Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
File:                     72Nt-xWS8CIgFrAPrKJwNXP00oI.mft (raw, json)
Hash identifier:          r7hVIxlHMDhSCXGWnrIDZSYD77YnDSkxzD5FcQ5DHOk=
Subject key identifier:   5F:7F:EA:69:40:34:29:5F:B1:79:BE:C5:4F:74:F3:A6:9B:FF:AD:BB
Authority key identifier: EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82
Certificate issuer:       /CN=A91DC8BD/serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
Manifest number:          01DC
Signing time:             Sun 01 Mar 2026 04:16:06 +0000
Manifest this update:     Sun 01 Mar 2026 04:16:06 +0000
Manifest next update:     Sun 08 Mar 2026 04:16:06 +0000
Files and hashes:         1: 72Nt-xWS8CIgFrAPrKJwNXP00oI.crl (hash: SrwSpL0oCbF8PV3IvECv4Uir62/K17xoFyqR2kewBEU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl
                          rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC8BD, serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282
        Validity
            Not Before: Mar  1 04:16:06 2026 GMT
            Not After : Mar  8 04:16:06 2026 GMT
        Subject: CN=69a3bd86-ce30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:c4:05:4f:3d:6a:b5:c7:dd:20:0f:c4:90:
                    7c:90:cc:64:4f:ae:6b:70:04:e8:ef:eb:47:f2:b2:
                    48:20:d5:53:b2:c9:5c:41:a0:b5:40:8b:22:c4:5e:
                    ae:21:e7:87:d4:e9:2b:fb:21:64:8a:fb:e6:8e:7b:
                    22:03:07:6c:85:1c:ac:ad:4b:93:b8:57:5a:26:dd:
                    e7:6d:eb:29:93:f5:14:dd:5a:40:a7:a3:88:86:d8:
                    c5:93:51:d6:3d:0a:94:db:07:cc:9e:68:6c:df:79:
                    c3:55:56:de:21:8e:fc:82:2f:44:7f:66:02:fd:c8:
                    2f:3c:db:fe:ca:75:45:e0:6e:12:de:9b:e7:51:2e:
                    c9:2e:40:0a:8b:00:ee:41:ef:e2:d0:06:02:4a:95:
                    80:97:cf:6d:bc:eb:dd:d3:5f:84:84:e8:8d:9c:b5:
                    85:9f:91:0c:99:1b:9b:3c:c2:c4:b3:24:7e:5c:85:
                    2c:16:26:10:69:35:63:5f:6e:29:9e:70:bc:8d:5a:
                    3c:ba:82:8d:a1:3f:09:49:ff:3b:1a:82:17:dc:2d:
                    0a:8f:e5:00:21:09:34:34:cb:0f:f9:e3:2a:d3:f3:
                    1d:2e:ab:a9:ee:c5:4c:76:37:ed:8c:9b:b3:ce:d8:
                    14:46:0b:23:25:4c:0e:dc:c4:7f:11:e0:49:84:91:
                    41:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7F:EA:69:40:34:29:5F:B1:79:BE:C5:4F:74:F3:A6:9B:FF:AD:BB
            X509v3 Authority Key Identifier:
                keyid:EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a4:ec:eb:88:be:09:14:b2:90:5b:f0:40:ea:62:47:0e:32:
         b4:7e:3a:0d:e6:f9:48:2d:6a:68:48:62:fc:be:74:4d:eb:7f:
         1d:49:fa:79:83:7e:6e:5c:2a:70:23:48:c7:7b:15:16:d7:de:
         2f:1b:93:22:e5:8e:01:58:73:54:cb:5b:30:6b:c4:f9:29:d2:
         a6:41:7d:76:da:bc:0c:82:d3:dd:30:96:72:dc:e6:7c:0a:41:
         d4:cf:b6:a3:52:58:22:0c:95:c4:75:26:29:34:ba:75:06:e8:
         43:6b:a2:d0:25:15:96:df:24:42:94:17:e3:c0:bf:3a:74:89:
         9f:41:5e:87:8c:67:dc:f5:8b:b8:ca:61:8d:b5:44:f7:51:e6:
         2b:35:6b:e6:0f:59:b2:26:fe:42:bd:b7:2a:80:e5:28:d7:26:
         6b:be:73:0f:f3:fb:5f:9d:6a:3f:7a:59:eb:42:cf:1f:13:a3:
         af:f0:b6:37:4b:20:7b:78:f9:c0:ce:ae:e6:5b:e5:38:05:a2:
         d0:ce:8d:8d:04:50:39:28:d2:01:ce:fe:c4:7d:d6:a4:58:b3:
         26:d1:f0:06:3a:e5:f7:b0:8d:b5:ec:6b:4b:c9:31:c2:5b:e2:
         de:4f:f3:b1:d3:e4:f3:b9:be:de:f6:16:19:b6:b6:1f:18:9b:
         cc:5a:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:53 2026 by rpki-client