Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File:                     cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier:          wwdkSIloKb2qNVG6Pc9vr+hZJKpFu1+vtEiTeyAq4Zo=
Subject key identifier:   80:0F:59:8B:3E:8F:E9:10:D1:A1:60:44:CE:6F:56:43:24:7D:C3:92
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       0686
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number:          066A
Signing time:             Sat 28 Feb 2026 23:10:56 +0000
Manifest this update:     Sat 28 Feb 2026 23:10:56 +0000
Manifest next update:     Sat 07 Mar 2026 23:10:56 +0000
Files and hashes:         1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: DadxyGvw7/lRaO8PIMhiLrkKEzuQL642gc1RYuWVtAc=)
                          2: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: pzVGtJuglLRxF/Eq8FNCa3K2+vkm9IUKeDm8AbcXfX8=)
                          3: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: 0MKRGhD7VGcMSXw/ROEFU8wnZ9ENIjqkmhL8/Vmz8tg=)
                          4: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: YWG8ZTu1MykDiOqV56oC4ORjTxnyQ1AQFIwIn6af5iU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670 (0x686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Feb 28 23:10:56 2026 GMT
            Not After : Mar  7 23:10:56 2026 GMT
        Subject: CN=69a37600-daab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:6f:45:92:51:a1:80:b2:b6:b1:a8:1a:b6:
                    44:be:62:4c:e1:6d:ca:a8:89:9c:50:4e:e7:1b:aa:
                    40:cb:6d:51:98:90:d0:cb:dc:94:c9:9a:5e:a4:08:
                    20:e8:7a:bc:fc:73:db:31:4f:02:cb:9f:3a:c8:bc:
                    e6:20:5b:f9:84:20:45:e4:ec:89:e4:e8:ae:8b:b6:
                    64:9a:dc:e4:a2:58:fe:53:46:87:cf:e3:c3:ec:3f:
                    f3:9e:25:a8:de:bb:a9:98:85:50:af:1d:93:97:d1:
                    5f:fb:81:1b:a0:4b:4f:12:38:de:42:e2:60:39:09:
                    fa:27:96:6f:18:63:2b:81:1e:b6:4e:cc:f1:6e:c0:
                    62:09:41:06:3b:3a:69:e6:7e:e2:c2:57:39:07:46:
                    03:86:79:a0:40:9c:d9:d3:a0:81:1c:ae:d7:12:ff:
                    35:5b:f6:9e:0d:66:b0:a8:40:08:e0:8e:f9:f9:63:
                    dd:44:b8:9f:f9:3f:f6:0b:ca:1a:84:4c:4c:01:bc:
                    38:b1:cb:5f:a8:d2:58:59:fc:f6:ce:3b:fd:b6:e0:
                    9f:9d:9b:fb:92:ba:fd:b3:4a:26:49:02:30:c2:33:
                    47:3e:78:42:95:65:ae:fe:8f:7b:44:d0:d1:ca:a1:
                    e8:86:db:f0:fe:c0:c9:41:c1:a7:bb:7a:f8:cf:6e:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0F:59:8B:3E:8F:E9:10:D1:A1:60:44:CE:6F:56:43:24:7D:C3:92
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7e:71:ff:0f:da:17:39:de:6f:73:2d:ff:fe:64:01:6d:a1:
         29:78:0a:19:6c:42:41:ec:5b:8c:d6:c3:10:cc:a5:db:5a:73:
         2d:5d:13:49:fb:b0:da:32:f6:78:b2:50:6b:63:e5:30:c8:af:
         5b:54:da:37:7c:66:b8:83:eb:28:59:94:f9:1b:50:0b:e6:eb:
         a5:95:e8:82:a5:80:cb:d5:27:5f:0b:0e:5e:41:2d:9a:eb:07:
         15:a0:00:57:22:3c:be:c9:59:15:60:89:87:d6:b4:24:8c:31:
         ac:8f:94:7f:3c:db:bc:0d:8b:b3:d5:9d:19:bd:03:65:38:da:
         85:2e:6e:c5:d7:43:de:29:c5:02:a9:14:81:78:fb:c8:04:e8:
         f1:6c:2a:2c:eb:99:14:8e:f2:56:2f:30:14:d2:d9:fa:78:5f:
         2e:42:cd:8f:60:52:62:c6:66:04:a8:13:08:bc:58:7d:4e:e8:
         68:44:3b:b4:ce:09:b3:fa:df:b1:25:d7:dd:dd:1a:42:5e:86:
         ce:74:28:6b:f8:ed:1a:48:c7:78:93:0a:86:2b:75:e5:f6:01:
         0d:3b:fc:49:10:f7:2b:0c:d3:c0:43:81:a4:98:aa:2b:24:af:
         56:f2:19:29:68:5b:c0:e3:09:18:95:0c:98:09:0e:86:b5:97:
         68:c2:04:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:34:05 2026 by rpki-client