89:d0:29:ac:a1:2d:4d:0b:5d:ac:8b:
                    f4:8a:8c:9d:c3:2c:b3:eb:62:ff:e3:f6:cd:de:8a:
                    30:4f:d2:8a:27:44:04:80:7b:9c:9a:fb:08:55:2d:
                    a1:cb:0a:7e:77:64:5d:de:a1:57:05:00:b9:fd:e2:
                    95:06:7c:39:61:c0:41:5a:03:5f:fb:78:11:c3:38:
                    40:03:3f:ad:3a:ef:ef:f4:c0:62:6c:6d:4a:12:19:
                    a7:67:76:ff:f9:f1:8a:70:91:d3:9b:27:08:e9:56:
                    ee:22:76:3e:22:1a:fe:dc:8b:cd:b5:56:9d:d1:ca:
                    4b:ad:77:e4:4f:86:3b:e6:57:62:38:71:2d:99:48:
                    50:b7:e2:66:32:08:8d:af:e6:32:81:ee:32:29:30:
                    e4:81:54:f7:8a:e4:6f:a3:bc:1a:13:e0:b9:d4:9c:
                    7f:15:0e:c6:cd:34:6c:aa:6d:75:83:29:bd:fa:21:
                    bb:91:bb:43:11:f1:7f:94:f3:5d:b0:44:34:c6:bf:
                    6e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A1:5F:39:27:5C:47:A2:31:BE:7F:25:DD:88:86:C3:68:4A:01:5C
            X509v3 Authority Key Identifier:
                keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:10:26:34:5b:b6:a0:f0:8a:b1:36:ae:32:b2:59:07:74:e2:
         5c:e0:0d:67:b8:48:bd:1a:37:43:6b:f8:16:e6:fb:04:03:91:
         51:58:ce:e0:9d:e8:07:b8:cc:66:8e:a2:28:23:f2:d2:6c:ef:
         33:25:bc:5f:15:05:31:e0:61:5b:78:91:52:47:85:4d:ae:a4:
         6b:29:c2:c3:a1:9f:c8:5c:64:b9:ce:b0:7e:f4:95:9f:51:07:
         ee:45:99:fa:c1:e8:07:bc:dd:97:a0:3f:3d:a9:9e:3e:9c:83:
         7e:00:78:0b:86:d0:89:b3:aa:e3:89:30:cf:d1:30:3f:81:5c:
         5d:32:2a:3f:67:d4:f9:c9:00:b8:a1:14:72:d3:dd:74:34:42:
         f4:a3:1f:3f:8f:f3:93:eb:b2:88:45:f2:cf:d0:a1:38:0f:ce:
         d2:ec:82:c2:17:c2:28:21:a6:83:0b:98:0c:cf:72:6d:2c:32:
         ea:33:f5:59:9c:c7:a9:c8:e3:08:ed:4a:fe:f2:33:06:1f:c7:
         dd:39:94:41:17:fe:bf:a2:b8:33:7c:a8:b7:61:5a:b4:da:8e:
         09:11:69:ea:b6:08:6c:c4:d7:bf:87:70:87:1b:01:1e:f2:a0:
         63:b8:eb:3f:64:5f:ca:b9:3c:23:23:8a:72:38:53:7c:d0:ef:
         a2:7e:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:12:33 2026 by rpki-client