Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
File:                     acgZi9o_0JBT9CVT1z7qFRIdJBw.mft (raw, json)
Hash identifier:          oCWNBkJCDGF7pTKxhNyML5kFeoZzTJopO9Io55E/yJE=
Subject key identifier:   23:7A:84:A9:F5:4A:E4:F9:E0:24:85:B1:E1:27:1B:FB:BA:54:95:C6
Authority key identifier: 69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C
Certificate issuer:       /CN=A91E4F66/serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
Certificate serial:       0BEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
Manifest number:          0BDA
Signing time:             Sat 28 Feb 2026 19:07:14 +0000
Manifest this update:     Sat 28 Feb 2026 19:07:14 +0000
Manifest next update:     Sat 07 Mar 2026 19:07:14 +0000
Files and hashes:         1: acgZi9o_0JBT9CVT1z7qFRIdJBw.crl (hash: Z0KXFp4H18nuRiczBBD6y++8BUiSbgA4uVtZ8lBqilU=)
                          2: A3BE70CCD5AE11EE909D5C40C4F9AE02.roa (hash: pyQz1D6782Rt8rbYkLjsLImtzM5OVg/DTRlj4Kga3+Q=)
                          3: C53629FEEACE11EEA8513D34C4F9AE02.roa (hash: fM914915Khakkai2qWkeTKAeeQDgBvP101R4o1zFbdM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3050 (0xbea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4F66, serialNumber=69C8198BDA3FD09053F42553D73EEA15121D241C
        Validity
            Not Before: Feb 28 19:07:14 2026 GMT
            Not After : Mar  7 19:07:14 2026 GMT
        Subject: CN=69a33ce2-6398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:d5:cf:90:f3:1d:26:3c:1a:a6:36:9f:73:
                    e8:40:31:80:fc:f0:b5:42:c8:56:72:41:e9:9f:6c:
                    89:9c:35:a9:94:c9:d6:25:dc:91:92:1f:d2:a0:bd:
                    fd:33:54:4b:ff:6c:78:57:21:05:4f:bd:08:4e:3f:
                    67:ba:6d:57:12:d7:68:b4:a2:2c:fd:33:53:c2:b5:
                    be:83:fe:64:81:1f:73:f1:42:b6:29:2e:d4:08:26:
                    35:be:0a:d7:15:5f:4c:57:87:7c:76:dd:49:89:08:
                    7d:b9:5d:b4:f1:e0:e8:b0:24:0b:1d:69:89:b0:c7:
                    aa:ec:ea:c4:89:cc:f7:0d:39:fa:65:29:91:88:6b:
                    33:d4:44:2f:1c:52:04:b3:45:7a:29:a6:a9:a3:ac:
                    29:14:c6:b6:97:b5:66:9b:9c:8d:5f:db:31:5e:1a:
                    6c:ba:37:b7:71:5b:72:41:28:68:ac:a9:ea:33:e5:
                    38:61:eb:97:be:8e:c6:69:dc:b1:79:0c:51:4c:70:
                    30:af:46:d3:17:0a:f8:0e:2a:d6:4b:02:7c:bb:fc:
                    d7:ad:bb:b3:1c:f6:31:8d:0d:0c:ed:cc:74:11:5a:
                    08:ca:75:c5:37:d4:60:28:6c:55:7a:b1:87:a9:c8:
                    47:70:4b:59:85:d5:3e:49:d0:70:c3:bd:06:69:f7:
                    16:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7A:84:A9:F5:4A:E4:F9:E0:24:85:B1:E1:27:1B:FB:BA:54:95:C6
            X509v3 Authority Key Identifier:
                keyid:69:C8:19:8B:DA:3F:D0:90:53:F4:25:53:D7:3E:EA:15:12:1D:24:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acgZi9o_0JBT9CVT1z7qFRIdJBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4F66/E5F658AA368A11EAB5749272C4F9AE02/acgZi9o_0JBT9CVT1z7qFRIdJBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4f:19:8e:87:4b:5c:9d:30:37:6f:20:a2:fe:24:85:32:3d:
         2c:06:96:7b:28:20:3b:fd:10:bc:06:63:f5:89:6b:84:fe:40:
         5b:71:2e:f0:a3:9d:65:5d:35:3e:c7:31:3a:fc:7b:d2:d1:60:
         69:9d:82:76:75:30:2c:bc:6d:e1:96:58:60:69:24:cd:bb:68:
         54:5d:fb:10:a8:3f:77:90:1c:c3:94:e4:58:15:14:d2:ba:35:
         5e:9d:37:be:1d:75:aa:4e:15:82:1f:a2:21:78:63:c0:5f:f9:
         17:83:2c:fa:27:56:6f:dd:25:2e:e1:f4:7b:00:4c:3d:5e:11:
         af:16:7c:08:5e:37:76:0f:95:02:c0:bb:a5:84:0d:fb:0b:6a:
         7e:d3:a5:ee:b1:8f:48:f9:5f:04:24:f9:8b:24:c9:ae:f2:d5:
         7a:63:96:73:ae:66:cc:08:96:da:39:52:b7:95:17:80:d7:fb:
         2e:b6:ee:23:da:95:d1:e9:35:0b:f3:d5:83:12:b0:bf:ce:62:
         67:5f:06:17:2c:3e:98:c5:1c:ed:08:ae:fc:b2:8f:45:c4:9f:
         fe:6f:09:0b:2c:ee:48:69:ed:9d:b6:12:d4:7a:3c:e0:d7:31:
         9b:85:a4:1c:ed:e5:07:c8:14:3c:7b:90:75:9f:5d:f2:bf:59:
         a2:7a:ef:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:37 2026 by rpki-client