Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
File:                     XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json)
Hash identifier:          ntECa/6SE8buYzSsvcTifMB1mBgHTjZpJAKjImBUaas=
Subject key identifier:   B8:8A:24:ED:F4:17:D5:64:4E:7A:84:42:23:C0:06:8C:FE:D2:32:42
Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C
Certificate issuer:       /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C
Certificate serial:       023B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
Manifest number:          023B
Signing time:             Mon 02 Mar 2026 00:31:33 +0000
Manifest this update:     Mon 02 Mar 2026 00:31:31 +0000
Manifest next update:     Mon 09 Mar 2026 00:31:31 +0000
Files and hashes:         1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: V2kYraHo/TIOmM8nMu5y/lVtBiKqsIT4oE/bWKXpRwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C
        Validity
            Not Before: Mar  2 00:31:31 2026 GMT
            Not After : Mar  9 00:31:31 2026 GMT
        Subject: CN=69a4da65-1ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:34:de:48:23:c4:1d:fc:6e:20:75:fa:88:
                    ca:93:b1:e8:7f:66:a1:3a:1e:80:d0:58:e3:0a:10:
                    5d:79:a1:54:e0:99:30:a2:d6:e3:0d:5c:73:a0:a2:
                    4d:f5:d1:4e:44:73:9d:92:12:0a:0a:46:a9:dc:5f:
                    41:cc:55:be:fb:43:13:ae:9e:60:db:7b:25:2b:10:
                    00:1d:6b:7f:21:cd:93:49:83:3e:d7:39:fa:0c:8b:
                    24:31:da:21:5d:1e:a1:41:58:09:5b:90:1d:80:06:
                    8b:2c:d9:88:22:37:6e:c3:eb:d0:cc:2f:18:ab:ad:
                    e2:ba:95:08:8d:7c:97:73:39:72:98:d7:39:3c:9c:
                    75:b0:46:65:c0:47:e1:d3:6e:72:54:b5:89:9d:2c:
                    63:95:52:32:77:22:7a:fb:15:5c:eb:ba:2c:09:15:
                    63:5c:a0:2b:24:5a:dd:c1:fb:5d:3d:f0:df:ea:8a:
                    ed:02:ec:57:11:a6:8a:30:01:82:83:d1:7a:c7:a7:
                    e9:65:ee:96:26:05:3d:7c:21:e5:b9:12:66:39:0d:
                    53:b1:34:4e:f8:f5:d8:23:70:bd:c5:02:43:31:b9:
                    b9:6a:fc:d4:b1:33:67:ed:1d:2a:f1:14:83:ef:0f:
                    8d:d7:23:03:aa:a7:f1:14:e7:6e:0a:9c:25:85:3c:
                    10:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8A:24:ED:F4:17:D5:64:4E:7A:84:42:23:C0:06:8C:FE:D2:32:42
            X509v3 Authority Key Identifier:
                keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:64:af:62:77:45:32:5b:47:06:8e:b1:63:08:a3:c0:71:13:
         4a:f2:8f:a2:1c:f2:50:c8:93:a1:10:bd:ae:5a:3d:ca:c9:d7:
         c6:65:5d:de:8e:5f:cc:17:52:c2:67:57:d3:ac:84:98:de:e6:
         06:a9:6b:d0:dc:3b:2c:3b:91:f0:19:3a:10:ce:fb:85:17:50:
         8e:f0:2a:cc:1b:99:ea:df:4e:47:82:b5:0e:dc:e1:8a:f3:3a:
         a8:0a:9b:cd:1c:fd:f9:38:9f:b1:73:8d:7b:37:02:a9:59:88:
         af:2a:c6:17:e7:82:90:05:f6:44:3a:7a:c4:16:fb:76:7f:e3:
         8e:d7:cb:7f:4d:37:bb:55:1c:53:c6:11:75:6b:ab:2f:38:59:
         c7:45:41:1b:c2:35:ae:95:49:b5:74:6f:8b:2d:c4:ae:49:0a:
         43:47:85:00:7f:48:9d:18:13:c7:b0:84:ca:e2:47:03:3e:f7:
         07:63:e5:29:ef:01:d6:42:ab:c7:8d:9b:d3:e2:40:2b:2d:ec:
         2d:3f:51:86:c3:07:36:0e:08:13:ed:72:3c:13:9b:20:f4:84:
         a2:99:61:40:d7:1b:c7:f6:e7:76:db:3f:92:46:38:d5:22:83:
         f7:8c:8e:10:99:8e:95:aa:0a:6f:01:30:eb:5b:39:8f:63:19:
         73:0e:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:38 2026 by rpki-client