Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
File:                     9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json)
Hash identifier:          IJA6H0H8mN0ax5+egOSk7OkLzYxlmCSLW/jwGITW/QQ=
Subject key identifier:   BD:88:67:7A:CE:76:1E:1D:3C:57:3F:2C:F7:88:75:2B:36:3C:B2:07
Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5
Certificate issuer:       /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
Certificate serial:       0390
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
Manifest number:          0390
Signing time:             Sun 01 Mar 2026 01:37:09 +0000
Manifest this update:     Sun 01 Mar 2026 01:37:09 +0000
Manifest next update:     Sun 08 Mar 2026 01:37:09 +0000
Files and hashes:         1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: d3lYN4xUXXFZT8GYfIQ+dAaPyUnWh0H2GLwoT/ALgWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl
                          rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
        Validity
            Not Before: Mar  1 01:37:09 2026 GMT
            Not After : Mar  8 01:37:09 2026 GMT
        Subject: CN=69a39845-537f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:2d:3a:83:45:65:30:49:72:ec:86:7e:24:
                    fb:62:e4:e6:34:10:29:29:39:cd:67:16:2a:bd:40:
                    1a:10:b7:9c:35:c5:c3:4a:c2:90:36:66:b7:bf:9b:
                    ca:b9:c0:31:2d:6b:24:bf:2b:c7:b7:d7:1f:a9:22:
                    9c:a5:ec:0d:8f:aa:e8:b0:74:d6:1b:81:46:e3:90:
                    a8:26:cb:e5:2d:a5:e6:0b:c0:c4:b4:df:34:fc:19:
                    61:17:d4:d4:37:ef:11:fe:9e:1a:b2:e4:6a:4a:d1:
                    cf:2b:8c:9e:ed:d4:e4:5c:3c:91:f8:c1:03:d4:bd:
                    4f:5a:2d:5b:fb:a6:24:ae:33:76:0e:43:63:35:fc:
                    3b:34:d6:27:e3:84:97:2d:6b:e3:48:dd:e6:01:58:
                    77:d5:54:69:a6:9c:a4:f9:c2:a2:40:19:d7:0d:b0:
                    98:d4:0b:f2:76:e2:59:00:31:0b:ae:22:15:f0:e6:
                    ba:94:de:df:1c:61:38:8d:bb:d9:ad:d8:9d:87:df:
                    f6:49:0c:fc:18:68:1b:61:50:aa:01:4d:07:02:72:
                    a8:c0:65:25:da:35:aa:7c:a7:e2:63:81:7d:6f:17:
                    e9:ee:90:61:c0:df:78:11:78:e9:ba:7f:a8:81:32:
                    80:29:d3:9d:cf:0e:68:91:c6:8a:87:50:f6:89:c8:
                    7f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:88:67:7A:CE:76:1E:1D:3C:57:3F:2C:F7:88:75:2B:36:3C:B2:07
            X509v3 Authority Key Identifier:
                keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:5b:50:d4:d2:f6:03:97:05:31:27:ec:49:68:4a:b5:92:f8:
         29:e4:23:a7:ff:8d:16:40:cd:49:ff:80:d9:6b:cb:77:57:85:
         75:ee:0b:5b:46:e2:6c:01:bf:4d:e5:10:50:63:b9:d6:ab:a7:
         c9:0c:e1:4e:56:90:ca:64:89:a6:0e:16:f8:f2:7a:5d:b8:c6:
         4c:7e:da:8c:c7:77:c3:84:c9:9b:8e:8f:9b:aa:ee:62:37:d5:
         bf:34:38:84:29:2c:59:4b:7d:44:94:1a:74:11:6c:2b:55:41:
         93:0f:e8:ab:a5:6d:9d:92:61:9b:10:9a:97:99:d7:a3:c5:fb:
         a4:52:0c:a2:e5:d0:ec:9f:3a:b8:52:38:f3:46:a5:85:4b:1e:
         95:e0:23:c4:7f:95:a7:eb:ec:9e:19:cd:2b:41:51:85:b9:86:
         8a:11:5a:00:73:4d:35:73:2e:8a:54:b1:2b:61:38:1b:f3:8e:
         75:8b:a5:e5:f3:d0:60:78:d1:ba:df:af:38:ff:17:4c:71:41:
         10:83:ba:71:78:24:c1:b8:cd:c3:ac:84:d5:74:69:92:72:1c:
         02:8c:80:51:67:11:32:9e:ff:26:46:23:c1:15:56:50:ad:1a:
         2b:c1:48:a4:6e:96:26:5b:84:3b:6e:da:66:f3:b6:43:fb:3c:
         08:bb:c4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:15 2026 by rpki-client