Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
File:                     AfBcfqXyou38GDiX9YNZgrLPA78.mft (raw, json)
Hash identifier:          ie6Zuct4s3j6Fuw7+w+wxX5JPSJ+G3W4DusdONAKG6w=
Subject key identifier:   7B:DB:BB:2E:5A:7E:42:1B:31:03:2F:62:01:7F:45:AA:3E:D0:A4:C1
Authority key identifier: 01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
Certificate issuer:       /CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
Manifest number:          F9
Signing time:             Mon 02 Mar 2026 03:06:09 +0000
Manifest this update:     Mon 02 Mar 2026 03:06:07 +0000
Manifest next update:     Mon 09 Mar 2026 03:06:07 +0000
Files and hashes:         1: AfBcfqXyou38GDiX9YNZgrLPA78.crl (hash: KbHtVO54QkeH6AzP7HCYLNKR3Mg/jmAbm35+tdBbLgA=)
                          2: 3CA96D46FF2E11F088116B6D89EE528E.roa (hash: 9k26GgzaF7JUBXzdAr1iBX77IktY67fjp/QCPFOAclU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
                          rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09BC, serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
        Validity
            Not Before: Mar  2 03:06:07 2026 GMT
            Not After : Mar  9 03:06:07 2026 GMT
        Subject: CN=69a4fea1-72da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f3:33:60:97:58:7f:71:db:b1:53:a9:54:3d:
                    10:da:56:01:d0:fe:70:9a:ff:35:e7:d1:4a:89:01:
                    f5:d2:83:24:a5:0d:e5:9c:7a:f9:99:41:48:1a:d6:
                    ee:8d:16:d6:18:bf:3a:9a:9c:42:b8:9c:3c:79:1e:
                    39:6a:68:7a:29:f3:e5:43:a5:42:a7:82:74:d9:ef:
                    93:de:65:db:43:c5:54:fb:ad:c3:22:ae:84:3a:2f:
                    39:69:c5:d3:11:13:e1:c2:d6:7c:db:43:8f:b4:56:
                    d6:38:cf:61:4e:cb:c0:38:69:8c:b9:3f:fc:4f:17:
                    de:7e:a7:22:e6:f0:06:b7:7c:77:42:bc:38:43:be:
                    26:ea:bf:ef:59:7b:c8:e5:3e:7b:fe:f2:79:8a:5f:
                    95:68:46:12:f3:ea:4c:5c:1e:57:35:53:e5:c8:50:
                    0b:c3:70:d9:69:54:df:fe:4b:ff:f4:c8:10:ff:f2:
                    db:65:61:2b:ea:5c:af:bf:e8:b9:be:74:a9:24:04:
                    52:6d:49:a3:53:e7:da:e4:84:69:cc:06:64:0a:96:
                    9e:3c:ea:2c:6f:c2:68:a1:45:c2:58:34:34:0b:a5:
                    83:32:45:12:ed:4c:54:43:a6:ae:f0:9d:a1:5c:db:
                    61:09:d0:11:97:6d:06:c0:73:97:f3:6f:19:4a:71:
                    c0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DB:BB:2E:5A:7E:42:1B:31:03:2F:62:01:7F:45:AA:3E:D0:A4:C1
            X509v3 Authority Key Identifier:
                keyid:01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:7f:69:20:5d:f8:9b:68:0a:fd:b1:f9:8f:e5:49:cd:9a:f1:
         a9:3d:cc:5a:5d:55:c1:d3:1c:64:ce:27:46:17:80:de:19:cb:
         88:49:ec:fa:f5:0d:7c:75:b7:af:8a:31:96:39:ea:f0:28:19:
         f2:23:c2:a1:d8:80:a2:5d:1a:7e:ac:5d:6f:51:39:0a:40:7b:
         6b:f5:84:a2:64:80:f6:5a:e2:e6:0e:fb:68:e6:1f:79:4c:0d:
         89:6d:b6:14:f6:02:fa:45:c3:ea:9b:77:82:99:0d:2f:04:f9:
         e0:2d:f8:48:0d:1f:b0:cf:e7:8c:2b:bb:d9:f7:62:78:ee:c3:
         6f:05:9c:7a:b0:32:66:b1:c0:2e:59:04:4e:84:ae:dd:07:d0:
         ec:02:a6:86:02:49:c4:2b:4c:43:59:4c:0d:81:16:bc:11:8e:
         26:0d:26:d6:36:8e:8f:e2:86:35:ba:81:88:85:f2:bf:13:b1:
         16:1f:bb:2c:cb:3b:92:ca:89:8e:9e:72:9a:03:5c:5b:bf:22:
         23:26:20:ce:43:82:9e:01:91:5e:72:12:4c:e6:74:4c:fa:9a:
         61:ab:ac:4e:b7:97:5a:58:ef:ca:a5:01:7d:0c:76:ef:ac:fe:
         c9:c0:b5:ee:34:f7:15:a3:6c:19:a9:58:15:f9:f0:c6:63:d1:
         09:a3:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:30 2026 by rpki-client