Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
File:                     cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json)
Hash identifier:          7kZnKCiHJOSXLlcFPZenKA0JBLNSQjs1IjNuxmDufe8=
Subject key identifier:   CE:69:C9:3E:55:6E:C0:09:BA:A9:DA:D5:E3:C7:9A:06:BF:DB:B3:72
Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
Certificate issuer:       /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Certificate serial:       132C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
Manifest number:          486B
Signing time:             Sat 28 Feb 2026 14:21:58 +0000
Manifest this update:     Sat 28 Feb 2026 14:21:58 +0000
Manifest next update:     Sat 07 Mar 2026 14:21:58 +0000
Files and hashes:         1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: JBKn3GCJjWS5nT3Eu5Og43eA0M79fbIA/Q9mqMIC35I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4908 (0x132c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
        Validity
            Not Before: Feb 28 14:21:58 2026 GMT
            Not After : Mar  7 14:21:58 2026 GMT
        Subject: CN=69a2fa06-fd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:b9:a5:42:61:2e:7b:ec:67:72:35:3f:cf:
                    b0:78:79:51:bf:82:09:d6:a6:ad:6a:f9:e2:a0:ef:
                    ad:98:ff:70:5f:96:b8:f2:13:3e:8d:56:eb:ed:e1:
                    d4:d3:d4:c4:01:73:7e:7e:16:52:40:cd:6a:4b:2e:
                    0e:c2:41:f9:06:d2:22:0f:4b:6d:40:d1:c1:b1:e8:
                    4e:7b:6c:1a:ba:55:9f:7f:ea:95:8b:87:d4:b5:6e:
                    5b:9f:3a:e6:6b:6b:ad:72:a8:60:65:68:e0:1c:a9:
                    67:0c:5a:46:cc:bb:8e:a0:d9:c7:e6:72:ce:b5:fc:
                    fd:d8:87:ed:e9:ae:29:cb:4b:74:94:46:a5:f2:b5:
                    cc:6f:3a:c2:c7:f0:ae:0e:44:7d:cd:ac:e7:5e:11:
                    09:f6:5c:3d:6b:1c:cd:55:a4:55:bd:a3:7e:e7:1d:
                    27:6a:fa:cc:0d:bf:1a:45:4c:fb:45:26:42:4a:a1:
                    28:00:d3:c1:3b:20:a1:67:bc:d7:dd:46:11:b6:9b:
                    42:6f:4f:ae:5f:d6:60:ca:43:80:d7:5c:02:3b:e8:
                    a2:5c:a5:a6:af:e7:2d:d1:13:d0:3d:ed:1c:2d:4e:
                    7c:c8:90:c0:95:39:3d:f2:31:88:94:e5:c4:e2:57:
                    f8:c1:90:cf:73:9e:81:0a:d4:0a:26:02:56:21:60:
                    2a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:69:C9:3E:55:6E:C0:09:BA:A9:DA:D5:E3:C7:9A:06:BF:DB:B3:72
            X509v3 Authority Key Identifier:
                keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:91:9d:c9:90:0b:83:76:64:4f:a5:04:b9:fd:4d:89:06:20:
         ee:1f:77:82:77:ad:50:26:fc:20:85:be:92:92:7d:e7:0a:45:
         4a:0e:ef:77:d0:43:0f:11:8b:e1:bd:b1:a7:18:b4:25:32:15:
         32:ce:bb:23:d9:ab:31:35:51:05:21:16:cc:51:e3:14:aa:1d:
         cb:f9:0f:9a:f2:47:7c:9b:f3:6e:90:d4:f3:51:82:52:f5:d6:
         e2:8f:6c:af:eb:0c:ac:8b:3f:b6:f8:1a:79:87:19:83:e9:bb:
         9f:f4:d0:1a:9c:ea:ff:d5:ab:b3:ce:19:0e:1d:49:79:30:18:
         9d:e3:66:7d:6f:fe:4a:d2:65:07:44:14:79:4b:5b:60:25:43:
         09:50:82:84:90:3b:79:78:00:31:9d:0b:9d:df:6e:52:cc:93:
         85:77:57:50:3c:cd:43:2c:fe:59:c6:90:a3:37:22:66:7c:a2:
         4d:e5:e9:52:79:b4:57:9a:4a:76:35:56:5d:13:33:3d:29:8a:
         ac:a0:3f:1d:f3:e3:f1:38:67:df:ec:4a:01:5f:4d:d5:48:11:
         7a:b9:72:d4:32:e8:fa:9e:d1:92:ac:dc:ba:6b:fa:c5:d6:2a:
         9c:ac:39:34:8c:da:f1:e9:b4:a5:e4:dd:0a:46:ea:bb:7f:d8:
         3e:35:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:58:48 2026 by rpki-client