Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
File:                     EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json)
Hash identifier:          JXkZAY6vZQr7hUjDVUMqWNV3Z7e4HxUNDupsjXRwj+k=
Subject key identifier:   35:2E:1A:AF:EF:6B:38:AA:7D:D4:56:4D:D4:E8:9F:14:EF:5A:22:99
Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9
Certificate issuer:       /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
Manifest number:          0276
Signing time:             Sun 01 Mar 2026 02:29:21 +0000
Manifest this update:     Sun 01 Mar 2026 02:29:21 +0000
Manifest next update:     Sun 08 Mar 2026 02:29:21 +0000
Files and hashes:         1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: JOgq7CKX2aH4FyNRQ+1QwiF/LOycAfPx1bukKTXu4Dc=)
                          2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: UfOYe6RywBqkEJraeZHWTOUfrLHgXDOJgx5fH4IP4aM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl
                          rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9
        Validity
            Not Before: Mar  1 02:29:21 2026 GMT
            Not After : Mar  8 02:29:21 2026 GMT
        Subject: CN=69a3a481-dfd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f6:14:e7:25:a3:67:02:c2:59:87:c9:40:16:
                    fd:c0:ab:a5:0b:ba:33:65:ad:88:0c:f4:3b:67:07:
                    de:c7:7d:6a:6e:8a:3a:90:4e:87:d2:e2:ab:98:c3:
                    5f:11:60:97:6c:82:67:1c:db:c2:5a:6a:86:51:f8:
                    f0:6d:a5:43:38:a9:ad:85:e1:7f:47:72:2c:af:b4:
                    7b:e3:de:c2:7f:ad:31:f0:da:65:cf:2c:11:61:4c:
                    69:a5:99:dc:6d:60:a7:c5:35:43:2c:e5:f5:ff:62:
                    e6:de:d6:90:b4:5b:d5:c6:59:b8:ca:8e:7a:9f:cb:
                    0e:31:4c:5f:47:9b:3c:d7:c2:a6:7b:5a:a1:29:20:
                    3c:63:ca:ed:c8:38:5b:fe:f8:f2:6e:aa:9f:c7:1b:
                    3e:49:bc:8e:22:a0:09:ee:e1:0d:2e:fe:a3:6e:af:
                    2a:b6:de:5e:c2:21:28:42:fa:0b:ce:e9:7d:37:a5:
                    84:0d:bd:6e:53:ec:e0:de:19:70:66:b3:ca:7e:63:
                    17:68:b7:4e:ef:6f:60:1e:a9:4e:4a:0e:d7:8d:1c:
                    d1:49:d7:d2:22:e7:ec:83:0a:32:f6:d0:d5:f9:7b:
                    ea:04:f0:bf:c1:38:c1:e0:ef:70:54:33:a1:9a:b6:
                    d0:a9:ce:f4:d9:86:2e:55:86:9b:bf:d7:d7:37:25:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2E:1A:AF:EF:6B:38:AA:7D:D4:56:4D:D4:E8:9F:14:EF:5A:22:99
            X509v3 Authority Key Identifier:
                keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ce:01:81:33:56:05:2c:0e:c2:96:67:bd:b0:5d:c8:c5:70:
         4e:71:ed:1c:dc:ed:51:e7:fd:1b:19:e1:51:64:19:b7:b6:90:
         c1:0a:b9:e7:5a:87:52:48:15:7d:b8:4b:fc:12:22:45:4b:9e:
         6a:58:eb:fe:99:83:b1:e5:7d:2d:b0:51:cc:bf:82:98:96:1d:
         8b:9a:65:6a:3c:a1:25:8c:79:25:1b:2c:73:20:08:ca:0f:8c:
         19:ad:c5:78:70:41:51:1e:da:c1:b6:5f:bb:30:2b:eb:11:82:
         94:46:d2:96:6e:44:c2:9e:77:31:6f:dd:c4:f5:51:b3:1f:4b:
         4f:0e:42:16:01:d5:30:58:16:c8:df:a0:8e:b4:88:b9:94:02:
         ff:44:3f:45:99:26:0f:92:5a:44:3a:83:b9:2b:23:20:16:1c:
         b1:f7:06:d5:8e:c4:77:4e:89:60:5b:74:04:ab:aa:88:d9:b7:
         d2:ad:2a:2d:13:a7:64:fe:3e:ac:42:c8:29:f5:c8:2f:ff:52:
         17:ce:44:05:b2:0a:25:d2:26:1a:72:74:f3:48:5a:1b:8e:6b:
         19:d7:38:29:90:ba:53:63:f4:56:03:8f:de:63:a7:2d:a5:c8:
         3a:05:44:7c:08:44:ac:76:81:8a:79:d7:19:77:e0:33:0e:cd:
         8d:7a:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:00 2026 by rpki-client