Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
File:                     67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json)
Hash identifier:          nfexDr0FfhGbf0/bzK/IglbDh22VHgaoNRGdQ/cWHuc=
Subject key identifier:   E1:A6:94:0D:F5:5D:6F:A7:62:2D:F5:DF:E3:39:3F:89:F1:7F:53:F3
Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10
Certificate issuer:       /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10
Certificate serial:       0823
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
Manifest number:          0888
Signing time:             Sat 28 Feb 2026 21:27:03 +0000
Manifest this update:     Sat 28 Feb 2026 21:27:03 +0000
Manifest next update:     Sat 07 Mar 2026 21:27:03 +0000
Files and hashes:         1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: v1/pXAVCe5yKC5aaB7kyQ5quRFubyzu052jFEp7pG1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl
                          rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083 (0x823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10
        Validity
            Not Before: Feb 28 21:27:03 2026 GMT
            Not After : Mar  7 21:27:03 2026 GMT
        Subject: CN=69a35da7-d9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d4:bc:00:83:84:6a:10:c4:62:34:fd:9e:5c:
                    cb:28:bf:a9:60:60:c8:66:c4:49:ec:c4:ac:d8:ac:
                    b8:6e:8d:f6:4a:fc:94:e6:ad:f6:c6:a7:d9:bb:c0:
                    a6:06:d8:66:c2:ce:6e:8d:85:ef:c6:8f:6d:3a:5b:
                    a9:99:3d:00:dc:6c:4e:1d:9f:36:39:fa:ae:14:03:
                    10:ff:12:d5:46:dc:f9:51:ca:68:58:21:d7:43:36:
                    9f:04:54:f0:dc:14:9c:15:37:e5:22:1c:a6:7a:e3:
                    2b:87:cd:d5:68:0e:cc:6d:22:d5:c1:88:5b:86:e2:
                    5d:b3:9a:85:8b:5e:03:15:54:9e:f6:cd:87:a0:16:
                    e1:12:c6:ea:f3:5e:7b:64:30:c2:5c:d6:05:ea:77:
                    7c:42:3a:3b:64:75:66:2c:e0:8e:79:45:0b:92:67:
                    f2:61:47:58:76:7c:82:e4:1e:b4:45:1c:b8:f4:ae:
                    d4:b6:25:f6:ec:ea:1b:7c:08:7b:4d:d4:3d:0c:cb:
                    91:64:04:db:8e:ba:47:42:3a:2a:78:5a:2a:0b:62:
                    d6:f2:3b:6f:4b:24:bc:58:cb:c1:44:4e:16:8a:1c:
                    69:63:51:2a:1d:11:b2:f3:26:e1:8b:7a:4f:20:6d:
                    b3:dc:9a:c7:87:78:f9:e3:22:f8:59:7a:c0:6e:f0:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A6:94:0D:F5:5D:6F:A7:62:2D:F5:DF:E3:39:3F:89:F1:7F:53:F3
            X509v3 Authority Key Identifier:
                keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:af:f3:5d:90:59:bb:3f:1a:6c:8d:f7:b5:8b:37:c5:20:03:
         0b:84:ce:47:a7:12:52:48:16:36:21:5a:48:89:14:12:8e:b9:
         f3:38:a5:16:e7:08:25:32:9a:ba:b9:a9:b9:ac:a1:cc:a6:74:
         93:7e:5d:35:13:83:66:5d:b9:98:75:16:f6:30:f0:df:1d:bf:
         25:48:09:40:1c:f6:3d:51:8f:b2:66:bb:37:ae:06:c7:ed:33:
         10:b5:e3:42:d7:48:b2:36:2c:85:4e:5d:82:4f:67:7c:06:f0:
         0d:77:e2:30:36:cc:93:8f:53:c7:ab:1c:7d:d9:78:2c:11:70:
         20:f2:ae:04:56:f4:a5:af:fb:a2:e8:ab:b4:07:75:62:88:ed:
         0f:18:d3:d2:94:e3:e9:d7:49:b3:fe:3d:f5:5f:2c:02:9d:87:
         ef:57:67:35:f7:c2:46:36:44:0e:bf:59:f3:f6:9b:17:0c:f5:
         86:1c:8b:bc:09:1e:a7:6d:0d:a6:4d:d7:38:6b:d7:dc:ea:17:
         ab:0c:18:ea:e9:8d:e7:8e:11:6f:f9:80:76:d8:78:7c:e2:40:
         24:dc:15:77:42:8d:03:c3:7c:f1:cd:35:cc:57:97:01:f7:2f:
         76:3c:ff:a5:41:74:19:27:17:94:72:62:6c:3d:85:3c:31:b7:
         3b:45:38:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:40:08 2026 by rpki-client