Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
File:                     N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft (raw, json)
Hash identifier:          RBX2TGfyp+pxK6NFDPlMzI8+LrkNnuo7t86iLlTwdyo=
Subject key identifier:   99:85:CD:38:A2:41:17:AC:D7:6A:12:82:33:D4:FA:C7:5C:02:EC:31
Authority key identifier: 37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1
Certificate issuer:       /CN=A91EA409/serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
Manifest number:          F9
Signing time:             Mon 02 Mar 2026 01:28:21 +0000
Manifest this update:     Mon 02 Mar 2026 01:28:19 +0000
Manifest next update:     Mon 09 Mar 2026 01:28:19 +0000
Files and hashes:         1: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl (hash: B5/lB812IvnYZbUBWOKzzaITdpZ1Boc+JF4H0kheZlg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl
                          rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA409, serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1
        Validity
            Not Before: Mar  2 01:28:19 2026 GMT
            Not After : Mar  9 01:28:19 2026 GMT
        Subject: CN=69a4e7b4-868a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:da:37:2d:5c:ee:7b:ea:d4:32:0c:82:7a:
                    b4:d1:31:52:a7:7e:a9:f9:ae:9a:96:38:a1:fd:96:
                    46:67:c0:a3:60:67:6a:65:92:62:92:d7:83:7d:e8:
                    b7:c6:ed:51:7c:a1:79:8e:c0:a4:0b:09:2e:72:93:
                    05:85:08:53:45:7e:e7:e3:1e:c1:ee:ee:b6:c2:fa:
                    82:78:c9:10:47:c2:a1:6a:64:44:dc:a8:d5:61:ad:
                    49:b4:6f:d2:4e:36:1a:e5:27:08:3e:33:2a:70:b0:
                    0d:c1:b7:0d:5a:11:15:f7:ba:dc:08:17:0d:ff:7c:
                    da:56:bc:58:0d:60:34:42:02:e8:41:46:ba:5d:68:
                    3b:4e:bb:51:28:f2:d0:ff:22:e8:33:43:ad:95:c2:
                    48:0e:9e:1e:fb:9e:0c:31:03:a4:6d:b7:b1:ae:2c:
                    48:6a:66:0c:aa:1d:a2:12:a6:47:93:95:84:68:3c:
                    b4:d9:50:b3:ce:d5:19:4c:78:71:bb:a5:82:09:34:
                    72:a9:bb:46:20:5d:ea:db:9c:0a:24:84:68:4c:c5:
                    a3:67:aa:7c:64:03:69:dd:13:7d:3d:94:b3:6e:e1:
                    00:a6:eb:93:e8:27:64:cf:95:92:67:d2:d7:f2:62:
                    7b:d6:92:39:f2:22:a7:73:3f:56:b2:5b:6a:8b:94:
                    b5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:85:CD:38:A2:41:17:AC:D7:6A:12:82:33:D4:FA:C7:5C:02:EC:31
            X509v3 Authority Key Identifier:
                keyid:37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:70:e1:12:18:a0:d4:b7:d1:71:c9:30:f0:06:f4:f5:42:6c:
         bd:01:47:69:0e:89:ec:73:96:42:a8:da:47:5d:dd:41:38:bd:
         f8:7e:bc:af:d1:50:a0:ed:88:35:5d:67:4a:dd:06:49:1c:e6:
         7f:81:27:c6:b3:ca:f3:0e:aa:66:d4:04:a8:46:5d:07:39:04:
         19:73:14:dd:6a:b4:ac:78:4f:83:2a:00:6f:0e:c2:09:53:1a:
         f1:db:c6:56:56:bc:dd:01:bd:3d:68:ff:c4:46:bf:31:84:b9:
         6d:12:9e:c3:6d:e7:70:b6:36:ec:72:1b:4c:a8:93:ed:bf:de:
         ac:e9:e8:7a:47:ea:ea:f8:cd:a6:75:85:96:49:09:12:81:61:
         98:fd:fd:78:28:e0:89:98:1f:21:c6:6e:31:76:cb:45:21:b2:
         fe:7f:32:82:11:5f:b0:8d:9d:4f:0e:0c:43:dc:95:18:df:b5:
         89:e9:82:ed:7a:26:31:46:18:1a:c4:97:b8:46:b3:9a:24:dd:
         2d:2d:9e:b3:e6:7b:01:ae:13:b9:cf:cd:94:b6:32:a1:f1:4b:
         a6:63:b5:89:92:c5:cd:53:25:c7:0b:b7:88:06:c9:90:1c:21:
         02:2c:aa:f5:3f:a0:89:e1:84:9e:a7:ea:25:66:4d:18:7b:e3:
         e3:aa:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:13 2026 by rpki-client