Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
File:                     h81xgndjHgvdtrTzot8esxEio4E.mft (raw, json)
Hash identifier:          QQDallJrado+Cne6O7zmZGQIjyEsFtGsrW40826DJsU=
Subject key identifier:   B2:A6:D5:5F:0D:CA:D8:7C:A3:63:A1:95:E9:72:6C:2D:62:CE:78:4F
Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81
Certificate issuer:       /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
Certificate serial:       0EE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
Manifest number:          127A
Signing time:             Mon 02 Mar 2026 02:44:05 +0000
Manifest this update:     Mon 02 Mar 2026 02:44:05 +0000
Manifest next update:     Mon 09 Mar 2026 02:44:05 +0000
Files and hashes:         1: h81xgndjHgvdtrTzot8esxEio4E.crl (hash: tASLkOLqRAtbK9uBOhuGDFJXK7blgyMH+ckhnVurQt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3810 (0xee2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DDD, serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
        Validity
            Not Before: Mar  2 02:44:05 2026 GMT
            Not After : Mar  9 02:44:05 2026 GMT
        Subject: CN=69a4f975-7210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:69:47:98:10:51:84:14:e8:96:22:2d:bc:70:
                    43:ae:79:fe:a5:1f:e7:1e:6a:f1:dd:2a:4d:e0:5c:
                    f0:09:32:5f:12:d9:d8:68:28:7b:b0:7a:37:4b:f2:
                    a7:40:4e:b8:0d:6a:74:6a:25:99:0f:5e:f9:2a:d7:
                    a1:e2:b2:4a:c3:64:0c:5e:9e:d4:2e:7e:66:8a:80:
                    5b:b1:4c:45:60:26:b9:e5:d9:7b:13:cc:0c:f5:2b:
                    58:ff:36:8c:a6:3a:7c:9c:01:57:2e:a7:95:49:c2:
                    70:42:f8:f1:c5:53:a0:f8:41:23:f6:e3:14:27:d4:
                    4d:7f:f9:3d:b1:da:42:f8:dd:39:77:be:54:e3:9e:
                    37:9d:78:76:ad:13:f7:26:e1:00:96:ad:0a:6a:82:
                    57:2a:b4:05:c3:09:7d:61:4e:fb:7f:33:ea:7a:3c:
                    dc:65:65:5d:64:94:73:f2:d8:1d:76:7f:01:7c:c2:
                    de:c6:d5:ac:c6:ce:49:c5:c5:bc:40:03:b0:3d:b6:
                    3c:ad:cf:95:d8:33:4e:f6:b5:19:de:9e:ea:59:e5:
                    f0:15:e6:ed:8c:14:44:42:13:f6:47:d3:20:b3:e9:
                    bb:7d:80:c7:f5:a2:ce:d0:96:b9:7a:f6:9f:35:a8:
                    50:5f:56:d4:86:6e:e6:b0:3d:6b:fa:1b:96:4f:dc:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A6:D5:5F:0D:CA:D8:7C:A3:63:A1:95:E9:72:6C:2D:62:CE:78:4F
            X509v3 Authority Key Identifier:
                keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:8b:3f:d0:0e:22:bc:a3:cd:d3:1c:2e:9f:b2:76:9a:2a:b5:
         5f:03:96:4b:5f:dd:1a:46:9a:62:ba:ca:b8:b2:69:e2:70:5c:
         a5:88:8a:1f:58:11:8b:58:28:b5:66:e3:c1:24:43:0b:fb:6a:
         52:e2:8e:1e:03:77:4f:07:f0:1b:60:f1:36:97:68:9a:30:1b:
         05:54:5c:06:3c:03:5a:44:63:a2:35:a5:94:b7:56:ce:2e:5f:
         e3:a4:5f:94:cf:a3:75:54:de:5f:47:b9:56:a4:89:a6:27:f1:
         a7:d0:df:b4:d5:c4:40:ba:3d:08:74:8d:91:0b:bf:24:1c:cf:
         91:db:57:d6:cb:c3:7b:21:09:35:15:93:e5:da:2a:fd:c1:6b:
         35:6c:4d:4d:55:33:33:ba:b4:86:b4:da:31:53:1c:b2:50:1a:
         c4:56:b0:36:8f:d9:ed:b7:79:b6:26:2f:7c:56:2c:dc:70:ef:
         ec:0a:86:17:1e:1c:30:9c:49:22:3b:6e:0d:47:5c:a5:9a:98:
         40:90:47:b0:8d:28:98:88:b2:90:24:e0:57:82:3e:1d:10:2d:
         cf:ad:4a:43:2d:b4:f7:14:3d:7f:f0:42:3c:27:c8:2d:f4:09:
         34:6f:d8:e4:dc:47:99:d0:42:48:68:79:c3:7b:0d:7f:b4:7e:
         1e:df:64:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:09 2026 by rpki-client