Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
File:                     DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json)
Hash identifier:          m7b1gNAOnCIOGA9rRq/9IO9cctKay2obtdbkJwgau5Q=
Subject key identifier:   0F:E6:C4:DA:4E:51:74:78:62:87:37:24:8B:BB:5B:2C:E2:3F:7A:70
Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4
Certificate issuer:       /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4
Certificate serial:       3512
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
Manifest number:          3512
Signing time:             Sat 28 Feb 2026 15:12:17 +0000
Manifest this update:     Sat 28 Feb 2026 15:12:17 +0000
Manifest next update:     Sat 07 Mar 2026 15:12:17 +0000
Files and hashes:         1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: /Ht/6tUI66Vsk6/OPbhFOPp/JOm8fOWAwvy4EXH9Lcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13586 (0x3512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4
        Validity
            Not Before: Feb 28 15:12:17 2026 GMT
            Not After : Mar  7 15:12:17 2026 GMT
        Subject: CN=69a305d1-c8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:bf:95:1d:02:17:45:0d:eb:77:f6:16:4a:
                    de:8f:12:d6:07:3c:18:87:67:f4:3e:8c:77:8c:3f:
                    b1:07:02:c9:12:e9:03:06:a7:1e:02:67:28:3f:97:
                    1a:23:4c:71:2b:cc:89:99:e3:68:a3:b9:6c:6a:ab:
                    eb:94:5b:66:6c:c7:c0:1e:f0:ca:d4:31:3d:c6:54:
                    8e:f8:f1:6c:b9:04:a8:39:40:d0:60:14:27:37:31:
                    58:c5:fb:e6:35:1f:dd:3e:56:d5:60:7c:35:12:07:
                    e9:ba:77:c9:26:e6:2c:e2:1a:eb:29:3f:5b:78:19:
                    81:aa:ea:9f:c1:53:bb:b9:fe:55:f9:b7:28:2d:df:
                    27:90:09:c1:2e:3e:82:67:10:14:32:9a:39:8b:2b:
                    bd:18:02:ef:b2:d6:44:5d:63:71:d4:30:f7:f1:a5:
                    0c:95:29:a6:69:a1:4d:8d:0f:78:83:27:9a:41:ca:
                    1b:1b:6c:3e:03:bd:3f:6b:30:d5:03:13:19:d9:01:
                    cc:3e:0f:0c:15:ff:23:0e:55:f5:cf:20:bf:a2:28:
                    a0:71:49:53:8a:f5:a0:b0:6c:eb:8f:59:38:e7:59:
                    4c:1f:8e:31:72:f9:d5:be:50:9b:13:e5:11:1c:e9:
                    81:09:12:b8:92:96:e8:7a:a2:ab:d0:54:59:d1:6c:
                    25:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E6:C4:DA:4E:51:74:78:62:87:37:24:8B:BB:5B:2C:E2:3F:7A:70
            X509v3 Authority Key Identifier:
                keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:43:1c:29:01:7f:66:87:20:f6:d4:ba:ab:4e:f6:9e:e6:0d:
         25:20:5a:f5:ab:45:f5:d1:ce:7b:c5:d5:ce:39:5b:32:fd:a3:
         75:9e:3e:e9:af:ef:91:67:47:65:52:5b:a2:eb:83:3e:a3:66:
         b5:27:1d:de:45:f2:63:b4:aa:ba:1c:c4:27:11:b0:6f:d3:7c:
         29:2a:a4:6f:af:d5:d8:19:5d:0c:f3:ac:e6:ce:ae:69:b8:5f:
         1b:87:f6:fb:93:7b:d7:a4:1d:d8:68:f7:7c:d0:96:08:6a:bf:
         fe:1f:fa:03:8b:4e:c3:27:91:9f:c8:e3:cf:83:6b:61:9e:10:
         23:15:c1:86:a5:44:22:71:e0:c6:6b:ab:9c:e7:40:cd:d9:cc:
         ea:21:03:2f:d0:9b:78:62:35:e8:90:44:37:86:51:98:33:93:
         d6:8a:09:02:84:c9:a1:f6:01:97:70:9d:9b:d3:5f:19:28:f0:
         89:6c:97:a8:db:a5:4d:23:75:e7:b3:0c:ef:63:51:f9:66:f0:
         d8:2b:77:de:14:4d:ff:a7:f2:45:41:42:cb:93:d0:16:75:e9:
         0a:8b:ad:39:72:43:f2:c0:95:4c:1f:4f:ab:4b:39:ea:6d:2b:
         bc:22:09:10:88:40:4f:05:89:65:8f:2e:e1:cd:03:25:a4:ba:
         fb:44:4c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:27 2026 by rpki-client