Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
File:                     1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json)
Hash identifier:          3SXiQGasmCX/jbDdgWfeLjt8Ig8ymfwYYDbwcs1pmvg=
Subject key identifier:   DB:0D:D6:EF:E7:98:55:53:1E:AB:D7:CA:FB:52:54:ED:0D:E3:F3:5E
Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA
Certificate issuer:       /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
Certificate serial:       093D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
Manifest number:          14B5
Signing time:             Sat 28 Feb 2026 19:15:56 +0000
Manifest this update:     Sat 28 Feb 2026 19:15:55 +0000
Manifest next update:     Sat 07 Mar 2026 19:15:55 +0000
Files and hashes:         1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: Bfw8gKjBXgTAb1TMri02nNaWH02ECiFRnKWOEtOGhjE=)
                          2: 31C03F8A148D11F19BFA55B13D3D8C67.roa (hash: 2P8tm1L1/hHeozdOLIkZxpU7TBO+3OCMP2HCt5QPwpg=)
                          3: 306CD346148D11F19BFA55B13D3D8C67.roa (hash: ipKZgFxhpqnn6tI4MKpXp8Q9xOy3sbkWZiu8mJOtMQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl
                          rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2365 (0x93d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D560D, serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA
        Validity
            Not Before: Feb 28 19:15:55 2026 GMT
            Not After : Mar  7 19:15:55 2026 GMT
        Subject: CN=69a33eeb-e340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:c2:45:fa:87:a4:e8:3f:f7:6e:af:c3:57:
                    7f:60:e7:18:a7:e0:03:06:cd:9c:0a:18:65:5d:28:
                    4e:28:20:ef:35:db:a0:ce:3e:b0:9c:ee:75:ad:82:
                    89:9e:6b:4c:3f:aa:86:99:3c:10:30:cb:e5:0e:0f:
                    e1:7a:97:c6:eb:80:19:c7:b8:07:23:e6:97:f2:48:
                    9c:7c:d9:25:71:37:84:e5:b2:b4:78:1d:61:64:65:
                    12:1e:28:39:80:48:10:db:55:93:4f:2a:2d:00:07:
                    dd:fb:6c:02:c7:99:d1:fb:8b:93:68:92:ea:49:bd:
                    35:d3:13:4d:85:1d:fd:e9:3c:c1:d3:5f:b8:7e:e7:
                    67:e0:bd:2f:45:c8:4a:9c:f9:d7:3f:ce:e6:fb:c1:
                    89:77:08:e1:3b:f8:b2:24:2f:d9:e0:2e:ce:70:47:
                    85:fc:57:af:05:10:51:93:fd:b7:7d:20:f6:42:45:
                    36:33:3b:36:fe:13:87:ff:be:a9:a8:de:b6:93:d4:
                    a6:06:3d:5a:56:a1:85:19:05:3d:c5:b2:9a:86:b3:
                    67:0a:66:5f:23:26:b7:11:bd:03:f4:9e:ec:50:eb:
                    93:69:27:e0:96:23:60:b5:59:c6:5a:79:94:f6:7a:
                    a1:e6:ed:7d:dc:6b:8d:d0:10:02:3f:87:df:1e:2b:
                    29:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0D:D6:EF:E7:98:55:53:1E:AB:D7:CA:FB:52:54:ED:0D:E3:F3:5E
            X509v3 Authority Key Identifier:
                keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b6:fd:4b:4f:82:20:41:76:ac:79:c5:b5:54:26:e0:f2:76:
         b7:4e:d7:51:89:7a:2d:3d:c8:b3:b3:ec:1c:fa:54:06:4e:f5:
         dd:fa:bc:d2:c5:e2:42:81:7c:f2:ed:70:2c:4b:96:3d:ed:57:
         b4:ec:60:bd:28:d0:bf:f1:79:f7:ca:08:82:69:de:96:47:28:
         75:e2:1d:5c:32:0d:f9:59:4c:50:cf:8b:9d:d7:37:73:82:2d:
         b0:ea:30:0d:8a:53:ef:cf:57:37:36:3e:c9:f0:32:4e:09:1f:
         22:fb:6a:8a:9c:a7:d6:52:5c:92:6d:82:fe:26:80:aa:23:b6:
         db:18:cb:d7:b4:ef:d4:08:33:b9:b8:ce:a7:a3:fb:0b:e7:e9:
         8f:d7:28:65:fa:6b:7d:41:34:ed:be:58:44:c6:a0:cc:25:b3:
         ca:1b:56:e0:6c:00:f5:23:9c:f6:2c:db:09:b6:3b:5a:1a:79:
         eb:c1:93:d1:0e:a4:c3:b7:58:dc:15:3b:17:1d:b2:42:88:21:
         e2:e7:2a:a5:43:1d:a3:45:09:2d:e4:78:1c:5e:05:97:80:9f:
         a3:0d:be:0e:e5:93:c7:76:d0:90:66:1a:00:c9:0d:03:ea:0d:
         bc:d9:46:db:1c:8f:80:b4:c3:8f:74:be:aa:df:e9:6e:f5:40:
         9d:60:7b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:01:32 2026 by rpki-client