Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
File:                     F11CAiv1C9bCDzCxxa2MlOCFvE4.mft (raw, json)
Hash identifier:          dBNd8dGQ82ZeWq8XJ0mqg3xcRhmfddYQSZo9lHRED40=
Subject key identifier:   F4:F6:A8:43:C5:BE:F2:E1:85:A1:F9:8A:D8:10:7A:B5:B1:66:6D:D7
Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E
Certificate issuer:       /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
Manifest number:          0119
Signing time:             Sun 01 Mar 2026 06:56:00 +0000
Manifest this update:     Sun 01 Mar 2026 06:55:59 +0000
Manifest next update:     Sun 08 Mar 2026 06:55:59 +0000
Files and hashes:         1: F11CAiv1C9bCDzCxxa2MlOCFvE4.crl (hash: LZqEPC9EXnc9I4uPsHj91hHiDfSwkPQgYo6JgujSOm8=)
                          2: A18C777C6F5F11EFAF849B28C4F9AE02.roa (hash: 67w4cTtuf8Ims02A+heNAOHRPel7W1rTLPVEF7YAI0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl
                          rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89D9, serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
        Validity
            Not Before: Mar  1 06:55:59 2026 GMT
            Not After : Mar  8 06:55:59 2026 GMT
        Subject: CN=69a3e2ff-b250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:77:cd:ea:35:bc:f3:f6:28:41:af:01:f6:cc:
                    66:fc:6a:6a:b7:c8:29:d9:76:e4:0c:c7:e8:a7:8b:
                    a5:c9:6e:c6:ec:f7:95:ae:48:f0:b4:cb:55:c4:41:
                    5a:5c:9c:58:75:30:5b:fb:f9:89:b5:3c:a4:8f:d3:
                    50:7f:33:29:01:67:b7:34:b1:e7:aa:3b:f1:dc:27:
                    36:92:55:4e:12:8b:77:e5:d9:d0:7f:63:e9:ad:90:
                    f8:2b:b0:36:ce:a6:fe:81:3f:75:3f:aa:57:d7:92:
                    e5:2a:4e:1e:23:26:5d:0c:bb:ae:85:17:94:3f:65:
                    df:f0:8c:89:85:f2:dc:f2:06:54:72:8a:ca:d0:47:
                    35:ed:83:11:eb:f4:dc:7b:10:31:31:30:1b:74:24:
                    6a:00:f2:ec:9a:54:86:8e:b2:d3:59:79:e3:4f:8d:
                    ef:00:00:5e:01:de:dd:91:5b:72:64:ed:0a:91:9b:
                    bc:6a:09:78:a0:73:6e:6b:fd:1d:77:96:03:b3:12:
                    11:d2:10:40:ed:9b:d4:83:7e:8c:2a:57:b2:0f:cf:
                    df:4c:cc:08:39:4b:e9:ee:dc:d1:56:aa:75:79:50:
                    7a:b0:11:9c:ad:15:16:68:d0:d9:a8:1a:e1:bb:06:
                    c0:93:56:7c:75:01:70:71:c4:44:8d:a0:4a:dd:de:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F6:A8:43:C5:BE:F2:E1:85:A1:F9:8A:D8:10:7A:B5:B1:66:6D:D7
            X509v3 Authority Key Identifier:
                keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9d:ac:86:f6:47:65:55:9c:96:3e:aa:fc:16:8e:37:26:cb:
         ef:89:7c:c2:58:25:3e:2f:fc:7b:80:3d:7e:e5:a6:fc:37:85:
         4f:dc:2b:c3:36:8a:5c:b8:cd:41:bf:9b:a8:08:33:b6:fc:b5:
         90:7d:d3:6d:1e:e1:2f:e2:37:81:c0:51:89:a4:0a:71:5e:f7:
         0b:04:4d:5b:bd:80:71:9e:a7:28:cc:60:d1:0f:2b:e0:09:25:
         d8:bc:6f:a1:71:ad:10:8c:48:97:45:4a:ba:27:7f:5c:61:91:
         50:72:36:d8:02:1a:aa:9e:49:f0:9f:f7:3c:e1:73:ce:30:ad:
         1e:db:b4:b4:a7:5e:5f:30:18:80:d6:fb:66:47:c0:b0:d6:cc:
         cc:43:a4:6d:0f:08:c8:6b:99:2e:23:2b:c3:85:ba:1c:fb:07:
         d4:1f:8a:c0:65:87:15:48:14:15:48:5a:24:bf:aa:fc:99:9d:
         a6:3f:6f:dc:4c:44:4c:57:50:5f:4d:40:29:67:df:f5:f8:69:
         c0:a9:bf:4d:d6:d2:d8:6d:0b:45:9e:b0:86:99:83:59:b3:b8:
         9b:38:5b:db:f5:a4:05:24:cd:d9:46:eb:f9:d4:8c:23:73:95:
         3b:4e:d5:1f:41:7d:d1:7e:3b:06:98:b0:0e:b1:0a:f4:a7:60:
         93:f0:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:43 2026 by rpki-client