Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
File:                     Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json)
Hash identifier:          EbcMVde8HHY503N52kmgws4aU5mEVTNm/1LbaY5MK3A=
Subject key identifier:   01:6A:4D:3A:13:73:EE:5D:D6:D5:AC:5F:30:4B:0D:8F:A9:BD:A9:15
Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19
Certificate issuer:       /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
Certificate serial:       0599
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
Manifest number:          0593
Signing time:             Sat 28 Feb 2026 23:48:36 +0000
Manifest this update:     Sat 28 Feb 2026 23:48:36 +0000
Manifest next update:     Sat 07 Mar 2026 23:48:36 +0000
Files and hashes:         1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: F0C3ZXwAFC7XUiKQ1i9DXbkLJVaoGr6V8UvdDZs8RbU=)
                          2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: OdV4BW1AypHn4SWRXVNRSTTOuuILOVr+n5WSk2uAXqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl
                          rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1433 (0x599)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7AC9, serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
        Validity
            Not Before: Feb 28 23:48:36 2026 GMT
            Not After : Mar  7 23:48:36 2026 GMT
        Subject: CN=69a37ed4-19b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:c6:76:5e:3f:b4:a5:68:2e:2c:4e:c2:04:
                    f7:38:eb:7d:c0:43:8b:b9:4b:69:db:fd:ee:56:d8:
                    b0:4e:f9:85:db:64:f3:8c:6f:79:29:43:ed:4f:52:
                    d0:e8:6e:3c:0c:0f:8b:bf:25:40:a3:70:6c:d1:61:
                    50:52:4f:3b:b2:e2:54:90:e4:12:cd:7d:a3:ed:87:
                    7c:5f:8a:2a:8a:69:3f:2b:1f:55:14:7e:ab:cf:3d:
                    1a:00:2a:a7:dc:62:71:bd:39:1b:ec:54:f1:fc:b0:
                    dd:e1:d5:c4:44:65:5c:2f:94:23:26:3b:8c:4e:4f:
                    9a:4f:09:f7:8d:25:91:ee:4b:e7:4c:c6:d3:b8:19:
                    c1:ec:b6:4b:17:10:9c:a6:e3:ac:65:1f:f1:d5:2c:
                    a5:f0:33:69:e8:4d:c3:45:c7:3e:34:8b:b4:ac:f1:
                    37:cc:f1:c6:22:92:b6:26:e7:fc:9d:18:23:66:8c:
                    ec:e0:41:7f:7a:bb:da:19:8d:20:58:cb:41:66:49:
                    c0:88:59:f5:2a:8e:de:93:f0:df:5d:f2:78:09:ac:
                    6c:8a:fa:c3:fe:5f:22:01:23:a2:ef:7e:3f:f1:14:
                    5f:b3:18:b5:43:95:57:d3:ea:51:12:f3:70:f1:16:
                    a5:8c:e5:af:74:f3:13:75:2b:05:99:f4:9a:93:6d:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6A:4D:3A:13:73:EE:5D:D6:D5:AC:5F:30:4B:0D:8F:A9:BD:A9:15
            X509v3 Authority Key Identifier:
                keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:62:f5:7f:3a:77:ac:21:25:2d:f7:85:1e:39:dd:d2:9f:7f:
         48:c0:b6:1c:c4:74:16:78:28:fb:88:99:cc:1a:c9:f0:f7:0a:
         47:db:4a:41:9a:f4:61:0a:c9:a1:83:3d:49:2f:a0:c4:d9:7b:
         d2:ad:c4:8f:cd:59:59:cf:df:7c:8b:ec:54:b0:69:5a:3d:cc:
         55:9e:57:e6:04:6a:c4:6d:fd:c5:1e:79:0d:75:36:c5:da:cc:
         d8:84:61:69:9b:bc:97:18:b1:12:37:7b:4b:2c:98:f9:f6:d6:
         9e:fb:97:62:5a:a9:3c:70:ef:4e:56:05:ff:ba:54:61:30:8e:
         c9:d6:1f:c0:3f:42:1a:1f:4d:61:3c:01:7e:01:c3:dd:fc:5e:
         fb:bd:28:ee:4c:76:aa:e5:9d:b1:c9:c2:77:a9:f0:06:bc:0c:
         dc:63:b3:22:d7:66:52:f9:ad:51:af:44:90:a9:65:02:1c:55:
         c5:2e:b0:fb:e0:1b:1a:0b:68:a8:6a:26:07:eb:7c:08:f5:d0:
         77:a0:aa:b3:0c:11:10:75:5e:04:d0:25:c8:0b:87:80:ac:61:
         ff:51:c7:2d:28:13:e0:e4:47:83:1f:47:79:99:f0:2a:5c:c8:
         e8:d6:36:a9:31:c2:44:84:50:0d:d4:20:ff:ab:a2:87:85:65:
         44:cd:a0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:04 2026 by rpki-client