Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
File:                     kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json)
Hash identifier:          mZl8u3P+qnvQBLfOSbg5eaFe7YHOVMOR//yjeIfVhqs=
Subject key identifier:   A8:94:3C:23:4A:05:72:56:E7:21:71:7E:67:0B:98:FA:40:B1:C4:87
Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA
Certificate issuer:       /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
Certificate serial:       0870
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
Manifest number:          0869
Signing time:             Sat 28 Feb 2026 20:59:44 +0000
Manifest this update:     Sat 28 Feb 2026 20:59:42 +0000
Manifest next update:     Sat 07 Mar 2026 20:59:42 +0000
Files and hashes:         1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: mgIUqQXz0kUFqVY5lpxWqSFPfFd0kNVDG03nOfaUBrQ=)
                          2: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: OLDN/ETZEgU2Ia5DmtJOCvYxeDvefwm7Ut9VsY92Tg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl
                          rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160 (0x870)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6503, serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
        Validity
            Not Before: Feb 28 20:59:42 2026 GMT
            Not After : Mar  7 20:59:42 2026 GMT
        Subject: CN=69a3573f-3ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:e1:e4:b3:22:33:ef:e0:97:ae:95:03:11:
                    6e:67:62:01:7e:18:57:02:68:18:f3:15:31:20:20:
                    41:7b:33:0a:1f:b7:4e:a7:bf:86:c9:c7:61:61:0b:
                    d4:ee:c1:32:7b:f0:c4:06:9c:62:47:09:6f:2e:74:
                    b9:83:55:cf:ed:d7:cb:d7:0a:a3:bb:98:81:a5:93:
                    b3:28:51:34:e8:f0:92:90:0c:2e:9f:50:0b:e8:b9:
                    32:bc:c5:7d:73:c0:52:1f:7c:ec:8c:1d:54:62:c4:
                    1a:33:75:11:a7:84:a3:b7:9e:9d:22:00:d6:51:4f:
                    2e:3c:ad:27:e5:66:1b:21:94:a1:27:e6:a2:72:25:
                    2e:77:27:b4:3b:6e:d7:1b:8a:73:6a:2c:9a:b7:7a:
                    0f:08:c3:bd:1d:f6:45:10:6e:4b:f1:64:a4:f3:dd:
                    0a:1c:ba:70:6a:28:b4:ab:d2:34:31:b2:3b:80:bf:
                    9f:e1:01:aa:d8:20:5f:1e:f3:14:1e:f4:55:32:3d:
                    0e:98:fa:7d:a2:7b:02:41:a7:70:51:53:c9:ca:2f:
                    eb:9b:a0:25:f9:a2:d4:88:1c:84:d5:8d:99:2c:e3:
                    1a:1f:ee:55:4d:d2:bf:c6:e0:06:51:c7:33:31:11:
                    e6:7f:a1:07:ee:44:f3:cd:c4:44:f7:d8:7e:3f:8b:
                    a0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:94:3C:23:4A:05:72:56:E7:21:71:7E:67:0B:98:FA:40:B1:C4:87
            X509v3 Authority Key Identifier:
                keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:85:73:85:00:e2:c6:a8:54:ea:aa:67:19:26:22:28:30:bc:
         cf:1a:49:20:7d:de:a1:2c:1e:ec:31:35:ec:44:44:cf:7f:10:
         ac:2d:0b:48:93:60:7b:da:03:70:12:0e:ba:0a:68:6a:ad:62:
         aa:31:8a:bc:aa:0f:6b:d2:67:b2:05:b1:8a:f1:7a:2b:12:a8:
         9f:fb:b2:44:e5:e0:74:8b:48:ce:85:9b:5c:c1:06:e8:a4:33:
         cb:71:a5:7e:72:b0:11:c5:c6:52:ff:e0:53:52:ce:8f:c3:c1:
         c7:bd:b3:85:52:b8:e3:e3:ee:45:bf:97:b9:58:ac:7c:d4:20:
         10:0c:6d:ff:e1:06:37:b1:1e:e9:44:9e:7e:e8:fa:df:2a:da:
         1f:99:04:b4:b6:52:96:cb:37:fc:c8:61:c6:39:d6:fd:a3:d7:
         29:d3:5e:9e:32:3e:13:a6:5d:e4:c6:39:a2:14:fe:a6:99:9c:
         67:50:67:e9:ec:cd:34:59:bf:c2:3b:bf:6b:b5:12:d4:41:81:
         23:a7:6c:40:53:b4:6f:d5:30:55:72:8f:f5:04:16:17:30:23:
         a7:28:fc:61:02:61:d3:e5:78:e3:49:ae:8e:fd:28:4b:b6:20:
         4e:12:84:4e:2f:58:19:49:f5:2e:3b:5b:ab:d6:64:c5:a9:57:
         67:30:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:03:43 2026 by rpki-client