Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
File:                     6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json)
Hash identifier:          dwqnYqmc8FemFbEvBWNZiBwoEaOwa0qCRtMXK2RZWRs=
Subject key identifier:   25:B5:8E:86:50:AA:36:4C:B2:75:7D:4C:4D:30:29:74:78:E6:94:56
Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E
Certificate issuer:       /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
Manifest number:          010C
Signing time:             Sun 01 Mar 2026 07:04:20 +0000
Manifest this update:     Sun 01 Mar 2026 07:04:19 +0000
Manifest next update:     Sun 08 Mar 2026 07:04:19 +0000
Files and hashes:         1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: M7b3HpogmfYNw18tl05jf4nS3qeKxyBZQeu058aRlC4=)
                          2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: FpNZ3HLo1o4b1YUw3bp5mGEZMF3ekFVbByklPwI6twE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl
                          rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E
        Validity
            Not Before: Mar  1 07:04:19 2026 GMT
            Not After : Mar  8 07:04:19 2026 GMT
        Subject: CN=69a3e4f4-700c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:c4:aa:ff:0e:b5:69:5f:48:f8:40:2a:d4:
                    88:e9:9d:37:04:95:05:1b:13:10:a4:db:93:9d:64:
                    a6:de:79:a0:aa:8d:8b:b0:36:41:e2:d1:12:5e:cd:
                    c4:d7:82:cf:bd:6c:12:1d:d0:f3:93:98:f7:1d:2b:
                    ed:2c:3f:ad:53:e4:f2:8e:1d:53:25:62:a3:4f:16:
                    53:d9:fd:32:2f:52:91:1e:4b:cb:77:e8:b1:15:d6:
                    12:96:d8:79:2c:84:32:99:52:03:bd:a8:e4:df:73:
                    5a:6e:4d:a5:8a:33:ec:a5:16:45:b8:76:46:07:58:
                    c2:96:2f:27:5b:a0:a2:e4:34:7a:57:a5:c8:eb:b4:
                    8e:a1:c6:cc:10:51:4b:46:4c:b3:6f:23:2a:7b:dc:
                    c2:c7:fd:db:a1:92:ae:9e:4b:fd:bd:02:b2:b3:cb:
                    3b:84:34:80:18:e8:20:b1:b9:cd:77:7e:7b:92:58:
                    91:2a:e5:bc:92:07:7d:8f:16:7a:14:a6:50:82:e4:
                    ed:a6:30:5a:46:ed:97:65:b5:88:57:50:a6:07:94:
                    78:3e:22:3e:6d:a9:10:65:57:34:13:9d:60:32:53:
                    93:f4:02:a8:e5:63:b1:d7:5e:ee:40:08:a3:7e:f0:
                    da:22:ad:4f:49:5d:f7:70:78:49:74:47:66:77:65:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B5:8E:86:50:AA:36:4C:B2:75:7D:4C:4D:30:29:74:78:E6:94:56
            X509v3 Authority Key Identifier:
                keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c0:5e:7a:e6:6d:be:c5:d6:f6:85:9c:c6:d1:f5:81:51:91:
         7d:b6:64:88:5f:7b:5d:82:12:b3:32:45:2a:a4:d9:ce:20:50:
         6c:b8:f5:0c:4b:f7:fd:f7:2d:58:84:3d:33:c8:c1:08:92:0f:
         28:9d:0e:bd:cd:4e:1a:87:e2:bd:b8:73:30:1f:28:7c:4c:ef:
         e2:a9:bb:f2:0e:ae:a4:b3:11:b6:8d:aa:f7:30:86:87:09:c4:
         bf:ff:5e:ad:4e:9d:f8:0c:19:d9:3e:9a:fc:df:86:93:17:45:
         89:e4:04:99:24:56:6d:57:6c:e4:64:e9:5b:fa:35:2e:34:6d:
         50:ad:2d:bc:61:b4:04:7b:7e:96:a3:f2:50:bb:46:17:6f:38:
         e9:58:76:96:e0:9a:60:dd:b4:34:7d:c3:0e:a3:0b:16:3b:63:
         e1:27:02:af:92:e2:ff:70:17:b1:bb:6c:81:19:27:b0:44:bd:
         9a:4d:6d:26:97:48:a7:17:35:f1:08:b9:d2:b8:5b:a6:0a:e3:
         df:b5:04:32:5f:49:a3:5e:c9:cb:0d:66:d1:18:b0:11:59:67:
         b2:fe:7d:df:7f:1b:b4:a8:c1:cf:0d:7c:d0:79:1f:ca:62:e2:
         58:3d:0f:42:5c:58:aa:2a:e6:93:62:a6:2d:72:bc:58:10:f5:
         a5:b2:65:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:46 2026 by rpki-client