Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
File:                     IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json)
Hash identifier:          BGzUVajYakzOzB4XBcLCcjX/0EGMm0Tqhgtl77J5CKc=
Subject key identifier:   79:84:F5:75:54:3D:F4:1E:5F:1A:AE:8A:34:4D:25:9A:1C:67:21:5F
Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
Certificate issuer:       /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
Manifest number:          F6
Signing time:             Sun 01 Mar 2026 22:32:33 +0000
Manifest this update:     Sun 01 Mar 2026 22:32:33 +0000
Manifest next update:     Sun 08 Mar 2026 22:32:33 +0000
Files and hashes:         1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: Y98glci7tRlWLmU1HrJmXGjTaPsD6zHdd5B934IgN94=)
                          2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: vy7IODG07pz73pTj0pY/9n2zcuO8v2L2DLhKfTMR+yA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
        Validity
            Not Before: Mar  1 22:32:33 2026 GMT
            Not After : Mar  8 22:32:33 2026 GMT
        Subject: CN=69a4be81-9fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:df:d0:73:32:67:5c:f3:fc:c2:95:57:9a:c9:
                    86:59:30:29:5d:cd:69:08:01:07:c1:96:d4:2c:2f:
                    15:a6:a9:7c:32:7d:1f:0f:b4:7f:00:d4:16:92:8e:
                    37:d7:f2:72:b0:b8:65:c0:a2:1c:29:23:42:5d:75:
                    05:59:74:cc:a1:67:f3:b4:a6:31:2b:e9:e1:95:ed:
                    be:bd:50:b9:1d:1f:e1:a0:88:db:44:b6:fc:a7:49:
                    f0:4e:34:90:28:22:40:d2:8d:26:1f:cd:b6:b6:14:
                    cd:5c:5c:04:da:22:95:5f:da:19:45:6d:c7:2f:e5:
                    9c:53:ab:a2:c3:63:06:58:5a:48:41:f0:7b:7c:43:
                    0c:30:76:6f:4e:06:52:5b:20:ff:3d:16:f6:e0:18:
                    46:f8:33:c1:53:38:9a:60:07:ca:6a:39:d2:a0:f4:
                    cb:c8:6e:14:46:a1:f9:53:87:97:06:e6:32:53:0b:
                    b5:5a:d1:0d:a7:49:17:cb:1e:a5:d1:0f:cb:37:27:
                    1c:89:2b:3f:70:8d:26:d8:93:d3:ed:49:92:6d:bb:
                    71:7f:c2:36:98:ea:9f:d7:bd:74:f9:db:c0:72:7d:
                    c2:94:fa:77:60:15:56:55:09:d1:2a:56:9e:92:e5:
                    80:60:57:28:2e:93:b2:97:f4:24:b2:32:cb:e6:b3:
                    ba:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:84:F5:75:54:3D:F4:1E:5F:1A:AE:8A:34:4D:25:9A:1C:67:21:5F
            X509v3 Authority Key Identifier:
                keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:cf:75:e9:5c:ba:1d:51:00:36:02:ca:a8:2b:53:d3:9e:82:
         d2:4c:f9:db:4b:42:e6:d5:ac:9f:12:0a:33:bf:3b:5f:47:83:
         cb:d0:be:74:d0:4d:67:4e:83:f0:38:c3:4b:84:00:6c:04:53:
         ff:6e:5a:42:c6:1d:ed:cf:77:9b:25:ad:43:9f:98:7d:ab:bc:
         37:ba:fc:c2:c5:cd:a5:c0:d6:80:c8:96:1d:10:21:8d:9b:b2:
         1d:e7:5e:88:f6:bf:16:89:55:7d:78:41:15:f8:e0:ff:29:33:
         b8:23:72:85:78:95:52:70:6c:e7:e4:2e:b7:72:7b:6f:e9:27:
         5f:cb:cb:33:46:07:88:1d:e3:f6:65:2a:4d:b8:73:96:7f:81:
         2a:72:3d:6c:95:80:2f:80:a2:17:22:8a:fd:8a:db:5e:dc:2b:
         9a:ab:be:d0:1b:53:c8:2c:14:cb:04:bd:92:eb:57:24:90:4b:
         e3:92:45:05:b7:21:1b:5c:5c:b0:c5:f3:6c:7c:3c:62:9d:11:
         3b:f2:a8:ad:a5:03:03:51:a7:cd:9a:ec:76:b6:82:57:01:30:
         4d:08:f9:12:3c:d6:85:cd:cd:1c:bd:85:e5:2f:6c:a0:11:cb:
         dd:41:da:0a:af:8e:13:f2:a5:9d:39:79:34:22:49:43:e5:f3:
         ce:c7:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:20 2026 by rpki-client