Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
File:                     q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json)
Hash identifier:          CjoznT3Ez738qGU53vjVnH9ZWh6OmQ2GFQoos4TbT5E=
Subject key identifier:   86:66:E5:C2:54:A7:D1:F3:94:7A:69:6A:91:CD:D8:7D:37:48:23:25
Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A
Certificate issuer:       /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
Certificate serial:       0836
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
Manifest number:          0830
Signing time:             Sat 28 Feb 2026 21:16:14 +0000
Manifest this update:     Sat 28 Feb 2026 21:16:14 +0000
Manifest next update:     Sat 07 Mar 2026 21:16:14 +0000
Files and hashes:         1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: Pyobl4yzFMaMYBDXAiG1uto0EFjsD6lDWawitLuTjaQ=)
                          2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: cujX/yOvlRxdf5P8eSmQLnHVmBWJtY4Bh7R/a7D9SZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl
                          rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
        Validity
            Not Before: Feb 28 21:16:14 2026 GMT
            Not After : Mar  7 21:16:14 2026 GMT
        Subject: CN=69a35b1e-02a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:27:8c:6a:9b:bf:48:5f:03:a4:b4:31:59:
                    0e:fd:7a:d0:87:a6:71:98:a5:f7:bb:db:5a:ea:d4:
                    8d:1d:94:68:87:20:0b:e9:28:27:de:22:9f:b2:29:
                    df:e6:e5:2f:81:65:ba:26:75:ad:95:4a:e4:2a:7d:
                    c3:7d:81:5e:74:e0:cf:58:6b:0a:da:61:08:ba:b2:
                    b4:c6:16:83:7d:95:b0:15:60:bb:a6:82:d9:94:34:
                    5a:a0:5e:ce:29:7f:1c:e6:6e:29:c5:8e:06:8c:51:
                    a6:d7:01:eb:19:2e:db:80:39:da:cc:5c:5e:eb:f5:
                    e6:5b:47:9f:6a:29:05:cc:4e:f6:23:ee:d1:a1:c4:
                    e3:d4:e3:c1:4e:2f:5e:1f:98:d2:e0:29:a0:e0:f1:
                    4e:38:3c:6f:42:8d:2a:ae:71:3d:35:05:0c:93:d1:
                    8b:d5:cd:18:d8:51:31:3e:a7:80:20:cf:8c:b6:51:
                    57:36:08:33:b1:9e:0a:8c:b7:d0:9f:55:64:1d:ff:
                    f1:a9:a9:19:35:a0:4b:16:06:75:a4:7a:bc:f5:1b:
                    e9:13:a7:54:8c:45:ae:29:63:07:c4:e9:9e:7f:c1:
                    e7:c4:94:c2:83:68:56:e0:a5:db:6b:50:d7:f0:2d:
                    b5:53:67:b3:a7:d8:1b:fe:92:57:b5:7d:4c:d1:5f:
                    d5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:66:E5:C2:54:A7:D1:F3:94:7A:69:6A:91:CD:D8:7D:37:48:23:25
            X509v3 Authority Key Identifier:
                keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d4:74:f1:c3:95:47:d7:4c:6d:e6:62:d0:2c:14:c5:19:fa:
         ff:71:28:cd:fe:65:ce:03:20:21:69:a8:a3:c4:c5:91:33:04:
         d2:c3:f3:89:dc:f3:68:8a:93:f2:a9:8b:74:6f:b7:6b:3d:85:
         97:ed:fc:5a:3d:bb:6f:49:28:da:62:99:f4:d0:26:18:c4:d7:
         ea:72:60:e5:13:bf:c7:cd:91:74:c4:d6:98:c5:4e:ee:fa:42:
         ed:01:d2:3b:87:45:df:72:18:be:17:2a:e4:f1:23:38:c3:2e:
         f8:5c:75:9d:1a:57:be:cb:5e:03:ec:6a:8f:aa:f7:a3:d8:7b:
         05:50:6e:b6:38:47:6e:66:82:20:b1:a8:11:2a:a8:08:f7:c1:
         a7:22:fd:e9:32:c5:ad:3b:5c:67:41:bc:e3:d4:dd:c5:bf:61:
         7b:bf:7a:a8:93:a5:21:3f:d7:bb:76:e9:8e:be:b5:3c:69:fa:
         ec:a8:d4:dd:b8:c3:13:7c:df:7f:5e:13:84:a1:9d:76:61:b3:
         08:09:f8:04:31:57:22:d7:94:57:2c:22:d7:d9:5f:81:ec:90:
         ae:99:39:74:4c:62:aa:97:41:c3:a8:23:ad:25:c0:dc:3e:7a:
         e9:bd:52:6a:2a:4c:17:7f:28:f5:09:6a:69:e6:15:b9:13:07:
         de:0e:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:46 2026 by rpki-client