Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
File:                     KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json)
Hash identifier:          qCQLBsdAUvfZ88JeVOlhZnPU7vVfk5TAxFPLJhkVWgk=
Subject key identifier:   4B:CA:9B:5B:5D:50:39:56:E0:10:01:86:A6:16:67:D9:3F:A0:1A:65
Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC
Certificate issuer:       /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC
Certificate serial:       08BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
Manifest number:          14B7
Signing time:             Sat 28 Feb 2026 19:21:56 +0000
Manifest this update:     Sat 28 Feb 2026 19:21:55 +0000
Manifest next update:     Sat 07 Mar 2026 19:21:55 +0000
Files and hashes:         1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: nsGU16cbVqY5V7s8aJH8e09UHS/6dayGy7pdeIy1WpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238 (0x8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEA4D, serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC
        Validity
            Not Before: Feb 28 19:21:55 2026 GMT
            Not After : Mar  7 19:21:55 2026 GMT
        Subject: CN=69a34053-2b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:4c:c8:23:ae:64:7d:7d:af:43:89:3d:5b:
                    fb:11:98:27:34:c0:b7:d9:5b:da:d0:e0:70:9e:6d:
                    f3:ef:04:32:b9:0c:53:47:bd:6c:5b:dc:51:5f:8a:
                    e7:e0:2d:06:be:32:31:62:d9:75:7d:00:af:35:63:
                    87:de:53:a3:cf:c4:af:76:cf:05:70:31:90:7c:64:
                    50:84:48:56:73:fd:7c:83:a2:4d:3d:16:5c:3a:9a:
                    7a:23:36:a7:4c:d8:f6:28:11:f2:39:bf:ee:5f:5a:
                    d0:15:43:04:9a:c8:eb:04:15:b9:61:3b:75:d3:88:
                    ab:90:28:91:e2:97:25:a0:cc:12:bd:2b:52:97:ef:
                    30:8b:38:e6:09:87:84:0d:0e:48:e8:4d:7b:d8:72:
                    2f:b2:50:c5:bf:84:28:14:ef:47:fa:7f:52:4b:9f:
                    9e:aa:d8:61:a4:91:67:4d:b5:46:ce:04:98:53:13:
                    39:bf:c4:9a:25:18:3a:b7:c5:c9:f8:bd:ad:f3:d2:
                    75:0a:c3:ca:77:d8:30:37:40:c7:06:7b:e2:3c:67:
                    d9:60:44:82:ce:61:f8:3b:25:e3:a1:10:74:35:d4:
                    e5:4c:60:d8:c8:d5:3f:60:cb:d6:3f:47:5b:50:af:
                    77:e4:08:c6:ec:48:32:1e:df:43:8c:90:db:1e:da:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CA:9B:5B:5D:50:39:56:E0:10:01:86:A6:16:67:D9:3F:A0:1A:65
            X509v3 Authority Key Identifier:
                keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:0b:dd:7c:f9:2d:95:c1:b7:a8:b2:f8:9c:0c:00:4a:90:0c:
         d5:e3:08:1a:b1:20:1a:80:e0:52:b5:a8:b9:a4:98:79:88:d0:
         f6:4b:49:30:2b:87:4a:b0:47:f4:2d:48:69:a4:cf:0f:ca:8f:
         1b:fa:7e:15:fa:7e:4d:06:be:f0:dd:c5:9c:e9:fb:ac:83:c8:
         fe:39:bc:76:30:07:39:ba:0b:bc:c6:bd:fe:66:09:4f:3b:28:
         15:6e:37:34:08:13:74:25:ef:5b:24:76:d3:6b:b3:a7:31:2a:
         21:a2:f6:ef:0d:d1:88:c4:6b:a1:b8:31:8c:e3:6c:ab:ac:20:
         eb:42:00:a5:d8:2b:d0:26:6f:e5:1a:89:1c:f0:e4:3d:1c:ff:
         5b:5e:9a:b8:c7:45:f4:85:22:b1:d5:0f:e6:86:97:eb:48:23:
         08:52:1b:85:9a:c0:7d:8b:f1:98:39:b4:9d:86:c2:94:3b:cc:
         1c:70:fe:9b:77:28:d4:83:8d:61:f3:35:25:4a:e8:8c:f1:51:
         a8:f6:ec:a1:04:ef:f9:24:ee:f5:e9:e5:e1:bf:43:a4:54:c4:
         78:23:73:80:60:14:c5:79:03:73:d7:ff:17:55:52:4a:0b:6a:
         67:6c:72:e5:64:07:ea:74:ba:dd:a3:4e:fb:88:11:3a:45:59:
         29:02:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:38 2026 by rpki-client