Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
File:                     cL0eSV4lCyLieYKWlpeFotd9c38.mft (raw, json)
Hash identifier:          fWiPqywkl0U+8OmoQd0Wym/6lVxMUexyKLzsyT2tj48=
Subject key identifier:   ED:10:70:E6:A7:29:3D:5E:7B:0E:19:41:2F:54:6B:3C:CD:A1:FF:68
Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F
Certificate issuer:       /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
Certificate serial:       07D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
Manifest number:          07C3
Signing time:             Sat 28 Feb 2026 21:48:21 +0000
Manifest this update:     Sat 28 Feb 2026 21:48:21 +0000
Manifest next update:     Sat 07 Mar 2026 21:48:21 +0000
Files and hashes:         1: cL0eSV4lCyLieYKWlpeFotd9c38.crl (hash: jTLgzoGENz1W2o9h4Sr83VyWb/L+TLRn9AYXlJPqTmc=)
                          2: D8EA255C2FBC11EB8E017F5CC4F9AE02.roa (hash: QcINMhPugXakfHhYWsf4t0lmoNzm+ZXfVIXhNA2VxIA=)
                          3: D992CDCE2FBC11EB8E017F5CC4F9AE02.roa (hash: ms/taZmD2/o24c1Khq9ZB9VElH0aqAVMPoZoMLJ7l7o=)
                          4: AEFB1B262FB111EB89A04D37C4F9AE02.roa (hash: C9YBNy3SJzx+k9ZBQHZtbIXi++eZ8FDncm2ByZsrMrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl
                          rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2005 (0x7d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE1C4, serialNumber=70BD1E495E250B22E2798296969785A2D77D737F
        Validity
            Not Before: Feb 28 21:48:21 2026 GMT
            Not After : Mar  7 21:48:21 2026 GMT
        Subject: CN=69a362a5-8921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e0:e5:25:cc:bc:e3:28:69:c2:46:38:09:b6:
                    ba:15:ab:ec:ac:13:76:25:ad:82:a8:3e:be:be:87:
                    58:fc:94:3e:66:6a:0f:52:2c:39:fb:23:1b:15:1c:
                    b1:e2:db:47:e0:6d:1f:3e:fa:56:e0:35:80:0c:c9:
                    30:a3:9d:d8:3e:a5:a2:83:a5:13:e5:78:0e:a5:25:
                    83:cf:65:1d:2e:af:67:50:03:b9:ca:2c:c3:9c:d3:
                    06:6b:58:91:0e:a4:68:67:d5:b9:46:73:65:b2:f9:
                    f6:a7:65:b6:40:9d:ba:de:47:9e:9c:8a:59:a5:af:
                    5f:36:50:83:41:cc:a1:81:e1:9a:4e:a1:eb:02:40:
                    e5:12:e2:03:41:f3:71:f4:04:a6:77:02:7e:b1:e8:
                    34:d2:58:f3:91:9d:8f:dd:79:5b:d3:40:52:9d:bc:
                    40:89:7b:61:6f:94:4e:76:d7:cb:90:2c:95:41:35:
                    23:2f:15:15:5d:86:8f:b1:3b:a6:40:24:67:07:6a:
                    2e:b2:cc:c6:f2:94:b1:04:8b:87:51:2e:56:fd:4e:
                    79:a7:13:76:20:95:e8:c9:42:a2:52:ed:90:1c:08:
                    c5:f8:9b:d7:e8:1d:05:d2:8d:e8:00:b4:74:e4:cf:
                    7a:75:eb:d3:1e:3b:55:69:30:ef:19:90:16:9b:0a:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:10:70:E6:A7:29:3D:5E:7B:0E:19:41:2F:54:6B:3C:CD:A1:FF:68
            X509v3 Authority Key Identifier:
                keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7e:00:4e:3a:68:23:db:06:52:58:10:bb:45:b6:c8:6b:02:
         4d:13:c2:1f:25:52:a8:01:cd:5f:21:32:9c:20:fc:a9:72:92:
         cd:0e:f0:ea:49:e5:f0:38:b1:a7:af:13:d1:37:29:df:4e:f9:
         58:64:da:da:13:51:dc:8d:77:18:60:e0:9c:18:75:f9:0e:c5:
         5d:41:cf:48:41:a0:cb:68:3f:3e:05:7a:16:eb:ae:36:fb:91:
         2e:d4:39:b6:01:db:2a:42:12:c2:62:ee:45:20:ed:80:ca:32:
         cb:e5:18:90:a2:1d:31:d5:d8:ef:7c:c6:0b:7b:d5:33:b5:1b:
         ec:b9:22:7c:02:75:4c:f8:fe:5a:37:ac:05:41:f1:15:0b:23:
         d6:6b:0f:22:17:c4:90:03:2e:f9:0d:cb:d4:54:9f:7b:26:48:
         86:c4:5f:6f:b5:ec:fa:3e:b2:82:4e:a9:27:33:77:6b:11:2f:
         4d:cd:ee:4e:49:e1:48:d4:6d:0b:11:f0:ea:c2:98:32:ae:51:
         e9:ac:1c:f2:cc:05:fe:3c:97:49:10:85:cf:61:6b:8a:ce:3c:
         7b:43:31:93:4d:ac:11:66:50:e1:5e:26:2a:1d:79:2f:fa:76:
         ca:a0:dd:d3:1e:46:eb:bc:ab:c8:32:0e:b7:52:82:30:b8:93:
         98:ad:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:56 2026 by rpki-client