Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
File:                     lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json)
Hash identifier:          mvH+RXB0DuMYCY9UxD8cXYlNgdO0ZnQRJJOtPX6Z+9s=
Subject key identifier:   AE:D6:49:06:49:3B:90:EF:F5:B6:39:6C:8D:B5:09:A1:29:99:AB:CF
Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA
Certificate issuer:       /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
Certificate serial:       0869
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
Manifest number:          0861
Signing time:             Sat 28 Feb 2026 21:00:46 +0000
Manifest this update:     Sat 28 Feb 2026 21:00:45 +0000
Manifest next update:     Sat 07 Mar 2026 21:00:45 +0000
Files and hashes:         1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: JyVT4VxM0JASPDdq5rs+mbSsYuXiyUf6JsUkUO8fbcU=)
                          2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: FrUF8k+q0iQX/Bos2myD8zLROjp2eOpyug9lyw9AGzE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl
                          rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2153 (0x869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D01AF, serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA
        Validity
            Not Before: Feb 28 21:00:45 2026 GMT
            Not After : Mar  7 21:00:45 2026 GMT
        Subject: CN=69a3577d-0828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:25:b4:0a:9b:51:3d:45:1a:f1:b2:cd:cb:db:
                    3c:a2:80:6a:55:72:b3:01:17:e4:97:e2:fc:99:58:
                    d3:c7:7c:5c:40:1d:8b:52:73:cc:b6:76:70:a5:4b:
                    83:8d:8c:43:5d:ba:49:7b:7a:f0:49:9d:99:77:47:
                    24:76:26:93:41:82:cd:46:9f:18:0c:7c:0b:63:bf:
                    14:18:51:cb:7f:60:bc:7e:a6:f3:1c:da:8a:52:77:
                    6f:73:17:ae:47:af:96:6b:e1:ec:21:8c:4b:35:73:
                    1b:68:42:06:92:1d:04:70:7e:b5:1a:75:7e:56:68:
                    1b:4f:5d:f3:4e:78:0c:b9:ca:91:29:fd:19:a5:d2:
                    13:61:95:1b:7d:a3:dd:b8:eb:ee:bf:a8:a1:3a:fe:
                    40:5c:c4:5f:17:81:4b:f3:a3:92:94:ff:68:e1:70:
                    68:81:ab:b2:c6:56:d7:94:44:0e:a1:59:da:56:3f:
                    1f:a5:8a:b8:f9:c4:f2:a3:63:de:63:fc:ac:8e:e6:
                    b1:b5:ea:4c:e8:d5:0e:e4:06:9c:47:5f:53:4d:bb:
                    0b:b9:a0:47:24:6c:03:e3:d1:f5:82:28:68:18:1e:
                    98:93:eb:9f:fd:ed:1d:50:bc:3f:80:c0:c6:39:45:
                    a8:48:16:5e:01:57:33:23:94:ad:d7:6d:7f:ff:41:
                    39:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D6:49:06:49:3B:90:EF:F5:B6:39:6C:8D:B5:09:A1:29:99:AB:CF
            X509v3 Authority Key Identifier:
                keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:76:87:42:e8:f0:05:4e:06:c6:ee:22:80:75:10:6a:29:93:
         a9:70:c5:27:15:01:7d:27:64:72:6f:8f:9b:90:52:68:ee:46:
         73:40:14:e6:c7:ab:d8:da:77:05:97:80:60:6d:e6:a6:92:9f:
         bd:6b:7d:4b:21:f7:5e:a4:50:fd:24:b7:4f:be:d2:13:c6:73:
         36:1d:83:82:30:15:26:77:3f:27:80:bd:9a:4c:57:3b:27:b0:
         01:3f:aa:df:91:94:65:e6:c6:e4:8a:0b:8f:fe:54:5a:43:91:
         8d:a6:ea:87:d1:c7:03:1e:eb:ca:da:fa:18:b9:4e:d1:12:12:
         c2:cf:a6:c8:50:86:42:d4:5d:43:51:55:26:31:76:da:0e:2d:
         c6:9a:a7:78:e5:6c:44:c7:30:7b:1d:01:1f:b6:19:6d:2d:0c:
         a1:72:66:f7:8c:9d:53:40:16:7e:19:1f:61:d3:27:5a:ba:ed:
         ab:3c:1c:41:0d:a0:ae:a1:68:de:3c:3f:90:6f:3b:74:47:f8:
         ca:f1:d3:02:17:4f:35:39:29:c0:f2:de:9f:1d:08:3c:a3:36:
         3c:ba:09:74:a8:03:6e:af:f2:7a:b3:53:24:3a:d5:12:ef:80:
         2f:2d:a5:fa:a0:1f:21:48:e8:28:d8:20:2e:8b:de:79:a5:b9:
         d9:40:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:22 2026 by rpki-client