Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft
File:                     cLpsN0BJKqpJbOn3BQf-g3072BI.mft (raw, json)
Hash identifier:          17J6Rq3EO4st2NHr6q8WPFqd0krUa4+NUuC9HWLzgU8=
Subject key identifier:   0E:C5:3F:42:BC:7C:72:8D:19:82:39:CD:80:94:AE:B1:1D:EB:94:3E
Authority key identifier: 70:BA:6C:37:40:49:2A:AA:49:6C:E9:F7:05:07:FE:83:7D:3B:D8:12
Certificate issuer:       /CN=A91CCABB/serialNumber=70BA6C3740492AAA496CE9F70507FE837D3BD812
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLpsN0BJKqpJbOn3BQf-g3072BI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft
Manifest number:          29
Signing time:             Sun 01 Mar 2026 10:15:02 +0000
Manifest this update:     Sun 01 Mar 2026 10:15:02 +0000
Manifest next update:     Sun 08 Mar 2026 10:15:02 +0000
Files and hashes:         1: cLpsN0BJKqpJbOn3BQf-g3072BI.crl (hash: vH/Evfyewh3+qhX2rgiVaslf45+JY2411rrRFOlD3ws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.crl
                          rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLpsN0BJKqpJbOn3BQf-g3072BI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCABB, serialNumber=70BA6C3740492AAA496CE9F70507FE837D3BD812
        Validity
            Not Before: Mar  1 10:15:02 2026 GMT
            Not After : Mar  8 10:15:02 2026 GMT
        Subject: CN=69a411a6-96e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ad:e1:da:c4:9e:0c:b3:84:22:73:cf:a6:12:
                    cd:25:ec:5a:98:4e:ab:97:68:ea:d5:25:a7:91:37:
                    28:2a:4a:c7:ab:e2:70:80:41:a7:52:e8:e2:46:aa:
                    f8:2f:ef:cc:16:b4:12:09:d4:cf:0f:17:84:1c:70:
                    fd:18:55:eb:68:c8:46:5b:c7:e8:26:43:81:dd:c9:
                    5d:b8:f7:b0:5c:03:35:18:89:68:86:82:27:73:6b:
                    61:1b:97:70:55:24:05:62:53:f4:98:76:db:85:3d:
                    ac:64:ad:2a:9f:c8:f5:08:46:38:77:70:78:89:57:
                    73:88:d8:bf:e5:aa:95:bd:5e:8e:a4:a0:0a:7a:71:
                    d8:55:81:73:f0:26:62:a6:13:17:8b:65:af:ca:18:
                    a4:3c:43:61:79:71:06:ac:3d:27:61:ae:39:61:ab:
                    3d:f6:1c:51:86:4c:2f:ea:e6:36:44:2d:c8:61:da:
                    1e:93:2c:31:ae:e6:67:f3:0f:18:05:7a:29:95:33:
                    2f:62:9b:3b:ca:c9:2c:fb:63:7b:f5:1d:74:5e:b6:
                    e0:f7:5d:a1:4a:e3:8e:e5:b2:6b:95:3b:00:0a:8d:
                    b7:3b:a8:c5:97:5a:60:05:0f:db:56:f1:2f:be:fd:
                    61:41:38:c6:9a:b2:52:0e:14:1d:fa:86:52:27:65:
                    78:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C5:3F:42:BC:7C:72:8D:19:82:39:CD:80:94:AE:B1:1D:EB:94:3E
            X509v3 Authority Key Identifier:
                keyid:70:BA:6C:37:40:49:2A:AA:49:6C:E9:F7:05:07:FE:83:7D:3B:D8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLpsN0BJKqpJbOn3BQf-g3072BI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCABB/48E68E40DD7811F0A586B128386F56BC/cLpsN0BJKqpJbOn3BQf-g3072BI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:88:c0:c6:5f:89:66:ee:ed:f9:06:ed:30:e0:dd:8a:81:05:
         bc:32:97:6e:2f:ad:37:31:69:a1:b1:45:c1:cc:d6:54:7f:3e:
         ca:63:a0:bf:d4:6e:c1:68:91:ad:02:2b:4c:e1:5d:0a:d0:22:
         4f:71:e0:f5:bd:56:e8:77:e5:e3:af:c7:7e:8c:94:ff:01:f1:
         cc:bd:1a:83:c5:79:7d:f9:9d:ed:48:54:18:14:14:71:21:54:
         a2:90:71:41:30:cb:55:be:7f:06:df:2d:4b:95:5e:a3:e3:24:
         e3:b5:14:a2:2c:e8:bf:e1:ed:ec:a9:ee:9b:7c:53:e3:9d:cc:
         2f:54:f1:f0:dd:2d:c1:1d:cf:bf:68:4d:28:b4:62:aa:93:e7:
         dd:1c:e3:94:14:9b:52:9e:d9:4a:17:b1:8b:b3:bb:e9:b8:08:
         bf:57:10:fe:93:4f:ff:6a:76:f7:cb:7a:3f:f0:66:67:fd:1f:
         ba:72:f3:94:66:9a:5f:9a:8e:9a:1c:16:5c:ca:b5:90:c1:e5:
         bb:85:ee:d7:a7:83:f9:e5:91:54:48:82:7a:b0:1c:12:c5:9d:
         85:c4:24:f6:f0:36:80:88:2f:a3:cc:30:3f:ba:d4:7b:1c:80:
         be:e6:84:e8:fe:31:a0:c2:8c:2b:df:69:20:e0:d9:81:02:27:
         58:f2:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:08:37 2026 by rpki-client