Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
File:                     IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json)
Hash identifier:          a7Juy00BgWytciujV1JR/OW1JNF8WHDUovR3+/asvSo=
Subject key identifier:   03:A7:86:2C:21:E3:6E:A1:C6:77:98:0D:16:17:BC:6B:69:E4:CC:45
Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F
Certificate issuer:       /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
Certificate serial:       1D6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
Manifest number:          1D57
Signing time:             Sat 28 Feb 2026 16:10:07 +0000
Manifest this update:     Sat 28 Feb 2026 16:10:07 +0000
Manifest next update:     Sat 07 Mar 2026 16:10:07 +0000
Files and hashes:         1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: aIK53MXoxxAWgES4rACtUW1uqxiMCLeDQUTQSi+RHBQ=)
                          2: 402AE4B4685111F0A688505EC4F9AE02.roa (hash: WdsKbuAJkGSMks+nUR19PiDJtaT3Zd7f2z8fYb9N1t0=)
                          3: 40EAC2C0685111F0A688505EC4F9AE02.roa (hash: 9+n7psU8Mo4bBvHvPPjtk0+kg5spLTMBx2TgDve5t00=)
                          4: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: HCemXuQk3lGZH+8qq2MsPKCOXAWGB82yjIwyAbHRoNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl
                          rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7535 (0x1d6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F
        Validity
            Not Before: Feb 28 16:10:07 2026 GMT
            Not After : Mar  7 16:10:07 2026 GMT
        Subject: CN=69a3135f-8163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fa:32:92:fa:50:27:9d:3d:9b:4e:7c:c1:36:
                    ff:d5:35:57:82:aa:62:82:21:02:c7:04:82:02:57:
                    ca:8e:1f:1b:54:b8:55:37:4b:26:5e:09:6e:29:18:
                    b6:13:26:80:f6:30:55:7b:a1:04:4d:c0:63:f3:7b:
                    e6:67:63:7b:ca:82:ce:7a:68:a0:54:12:ef:34:fe:
                    31:47:4d:ac:6f:c9:36:c1:df:23:55:0f:45:d9:3b:
                    88:c2:6b:dd:eb:de:bf:6e:49:2f:60:41:f2:d0:f8:
                    e6:11:87:ef:45:e4:56:c6:d0:5f:56:d5:2e:17:1a:
                    a6:7e:5d:93:8d:b0:a8:9d:64:9d:e6:5e:73:1c:48:
                    7c:6e:29:72:4a:fb:50:17:f8:2e:cb:7d:e2:bc:a9:
                    f1:06:fa:12:d7:20:36:d1:0e:40:e2:8f:0a:e6:ef:
                    43:4b:f6:ee:c9:10:53:cd:77:54:5d:2b:58:23:7b:
                    5f:58:45:f2:f1:b3:14:25:58:51:4a:76:90:f6:34:
                    e7:1d:fd:ea:67:74:05:98:62:36:07:da:20:2e:dd:
                    4d:6c:d6:46:9b:b7:53:73:f9:27:78:20:b2:a7:19:
                    d4:a2:6a:1d:f6:09:a6:82:6a:e1:68:d4:31:a9:08:
                    2f:ea:2c:86:b4:02:9c:eb:f8:fc:1e:c0:ed:b6:ba:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A7:86:2C:21:E3:6E:A1:C6:77:98:0D:16:17:BC:6B:69:E4:CC:45
            X509v3 Authority Key Identifier:
                keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:00:22:94:af:2b:ea:f6:1a:b2:a9:4c:f2:59:da:7a:c0:
         aa:f0:66:a5:48:4f:7d:1b:6d:ba:b4:f9:cb:13:8d:fc:56:76:
         82:da:9b:3c:cd:24:94:33:8a:57:35:90:af:e6:6e:42:6c:67:
         ea:9e:fd:91:e9:3f:a3:fd:67:4e:2d:10:f3:ba:57:50:ce:dc:
         5c:d9:bf:7b:0e:32:a2:27:1c:7b:87:13:62:37:51:5c:ec:7f:
         9a:e5:8d:39:20:0b:1d:81:83:dd:01:89:c5:de:22:0f:80:81:
         0d:53:f9:40:c0:89:5c:fb:0c:f4:5e:c6:5c:fc:34:0e:e0:25:
         c1:63:03:f5:a8:59:2b:80:ff:97:08:f1:b7:70:bc:21:4f:0f:
         ff:a5:4f:32:96:71:13:59:9e:48:70:93:63:8d:2d:20:b4:20:
         00:89:a3:42:e4:23:cf:c0:c5:3f:81:d3:0a:a2:d6:07:66:dd:
         88:91:41:7f:27:6d:0a:fa:c5:b0:82:d4:17:2f:e8:e6:a7:ce:
         d9:f4:2b:cc:3d:e5:42:a8:d8:c9:ec:aa:49:04:9c:27:17:01:
         e1:7f:35:71:f1:50:86:31:bc:08:56:d9:26:33:51:0e:35:ff:
         a8:6d:c0:17:8a:dd:31:df:fb:02:15:8a:08:1a:d3:08:9e:04:
         b0:93:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:14:00 2026 by rpki-client