Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
File:                     0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft (raw, json)
Hash identifier:          fT+VulqIXZyfZFzNSuYwwapWiPicjUgzJcDP8s7eZto=
Subject key identifier:   38:41:4F:C9:E6:AD:47:28:2F:C0:5B:DF:8A:17:1A:6F:14:1B:9E:5D
Authority key identifier: D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4
Certificate issuer:       /CN=A91EB820/serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
Manifest number:          73
Signing time:             Sun 01 Mar 2026 09:12:49 +0000
Manifest this update:     Sun 01 Mar 2026 09:12:49 +0000
Manifest next update:     Sun 08 Mar 2026 09:12:49 +0000
Files and hashes:         1: 0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl (hash: KKfqE2+Z4GtpTAy/KM0GEzAeJ6WxlzYz9K/M29LH1CI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB820, serialNumber=D0E03AC097DC00129D03253F1C9DD76D2A71D8F4
        Validity
            Not Before: Mar  1 09:12:49 2026 GMT
            Not After : Mar  8 09:12:49 2026 GMT
        Subject: CN=69a40311-c215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:04:75:bd:6d:5b:7b:74:6c:97:c2:53:d3:
                    ff:b7:20:c4:85:85:fd:c3:e9:11:cf:c2:2d:60:b2:
                    08:a1:32:12:83:d4:6f:4e:4c:bb:38:03:ba:3a:bd:
                    40:e8:2c:ba:ef:75:0c:0f:f1:82:5c:fa:17:92:b9:
                    14:40:d3:a0:a1:c4:56:99:d1:a0:ca:03:f7:4e:c9:
                    0f:00:95:ae:7c:81:d6:77:51:40:ef:c1:98:2c:c7:
                    45:b3:2a:41:13:5c:97:3c:d3:eb:9c:f7:fd:cd:f1:
                    69:99:3c:e3:d2:aa:5c:70:a7:09:30:80:20:5e:32:
                    9d:d2:e0:3a:da:90:94:19:2f:e8:fb:d5:35:72:42:
                    6f:65:aa:e8:95:07:6a:a4:48:b5:2a:b3:5c:ef:3a:
                    83:1c:f7:f5:e3:be:eb:2e:56:fc:81:b9:f7:a7:d5:
                    6f:60:58:f5:cb:aa:bb:9b:a9:2f:db:3e:b5:cf:eb:
                    22:b2:66:3e:c7:d6:5b:92:41:c9:d2:04:03:f3:00:
                    68:51:5c:84:ed:70:d1:d0:6a:cc:da:c4:a6:f4:c3:
                    05:c9:6b:3f:5b:75:94:e3:98:9b:0a:9e:a7:b6:c9:
                    cd:f4:63:b4:b5:be:32:27:8e:f7:3a:b0:70:56:c1:
                    e0:69:b2:a5:0e:62:5d:86:30:86:20:9d:ea:5f:71:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:41:4F:C9:E6:AD:47:28:2F:C0:5B:DF:8A:17:1A:6F:14:1B:9E:5D
            X509v3 Authority Key Identifier:
                keyid:D0:E0:3A:C0:97:DC:00:12:9D:03:25:3F:1C:9D:D7:6D:2A:71:D8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/9A22DEC4684011F0A940476BC4F9AE02/0OA6wJfcABKdAyU_HJ3XbSpx2PQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:29:56:fd:2c:3e:8c:5a:74:c5:de:0f:b8:5b:53:7a:fe:73:
         de:92:80:88:af:5e:ee:ac:b1:19:f9:d6:1d:72:ec:56:9e:48:
         ac:23:dd:20:07:c8:dc:36:c2:1c:ff:c0:55:a5:44:d0:8f:c7:
         6c:6b:2a:31:ad:a8:e4:46:bf:da:5c:c0:17:15:c3:43:fc:ee:
         c2:dc:b7:fa:58:83:55:9c:8a:35:37:00:61:d1:bb:c8:08:21:
         15:d7:e9:bd:ea:09:4d:27:e3:a1:ca:07:1b:a2:97:70:8f:52:
         e9:60:d9:fd:f3:06:ec:00:81:94:93:3b:67:74:42:0a:67:05:
         85:7a:72:2c:09:96:15:57:47:d6:2a:83:c7:cb:31:84:89:e6:
         fa:93:cb:fe:6c:2c:43:3b:98:8a:4f:dd:73:62:1f:38:6a:3c:
         94:7d:90:24:6f:9a:03:36:3f:d1:89:63:b3:3c:57:0d:38:fd:
         48:59:19:9e:2f:f4:52:63:4f:39:7e:d4:fa:75:88:12:e3:2b:
         fd:db:30:f3:e9:c3:77:f7:10:87:92:02:72:4f:aa:cc:eb:19:
         fa:b1:01:19:d8:ab:72:bf:7b:13:c2:45:98:49:2c:98:cb:8d:
         d3:aa:d1:13:77:f5:7f:59:8e:4a:ee:5b:3e:9a:b9:79:c1:3a:
         d1:c3:e6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:38 2026 by rpki-client