Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
File:                     F11CAiv1C9bCDzCxxa2MlOCFvE4.mft (raw, json)
Hash identifier:          oOaLg5n7DkFz8v1x40fCAD5o7bHL9wAP95cGnHvxAq4=
Subject key identifier:   75:38:D7:2F:06:56:BC:9E:9C:C3:BD:38:40:8E:20:1C:41:82:B8:96
Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E
Certificate issuer:       /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
Manifest number:          011C
Signing time:             Tue 03 Mar 2026 05:26:19 +0000
Manifest this update:     Tue 03 Mar 2026 05:26:18 +0000
Manifest next update:     Tue 10 Mar 2026 05:26:18 +0000
Files and hashes:         1: F11CAiv1C9bCDzCxxa2MlOCFvE4.crl (hash: P0MrTA+fz34Wm0a9gkZ9FxqZiSb2NeAClH2Y69Frip4=)
                          2: A18C777C6F5F11EFAF849B28C4F9AE02.roa (hash: Sy6cRszkN1joBse3YSNJ6ZAfwoikvcSiyyXdPrmFTpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl
                          rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89D9, serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
        Validity
            Not Before: Mar  3 05:26:18 2026 GMT
            Not After : Mar 10 05:26:18 2026 GMT
        Subject: CN=69a670fb-a305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:58:96:24:c6:b7:36:ca:52:8f:19:38:77:1d:
                    a7:f3:1c:24:11:09:f2:f9:67:9a:5c:42:8f:57:0b:
                    71:d5:7d:0b:47:16:fe:46:25:61:b5:a5:37:bc:c5:
                    8d:f3:12:77:fc:e5:0c:dd:7b:97:5f:c2:2e:ea:8c:
                    45:8b:d6:00:0d:3d:6a:bc:ea:9e:b7:ff:f4:fd:f9:
                    45:36:ac:80:8a:b7:b1:5c:cb:b2:d5:c1:9c:6f:df:
                    d8:da:26:27:55:de:bf:80:92:63:99:d2:b5:4b:57:
                    49:38:34:7e:87:3b:5b:fe:af:66:5d:ca:22:18:78:
                    46:1e:58:0e:6e:86:3a:88:20:94:f7:44:08:42:35:
                    f0:13:08:7f:04:8d:3c:fb:d2:c0:2e:0a:41:8b:a9:
                    01:4f:c7:3f:d7:c0:18:ce:7f:ef:b9:5f:0b:bf:77:
                    02:48:3a:a8:95:a8:6a:8d:2e:d2:fd:0b:c5:86:44:
                    40:e8:f2:d9:83:f0:52:b5:a8:06:37:b7:9b:92:a9:
                    06:08:ef:f0:ec:3b:27:f9:3b:6c:aa:ac:cd:5e:29:
                    4d:88:92:22:8d:93:d9:e1:8d:88:17:80:6b:ad:e3:
                    87:c8:7b:c1:06:3e:74:46:73:1c:c3:f2:2b:93:9d:
                    34:ce:ff:15:b8:ab:4a:94:89:ed:99:42:ab:24:4b:
                    d0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:38:D7:2F:06:56:BC:9E:9C:C3:BD:38:40:8E:20:1C:41:82:B8:96
            X509v3 Authority Key Identifier:
                keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:66:d0:ee:15:0a:8d:b3:98:a8:dd:5e:44:61:9d:31:52:ab:
         38:86:43:58:dd:95:20:49:5a:d7:1e:4e:c3:d0:3c:d4:dd:e1:
         a2:14:fc:d1:32:f9:7d:fb:ee:ab:b7:47:de:69:bd:9d:8f:f2:
         05:e5:d6:d5:cc:58:ef:04:f9:91:fa:ae:6e:2a:fe:7c:91:cc:
         00:19:7b:f4:b5:c1:da:23:48:1d:a7:64:be:40:87:55:e8:99:
         c1:4c:f5:ea:50:9f:0d:70:ce:ff:ff:0a:08:12:0b:48:09:92:
         ad:91:d4:3b:7a:05:2e:3c:d4:46:f1:3d:ed:08:f5:df:5c:e0:
         a7:11:ab:cf:38:1a:72:e3:48:d1:a9:ee:cf:80:8c:19:a4:64:
         12:38:14:ec:ec:4e:51:2e:09:3c:4e:ae:03:cd:17:d7:d8:5d:
         07:05:8b:00:db:da:3a:79:ac:d7:15:eb:68:1d:2c:31:d0:68:
         82:e4:bf:df:5a:59:d1:2b:96:db:34:51:6d:d0:1f:2d:25:a9:
         d7:dc:a8:63:0f:45:16:d5:ff:e9:ae:af:3d:5a:7d:bd:9e:4a:
         70:52:36:50:6f:b6:23:e6:dc:7c:b3:4d:bb:03:87:ae:95:e7:
         76:3f:3f:20:4a:6e:8f:c3:0b:8b:77:15:72:f0:6f:d2:65:77:
         d2:48:9a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:44 2026 by rpki-client