Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
File:                     x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json)
Hash identifier:          VHBsdswGVTSE9o3ZxqM1gZVuSZlkV+VxwCltA5N987g=
Subject key identifier:   B3:20:60:7D:98:5F:EF:29:E7:16:D3:2C:89:BA:F0:7D:6E:86:CC:F2
Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73
Certificate issuer:       /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
Manifest number:          AF
Signing time:             Sun 01 Mar 2026 08:26:15 +0000
Manifest this update:     Sun 01 Mar 2026 08:26:14 +0000
Manifest next update:     Sun 08 Mar 2026 08:26:14 +0000
Files and hashes:         1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: Y6Jf4YfXnHP+EAZ3bucOFBS7P411HOA3Q+S4xMAlLT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl
                          rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:26:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073
        Validity
            Not Before: Mar  1 08:26:14 2026 GMT
            Not After : Mar  8 08:26:14 2026 GMT
        Subject: CN=69a3f827-122d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:16:2d:7a:c8:db:b2:4c:75:4e:70:99:13:
                    3c:ce:51:6f:01:16:29:55:cd:be:49:11:a1:43:d0:
                    d2:7b:8b:0b:2d:9e:cb:03:f6:f3:28:6c:7a:4e:01:
                    02:de:a5:fa:bb:9e:50:5a:4e:33:03:39:e8:02:4e:
                    02:df:ea:44:29:21:0a:b5:48:3c:dd:1b:5b:d1:6b:
                    8e:af:f8:d8:bc:98:72:72:18:74:3c:15:db:e5:51:
                    83:a4:f4:6d:3e:0d:58:9c:77:49:d7:cd:65:05:c7:
                    a4:a3:d1:9c:c8:bf:59:ea:7e:6a:88:dc:73:57:1a:
                    67:de:ff:63:de:38:8f:e1:5a:19:2a:fd:1f:5e:ec:
                    0d:0e:6f:ce:b3:fe:b3:23:c4:ce:3a:57:6e:2e:b8:
                    c6:53:ea:4b:f8:a7:01:be:f3:0b:19:d6:9b:63:0e:
                    7d:87:6f:fd:8e:8c:45:81:6d:94:4c:18:b4:b0:55:
                    da:2f:32:2e:42:32:69:b3:f8:e8:e9:0d:14:4e:8b:
                    15:43:33:32:97:2b:09:b6:ef:f5:90:b1:03:e9:f8:
                    7e:b3:5e:a6:fb:5b:12:ce:d1:f8:3d:22:f2:cc:00:
                    21:8e:9d:b3:ae:de:64:b2:97:36:22:8b:3f:7c:97:
                    9d:b8:16:73:77:95:40:8f:76:1e:9d:6d:fb:46:17:
                    70:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:20:60:7D:98:5F:EF:29:E7:16:D3:2C:89:BA:F0:7D:6E:86:CC:F2
            X509v3 Authority Key Identifier:
                keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:5b:0c:ab:a0:6d:bb:0b:39:92:da:25:f2:88:e8:e2:b2:d3:
         db:3e:a4:0b:d8:40:05:45:08:9f:e6:f5:43:2d:bb:66:32:45:
         64:a2:22:70:23:93:d4:6b:07:53:ec:2a:7b:92:20:bf:7b:62:
         d4:36:c7:e5:10:bb:b6:4b:58:2b:3f:65:b5:f9:9e:73:06:30:
         b9:42:e3:f6:c4:4e:c1:bb:cb:2d:fa:96:46:4f:bf:ef:0b:e5:
         3c:09:9d:d4:ac:84:ac:fd:a8:14:51:df:5f:1f:48:55:be:bb:
         62:7e:0e:4c:a6:05:ec:97:38:dc:3e:43:26:03:20:a0:d8:86:
         26:88:ad:e6:a2:e0:7e:69:1b:e9:78:bf:c4:0f:c4:d2:4a:76:
         c3:c5:de:ac:47:6e:b8:66:78:e8:a6:95:fa:8f:00:71:dd:c5:
         6f:d7:88:47:be:d2:e8:d7:76:61:bd:8d:47:22:6f:95:e0:b8:
         9d:0f:e0:4e:12:66:d1:d7:93:45:06:3b:cc:63:8b:0a:ff:9c:
         e9:e1:1b:63:f6:94:72:3a:f5:d8:8f:ae:b4:0d:ad:06:1b:c5:
         06:44:40:12:b4:7b:fa:c9:2f:bc:ac:c3:74:ef:72:ef:34:85:
         d7:2a:ba:9e:1b:3d:97:ce:e4:1f:0e:65:73:b1:a4:33:6c:74:
         c1:b8:af:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:45 2026 by rpki-client