Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
File:                     Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json)
Hash identifier:          /IMBgzF5LrcdD0vQRDuwB6LlXRV1SHul9oaeWrJuvZg=
Subject key identifier:   BF:12:5B:47:E4:2D:58:4C:57:47:57:7D:CC:AE:5F:CC:48:A1:A6:2B
Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD
Certificate issuer:       /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
Certificate serial:       0B8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
Manifest number:          0B81
Signing time:             Sat 28 Feb 2026 19:22:06 +0000
Manifest this update:     Sat 28 Feb 2026 19:22:05 +0000
Manifest next update:     Sat 07 Mar 2026 19:22:05 +0000
Files and hashes:         1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: LIl7WMbercCUA9Omvt+41LpXVAChRf1ypQF2AYuVHa8=)
                          2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: 3BMG6uItAs9xe89CU+uSbUQiL4CIKnWXf7xQtbg3bbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl
                          rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2955 (0xb8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2FC0, serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD
        Validity
            Not Before: Feb 28 19:22:05 2026 GMT
            Not After : Mar  7 19:22:05 2026 GMT
        Subject: CN=69a3405e-d181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:96:3f:9a:b4:76:69:69:ff:50:86:e0:0d:
                    5e:24:b9:68:57:59:46:bf:cf:81:80:b0:a5:73:aa:
                    8b:93:22:42:a6:e5:ee:c2:40:43:58:d9:6d:c6:5c:
                    e3:b1:86:41:50:a3:6b:87:cc:79:f4:b5:65:19:08:
                    4e:0a:40:6c:64:4c:8c:e3:32:c7:a3:b8:81:65:97:
                    f7:cc:13:45:e3:ae:bf:b1:ae:cb:6c:ff:60:48:c0:
                    8c:44:b9:c1:6e:1e:d1:31:ae:85:6a:92:b3:13:4e:
                    c1:0d:38:f7:c2:ea:0a:a3:b9:aa:44:a0:ee:d7:da:
                    e3:a6:75:c1:bd:e6:ac:70:64:31:21:02:e5:67:74:
                    0a:e0:53:fd:01:d2:4b:e4:0b:e8:b6:6e:52:bb:6e:
                    54:4f:13:a4:9b:64:5d:36:ef:50:1c:b4:10:8e:30:
                    61:7f:12:5c:1e:8e:6b:09:56:27:ae:d2:22:8f:64:
                    c2:aa:35:02:50:32:b2:63:c9:42:47:a3:c9:9d:81:
                    8a:62:02:a5:39:61:d2:d9:6c:97:75:0d:9c:d0:e4:
                    61:e1:b1:27:bf:f9:e9:26:ee:b2:36:e9:3b:2d:4a:
                    b8:22:76:3d:2e:7b:bb:ee:2e:6d:5d:ea:b1:a3:3e:
                    47:6b:72:e3:38:dd:60:64:ca:64:39:36:cd:63:c3:
                    67:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:12:5B:47:E4:2D:58:4C:57:47:57:7D:CC:AE:5F:CC:48:A1:A6:2B
            X509v3 Authority Key Identifier:
                keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ba:2b:8c:3f:1b:59:cd:fa:58:ce:f2:fd:f3:04:0e:95:20:
         b9:d1:11:82:b9:18:09:9c:f8:70:f1:ae:53:0b:1c:72:0c:a3:
         ab:d0:6d:fd:1e:91:51:7b:5f:48:6d:ed:70:1f:b5:7f:11:0f:
         26:40:71:b8:ca:3e:e5:4a:e0:d2:72:e1:79:69:bf:77:65:6a:
         bd:5d:79:30:69:21:a5:99:b6:b7:6b:8a:15:05:95:b8:e0:96:
         c6:67:fb:d6:8b:41:cc:c8:16:85:28:e3:62:f9:7f:0d:2d:c5:
         2c:da:01:25:d8:1d:35:4c:9b:95:5a:94:9b:1c:8c:8c:08:b3:
         9f:e8:08:8c:e9:db:51:64:60:bd:57:af:f1:b9:5c:96:8e:91:
         1a:0c:8b:70:f3:c0:93:93:c7:d6:1a:49:b9:4a:f8:03:b0:e7:
         e4:8d:ea:b4:05:3f:65:37:c0:ae:8e:46:fe:5b:02:37:25:44:
         32:bd:6c:cc:08:46:88:f4:82:b3:d4:64:53:e5:4a:d5:28:17:
         9f:f0:db:29:61:da:0f:27:87:b2:d4:e7:29:8d:a7:8e:b1:5e:
         4e:f5:31:f1:c9:99:11:a8:21:23:ac:ba:ce:fe:69:b8:13:c4:
         6d:ef:36:9c:4d:17:94:49:5f:87:69:8e:15:05:8a:26:9b:ae:
         d0:61:ec:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:16 2026 by rpki-client