Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
File:                     9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json)
Hash identifier:          ZW9+w1a6VUAaEnGiLyX9WdwRQ6RAOU8NhIezMpV8+5M=
Subject key identifier:   73:5F:86:84:46:74:AE:AB:85:D2:1C:9C:45:29:80:03:0F:AE:FF:41
Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
Certificate issuer:       /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Certificate serial:       0CEF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
Manifest number:          0CCE
Signing time:             Sat 28 Feb 2026 18:35:27 +0000
Manifest this update:     Sat 28 Feb 2026 18:35:26 +0000
Manifest next update:     Sat 07 Mar 2026 18:35:26 +0000
Files and hashes:         1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: I6iLq+rpbcAPBiX4vtGbjVI0xxwHCM7kpDIS2rH0aHs=)
                          2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: cegor5RnBc3HGGToc+6Lymvpp6wumcl5jw4jwYNABG8=)
                          3: E6C1F0003C7E11F08A874435C4F9AE02.roa (hash: HGkfh3dEEIqv+3vFhSnMi2VsaDRfK/TUjKt6kaMeksE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
                          rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3311 (0xcef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
        Validity
            Not Before: Feb 28 18:35:26 2026 GMT
            Not After : Mar  7 18:35:26 2026 GMT
        Subject: CN=69a3356e-79fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:56:ee:97:50:2a:ec:d6:a5:60:46:10:50:
                    2a:b9:34:b6:a2:70:61:e0:86:a2:d6:b8:cb:d2:3e:
                    0c:1d:0c:57:f2:cd:fa:39:ba:4c:7c:2f:26:49:15:
                    e3:07:c2:75:d9:b1:03:7a:8f:55:7e:e6:87:93:29:
                    18:37:8a:c4:83:d4:f1:8b:9b:af:4c:d6:09:cc:a5:
                    51:e0:c4:c7:49:ef:aa:1c:27:05:6c:59:70:b0:c3:
                    4b:9a:53:5e:e2:d8:f4:c4:c8:9d:1f:62:6d:3e:e2:
                    01:a4:00:55:30:80:69:2c:52:7d:2d:7e:c6:c3:3f:
                    31:47:7d:82:eb:9d:5f:aa:4f:09:b6:75:1c:52:2a:
                    3b:83:28:a0:bb:0c:2e:fd:4c:6a:ae:bc:d7:23:c0:
                    cf:ce:6b:ea:1a:ca:a9:7d:12:69:25:d3:59:1e:20:
                    66:05:70:89:a8:04:b3:7c:6f:44:51:c7:34:c2:0a:
                    60:cc:c5:cf:ad:25:2d:2e:d2:30:61:c5:74:ce:30:
                    31:f3:c2:68:8c:06:59:e7:09:36:46:5d:49:fd:61:
                    21:f0:0b:2c:77:6e:31:c9:ba:af:cb:b4:36:23:51:
                    47:9c:96:1e:78:d8:f9:f0:b0:00:33:08:a4:54:7b:
                    a7:2c:97:ea:24:55:70:82:19:7a:e8:c5:a8:1c:82:
                    96:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5F:86:84:46:74:AE:AB:85:D2:1C:9C:45:29:80:03:0F:AE:FF:41
            X509v3 Authority Key Identifier:
                keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:92:58:c0:27:22:ba:79:bd:d6:cc:1a:6b:5c:18:17:b8:a4:
         3b:ab:d6:cc:d0:57:cd:db:7f:42:db:3c:db:ec:80:3b:bc:23:
         5f:3b:9f:3f:c1:d0:f8:c3:e7:9f:18:42:59:32:9c:e2:fa:4e:
         1f:fc:60:a5:53:17:e5:04:eb:f0:3d:aa:cf:11:3a:a8:9d:2e:
         74:62:c8:33:35:b4:be:c8:4a:90:93:a5:53:a7:fc:f5:0a:94:
         f3:f7:c3:06:0c:de:f8:cf:6e:64:5a:29:8d:58:39:f3:ff:47:
         87:a2:03:22:41:73:b7:d9:7a:d5:24:50:c4:c9:e9:46:e6:70:
         d9:80:e1:24:c9:a2:68:6b:7e:eb:21:39:38:c6:bc:26:42:40:
         22:bf:48:da:71:99:78:8b:63:de:e6:9b:ec:96:20:09:47:f5:
         48:50:c4:92:2d:42:32:36:cd:08:d7:b2:88:75:ed:66:80:c5:
         e8:c2:fd:cd:ed:a4:a4:b6:1e:b3:4d:0c:fb:d1:b5:15:01:d7:
         c8:ea:b6:e7:2c:6d:70:32:e8:20:69:55:00:3f:77:2f:e1:9e:
         fa:99:35:cb:c1:93:e6:6f:e1:a5:5c:f7:61:43:ed:e9:e8:ce:
         30:ae:37:83:88:6b:c0:af:5b:3d:7e:90:d5:47:bc:e0:cc:60:
         63:06:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:38 2026 by rpki-client