Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
File:                     _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json)
Hash identifier:          g4hrvUwkfSF2na/ecW8zkfEyAf2U0JpVm0LpvqqRAc8=
Subject key identifier:   D5:DF:4E:28:6A:77:E0:48:0D:C3:3A:C1:C2:92:2F:13:53:0A:43:ED
Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
Certificate issuer:       /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Certificate serial:       029E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
Manifest number:          0299
Signing time:             Sun 01 Mar 2026 02:22:35 +0000
Manifest this update:     Sun 01 Mar 2026 02:22:35 +0000
Manifest next update:     Sun 08 Mar 2026 02:22:35 +0000
Files and hashes:         1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: 8HVJ2j9EBUeHuoV9TAxGKJp5OTFn8/UOHxYEypg/scc=)
                          2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: 31J9yBONwQ0Slze1cZAXabZLSH29F7mH7omWRFxw8QA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
        Validity
            Not Before: Mar  1 02:22:35 2026 GMT
            Not After : Mar  8 02:22:35 2026 GMT
        Subject: CN=69a3a2eb-6497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:66:54:1e:7a:8a:e1:74:1e:cd:8e:a3:9c:
                    de:0f:c8:f7:22:84:41:f3:fb:b4:87:4e:04:7d:16:
                    2e:1e:61:0d:51:12:f6:2c:de:2e:79:ca:a1:ff:9d:
                    d4:5a:65:eb:da:bf:f5:5d:1a:95:c2:45:9a:fb:9a:
                    56:8d:7d:a3:02:c7:76:91:de:0e:69:08:42:5b:7b:
                    f9:a4:ee:60:00:d1:96:a4:f7:93:9a:b6:5c:45:22:
                    38:96:53:4f:e2:96:95:e8:8a:e4:95:2d:f4:54:3e:
                    4f:50:48:8b:95:2a:9a:fc:b2:17:9a:ad:b2:21:14:
                    bb:19:b1:08:10:b4:bd:2e:7d:da:32:f4:f3:2b:bf:
                    89:1f:86:4f:32:c6:7f:15:51:6e:0f:19:de:40:11:
                    54:69:a3:e5:8c:87:27:c1:93:8c:6b:2a:68:ef:02:
                    43:e0:ff:5c:18:86:ca:ec:26:df:72:9a:51:8d:f1:
                    8a:ee:56:45:8a:55:f9:df:b4:6a:3e:85:55:1d:cc:
                    92:af:e4:69:63:b2:82:fd:97:86:3f:49:eb:04:5f:
                    2a:f3:28:14:85:53:4d:37:be:b3:54:1a:5a:07:c4:
                    90:4f:30:71:10:c1:b5:4d:83:9e:4c:71:11:03:f8:
                    6b:3e:8a:94:01:5b:ce:b0:6e:7c:87:e2:01:b8:b4:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DF:4E:28:6A:77:E0:48:0D:C3:3A:C1:C2:92:2F:13:53:0A:43:ED
            X509v3 Authority Key Identifier:
                keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ad:35:e4:ec:69:a2:aa:8f:4c:59:8e:ca:a9:af:52:e9:c4:
         0d:7d:f2:8e:18:cf:20:4f:aa:58:5c:09:62:e9:53:f4:2c:2d:
         fe:de:41:1a:7a:88:55:5d:b2:5c:4b:8e:e4:2a:46:d9:44:4a:
         06:b3:db:c3:c1:f4:ef:12:31:2b:d0:f4:44:89:ff:3b:34:c1:
         32:cd:29:fb:a0:9c:9d:f0:47:83:4b:5c:b2:2f:07:1d:11:38:
         45:6e:ab:c8:7b:96:58:8f:a8:e2:40:11:22:bb:e3:d0:e1:09:
         67:8d:31:8b:b6:d4:dd:a8:3f:9e:0d:be:b2:45:de:85:93:68:
         b0:74:a4:d0:4d:5a:a2:44:a9:2a:e2:53:c9:82:3f:bf:18:d6:
         31:b2:9a:20:1c:a2:5a:3d:32:fa:8b:7d:62:42:d5:93:5c:7e:
         73:56:67:99:7d:a5:d0:92:73:78:07:99:49:a4:4c:70:b6:91:
         31:18:ab:bf:27:d5:9b:67:f6:a6:a0:35:11:0a:48:d3:36:5f:
         f4:d6:24:3a:77:44:b4:d0:6f:0c:02:83:dc:c3:d5:33:cd:b3:
         4a:21:c2:3d:9f:92:7f:13:83:54:9c:91:21:e7:e2:1f:09:cf:
         d8:74:c7:d5:69:c5:0b:38:db:1a:a4:70:7b:d0:b5:2d:75:9c:
         d6:f7:c4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:18 2026 by rpki-client