Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
File:                     7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json)
Hash identifier:          yZJQxTrvyQaeNy2GGtnkSoYcE3TRF9RJpfa7V3JewkM=
Subject key identifier:   F3:EA:B0:D0:0B:56:32:5E:BC:B8:85:B8:7B:0A:E8:2D:F6:2A:AB:72
Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29
Certificate issuer:       /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
Manifest number:          01AD
Signing time:             Sun 01 Mar 2026 04:45:51 +0000
Manifest this update:     Sun 01 Mar 2026 04:45:50 +0000
Manifest next update:     Sun 08 Mar 2026 04:45:50 +0000
Files and hashes:         1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: z4o/KrbuQvPMMUxnj2ldDCOyzX214TD3fNNq1cPE3NA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl
                          rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
        Validity
            Not Before: Mar  1 04:45:50 2026 GMT
            Not After : Mar  8 04:45:50 2026 GMT
        Subject: CN=69a3c47e-a50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:57:af:c1:3b:c7:7c:a0:e0:8f:74:85:fd:bb:
                    2b:be:55:91:b7:17:62:f0:ac:34:a7:61:a4:0e:4e:
                    b7:32:cf:19:5b:fd:b3:79:43:2b:b4:aa:fa:51:c6:
                    3f:69:16:9f:b5:77:d3:31:f0:02:57:73:75:7b:b7:
                    50:43:07:74:f2:65:0f:31:a9:53:b9:a3:35:a2:73:
                    76:7d:d5:36:27:32:91:f7:dd:93:e7:12:ff:e9:8a:
                    8b:f3:10:ef:d6:d7:97:48:2b:42:da:ec:be:22:a8:
                    45:1d:23:5c:30:54:18:f2:72:e0:49:50:ab:74:b8:
                    5f:80:38:4b:ed:5d:44:c9:f8:04:8d:5f:cb:6f:56:
                    d6:d6:4a:ca:f9:26:71:b3:c3:9a:97:14:32:88:30:
                    e4:df:11:cf:48:1b:31:35:11:fd:98:bb:48:43:83:
                    0c:ca:aa:6b:11:e5:4c:47:0a:ea:94:e2:ad:bd:f3:
                    77:7e:76:e8:ea:2d:8b:f1:80:2c:d5:d5:62:4c:e0:
                    f2:d2:eb:d1:53:26:7e:4f:7b:90:ae:0d:c9:b5:ca:
                    7f:0b:07:01:77:fe:3d:a1:f0:f5:51:4f:1c:15:b7:
                    bd:1b:58:a3:e5:d1:87:06:64:01:65:17:51:80:bd:
                    60:cf:02:54:cc:a8:29:ea:7a:f8:49:c5:29:20:b8:
                    54:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EA:B0:D0:0B:56:32:5E:BC:B8:85:B8:7B:0A:E8:2D:F6:2A:AB:72
            X509v3 Authority Key Identifier:
                keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6d:15:b3:98:6b:4d:2f:8f:00:08:5d:8f:71:21:42:4e:76:
         84:36:5f:6a:a1:e5:19:88:76:d6:ed:cf:65:db:c0:f0:11:95:
         94:29:d0:07:39:09:66:6f:8b:f5:ec:0a:3a:29:56:05:c9:30:
         eb:5d:65:dd:b3:36:0a:cf:de:a5:b7:79:c4:b1:b0:8b:b4:82:
         e3:ed:0d:a1:1b:17:fa:d8:1a:5c:62:99:b0:f8:1a:8a:98:3f:
         54:db:7e:2b:1b:e3:1d:34:6b:db:7b:1a:23:2b:82:aa:a8:42:
         95:66:58:63:25:87:27:14:3d:5b:bd:1f:92:ce:3c:13:3f:c8:
         79:a8:2d:82:ec:42:0a:45:8a:31:15:c3:fd:8b:ee:1d:ec:0b:
         f3:bc:19:8e:70:e8:eb:7a:d3:87:9e:a5:db:bb:eb:6b:90:f1:
         2e:ff:73:cc:77:f1:8a:24:78:64:1e:27:23:53:c1:46:7c:27:
         6b:e3:5a:bb:73:4e:fa:53:a2:0a:ec:13:c3:ec:b8:52:31:15:
         b0:89:a4:71:cc:75:e6:95:0c:e8:58:c9:1d:4a:95:06:50:09:
         37:ed:a7:b1:37:2b:84:bf:48:91:19:3f:84:08:89:3d:be:2d:
         14:62:ec:11:24:e0:70:4d:64:24:dd:d6:f1:01:94:d0:45:00:
         20:b0:2d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:13:27 2026 by rpki-client