Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
File:                     7D2Af3k8nPX84zXuFeCYREm0MJY.mft (raw, json)
Hash identifier:          M1nIv3hk1o7u+TYZ672ettenQpBd3UmjwnHWrbCYEw8=
Subject key identifier:   C0:85:14:85:73:2E:DC:6F:A2:30:34:CD:BE:2F:BA:DE:BB:0D:97:CD
Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96
Certificate issuer:       /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
Manifest number:          E9
Signing time:             Sun 01 Mar 2026 07:33:25 +0000
Manifest this update:     Sun 01 Mar 2026 07:33:24 +0000
Manifest next update:     Sun 08 Mar 2026 07:33:24 +0000
Files and hashes:         1: 7D2Af3k8nPX84zXuFeCYREm0MJY.crl (hash: +HkD4TlR/jS9hGTJIHCkmccg3o2dSssy/5u2cgIIf48=)
                          2: 18164B6AB2C811EFA702DF80C4F9AE02.roa (hash: IlwuqYd+V3i+RoW8n6rnlp+BLBlUeaUn1+UQMM4yK1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl
                          rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096
        Validity
            Not Before: Mar  1 07:33:24 2026 GMT
            Not After : Mar  8 07:33:24 2026 GMT
        Subject: CN=69a3ebc5-4721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4b:7c:46:d4:9f:9a:4e:bf:99:7c:74:48:0c:
                    72:04:ab:06:3c:06:3e:e1:97:ed:ae:00:e8:fa:72:
                    8b:a6:7a:78:e3:74:b4:62:66:81:6a:c7:f5:e8:7c:
                    2c:28:07:ef:10:69:66:b2:ab:49:9f:48:ec:d9:3d:
                    ec:77:69:c1:1c:b4:e9:24:db:62:83:89:20:b0:3b:
                    16:db:76:3a:08:a9:c6:78:45:7a:0b:72:df:ff:29:
                    d8:a1:27:bd:ce:59:62:fe:31:27:fb:3e:8b:f1:13:
                    1c:74:2d:6f:9a:82:56:78:d5:5e:24:72:bd:f6:d2:
                    f7:ba:89:7b:4c:8b:2a:fc:fa:00:3b:8b:1f:bb:93:
                    1d:70:fc:20:3a:d3:6d:1a:45:86:97:47:20:34:b7:
                    8b:5b:04:10:fc:66:fd:38:84:df:25:c4:bc:42:32:
                    2d:ef:e9:f6:a8:57:6c:50:b7:9c:87:c1:17:1d:f1:
                    3e:ab:28:5f:bc:92:57:7f:c6:e7:94:06:4e:fa:d0:
                    ca:29:e0:f0:aa:3c:17:bc:20:2d:95:9d:d2:ad:7a:
                    a1:12:44:97:de:d5:de:2e:5c:01:36:d3:1e:71:16:
                    55:65:b0:35:b3:b2:fd:21:fb:6d:34:1c:de:a5:b7:
                    e8:c9:3a:19:ef:45:35:d9:0b:21:f0:cd:47:39:c5:
                    f3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:85:14:85:73:2E:DC:6F:A2:30:34:CD:BE:2F:BA:DE:BB:0D:97:CD
            X509v3 Authority Key Identifier:
                keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:05:ba:98:3f:74:f4:ba:2d:2d:19:69:2d:e5:e4:a1:7c:
         4b:3c:68:a2:82:87:d6:ca:73:87:25:a4:46:06:a3:30:e7:5e:
         98:75:ca:c0:41:43:0b:12:8c:eb:f1:dd:fc:c3:a9:ee:a2:ca:
         35:dc:2a:89:10:26:47:f0:29:18:e2:1c:73:9f:44:ad:f0:62:
         2d:58:96:f4:a8:cc:4a:be:83:93:9a:43:51:31:42:d8:3b:d6:
         43:3d:99:4d:b0:2d:81:47:f8:c7:87:37:b8:ed:54:59:bc:16:
         93:bf:dc:07:9b:6d:23:de:e0:90:65:25:33:46:bf:b8:94:66:
         45:57:1f:13:3d:ef:4d:05:94:97:98:7e:d2:f3:58:20:f1:2f:
         c6:95:f6:06:a7:d1:23:1f:33:3a:cd:a5:c2:13:0a:e3:e4:16:
         8c:15:cf:35:bd:19:d3:d2:7c:74:e0:bf:fa:d6:d7:d5:be:42:
         6b:ef:93:70:d6:94:94:ed:01:cf:f3:d4:99:77:84:04:32:dd:
         7e:b8:a5:4c:44:9e:84:13:a8:e6:b7:ac:ce:5c:fa:d4:9f:49:
         d9:7f:7e:11:fa:26:eb:78:e9:04:4e:8a:0b:93:4f:99:33:21:
         62:e1:fe:50:92:f9:8a:34:fa:0b:c2:c9:05:71:a7:68:4c:e9:
         42:85:f3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:29 2026 by rpki-client