Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
File:                     8bZbeXYWOXNS7L1KLHdPz37G1HA.mft (raw, json)
Hash identifier:          lRB7kZ+8VKjdlhgTu/fVtPOpapq0yI8JSioBJEMViBk=
Subject key identifier:   39:94:3A:F3:E3:19:F0:23:DB:DB:CA:94:41:67:89:7C:41:93:06:FA
Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
Certificate issuer:       /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Certificate serial:       06E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
Manifest number:          06E1
Signing time:             Sat 28 Feb 2026 22:36:14 +0000
Manifest this update:     Sat 28 Feb 2026 22:36:14 +0000
Manifest next update:     Sat 07 Mar 2026 22:36:14 +0000
Files and hashes:         1: 8bZbeXYWOXNS7L1KLHdPz37G1HA.crl (hash: 6R63ggWtoqVvxmNXBMg1kGX44MuF1JFWWdRFch5auQI=)
                          2: 226402B0860D11EB8F541B68C4F9AE02.roa (hash: oKHV5TBmq4GqrFfr2VIYxjHb/BXfTV1fp7LSb6WOO9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
                          rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
        Validity
            Not Before: Feb 28 22:36:14 2026 GMT
            Not After : Mar  7 22:36:14 2026 GMT
        Subject: CN=69a36dde-ed40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:e3:c9:27:c9:b9:ec:65:75:50:1c:53:4d:
                    6d:33:35:a9:90:e7:2f:32:5a:53:3a:02:4c:5f:2a:
                    21:45:45:9d:97:91:a5:0c:f2:12:37:2d:c8:9e:a8:
                    13:19:b7:be:e4:6a:ac:5e:f9:f4:3d:6e:1f:fd:54:
                    82:b2:6b:fa:20:46:45:e1:33:44:49:07:0c:09:68:
                    a8:d2:8c:34:e9:09:5d:4d:d3:3a:1f:f4:75:f5:f3:
                    d8:42:62:97:3c:6d:02:1d:e2:12:28:4e:fa:d3:23:
                    86:f8:fd:fa:3d:e1:fa:c0:cd:19:df:5f:3a:db:4a:
                    ac:24:5b:f8:e4:22:c3:bc:68:f1:cd:3d:65:6a:c1:
                    c4:a6:10:8d:07:95:ce:d1:b1:54:8b:e5:f5:26:9c:
                    8c:a8:b0:dc:f1:2a:b1:03:87:1f:f9:a7:27:d8:a7:
                    e2:15:63:4c:bb:fc:01:17:e3:33:25:11:b6:45:07:
                    a4:e5:5c:b4:6e:70:9c:2b:68:54:c2:5d:ce:a9:ee:
                    f5:17:da:66:5e:a3:9c:5e:40:99:21:23:42:17:b3:
                    0c:8c:24:0b:96:47:81:ea:b1:41:f2:25:51:0c:3a:
                    33:91:4a:58:f5:cf:2d:6b:05:05:a0:47:f3:cd:49:
                    85:0f:50:2a:45:24:01:7f:9a:d4:e1:52:96:a6:9b:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:94:3A:F3:E3:19:F0:23:DB:DB:CA:94:41:67:89:7C:41:93:06:FA
            X509v3 Authority Key Identifier:
                keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:60:c1:cb:72:78:61:04:26:bc:35:d1:da:ca:7e:55:a2:d4:
         42:06:d7:4b:ec:5b:03:49:ec:b7:ec:bb:a9:85:47:66:2a:bd:
         ee:02:64:f5:b9:a3:0b:b2:ad:9b:31:7d:1d:a5:cb:f3:3b:05:
         59:8e:4e:01:31:0e:7c:71:09:b9:d7:24:f9:1d:01:1a:3e:c9:
         88:f8:21:37:7e:da:1a:dd:cf:fe:b6:40:b3:36:0a:de:31:ca:
         b1:b8:80:55:fc:86:02:0b:54:7a:ad:83:2b:75:cb:5a:d5:d1:
         4b:d5:24:b4:f9:9f:67:98:9a:6b:1f:81:af:eb:27:34:96:d7:
         3f:8a:d6:21:dc:a0:50:01:41:f1:72:52:61:8a:dd:30:82:44:
         bf:45:f9:a6:03:f9:d5:4a:26:36:f8:2e:57:34:b6:22:1e:c8:
         2f:e4:1f:1d:4a:71:5a:e3:af:0a:66:04:5e:ca:c9:9a:86:6c:
         6e:39:91:5c:c2:81:ec:48:e3:c9:17:df:48:f8:2a:58:b6:78:
         5e:a0:25:ce:97:72:12:65:46:c1:7e:3e:35:d8:30:3d:dd:05:
         da:09:19:9d:20:9f:a8:0d:de:b9:b8:52:17:7e:90:41:84:8a:
         d9:07:ec:39:2e:d3:8c:74:ba:b6:f0:2a:2e:9e:a8:17:d8:fe:
         d3:8c:6c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:32 2026 by rpki-client