Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
File:                     hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft (raw, json)
Hash identifier:          L/JnUIN3YsdPvNUjwknPNK5dhWcaYtN8RsKgiluNicY=
Subject key identifier:   D5:27:87:01:D1:5A:B4:41:AE:4F:F0:28:B0:E6:72:00:52:69:E3:1B
Authority key identifier: 85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
Certificate issuer:       /CN=A91E5EEA/serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
Manifest number:          D2
Signing time:             Sun 01 Mar 2026 07:54:08 +0000
Manifest this update:     Sun 01 Mar 2026 07:54:08 +0000
Manifest next update:     Sun 08 Mar 2026 07:54:08 +0000
Files and hashes:         1: hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl (hash: N0BHBjYeXys9bu+mTbU51Vpc4AKg+oz+UceGDyNGldI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EEA, serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
        Validity
            Not Before: Mar  1 07:54:08 2026 GMT
            Not After : Mar  8 07:54:08 2026 GMT
        Subject: CN=69a3f0a0-ec1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f5:e3:90:07:91:0b:70:f9:f2:96:ce:a0:12:
                    91:c4:18:00:41:22:f1:14:b1:92:67:d7:4b:10:90:
                    f8:a0:62:fa:75:2e:ab:6b:c0:19:fe:5a:66:e8:df:
                    92:07:02:00:c9:50:5d:68:79:2e:83:a6:ff:f9:97:
                    87:27:80:51:ae:e6:20:07:f1:26:a0:db:ce:c1:74:
                    9f:46:25:db:b1:1d:f0:4a:1a:0e:b8:34:de:11:ec:
                    99:3f:5f:97:29:ad:76:28:26:e2:15:77:47:bf:bb:
                    79:8f:57:a8:c5:9b:16:18:66:c2:58:07:29:e2:5f:
                    d8:5f:5d:da:44:b5:fa:c0:ce:09:14:39:4f:24:a6:
                    e3:67:58:8f:69:57:0f:42:e1:61:52:a2:2b:3f:31:
                    b8:7d:85:ad:9a:ac:d5:88:fe:b7:24:42:fc:f4:96:
                    0e:75:12:44:1c:f1:b3:09:f9:76:db:32:b2:1a:1d:
                    0a:5f:1e:98:84:f1:99:58:11:bb:c2:87:2d:76:f8:
                    08:93:a0:ba:73:ef:df:90:a2:21:14:6f:88:8e:c5:
                    78:f9:71:bb:62:0b:64:2f:cb:77:5a:b0:2a:bb:46:
                    2d:a0:e5:3d:5f:2c:7d:7e:31:a8:ca:38:27:39:78:
                    50:29:ca:fb:d9:cd:ad:ac:73:94:5b:d2:83:cf:73:
                    de:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:27:87:01:D1:5A:B4:41:AE:4F:F0:28:B0:E6:72:00:52:69:E3:1B
            X509v3 Authority Key Identifier:
                keyid:85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2a:a1:46:62:74:cd:64:29:a7:f2:39:86:e4:14:3b:41:cc:
         b8:eb:83:f1:96:ba:d0:86:f9:97:97:c6:4f:e3:61:b9:11:2b:
         5c:be:67:a7:a3:5b:cf:0e:6f:c9:75:58:d7:50:70:a2:de:ad:
         95:27:13:29:e8:32:49:8b:dd:e7:29:f5:f5:4c:cb:bf:57:1e:
         d4:f9:7e:4a:76:9a:30:c6:50:d4:1b:bc:f5:a9:94:6f:f0:b0:
         3a:e3:57:8a:0f:15:ff:94:17:fd:c2:36:0f:29:32:41:02:95:
         ed:0c:b3:43:8f:3a:4e:2e:45:4f:7f:c0:7f:3e:b4:ac:06:08:
         e3:87:d9:d8:49:e9:fc:d5:3e:ee:f1:8f:76:ac:34:94:28:5e:
         39:c7:c6:e5:f3:90:24:47:ce:fb:71:73:e8:51:eb:4e:97:1f:
         85:fb:8d:fe:fc:e9:5b:7d:5f:26:cb:63:43:bb:e5:5c:6c:3f:
         2b:ff:e6:2d:65:1b:9a:91:e0:02:96:31:69:99:3e:bc:83:24:
         5e:85:55:32:3a:43:c6:f5:f7:8e:2c:92:67:1c:15:33:d4:91:
         85:93:3c:8a:63:b9:9c:d4:74:04:a7:9a:63:70:5f:04:4b:1d:
         1e:52:71:c2:2e:f9:79:73:85:d0:bd:87:fc:07:6b:67:6c:b4:
         22:d2:67:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:41 2026 by rpki-client