Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
File:                     _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json)
Hash identifier:          B5UKirFnQJVqFjKk06OrkIUSSi91nEk5rf8TJVGf+q4=
Subject key identifier:   3B:7E:6F:5C:53:15:DD:7C:8C:6A:D0:1C:D0:8D:8B:B3:A2:44:EB:E5
Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
Certificate issuer:       /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Certificate serial:       11A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
Manifest number:          0F3F
Signing time:             Sat 28 Feb 2026 19:04:30 +0000
Manifest this update:     Sat 28 Feb 2026 19:04:30 +0000
Manifest next update:     Sat 07 Mar 2026 19:04:30 +0000
Files and hashes:         1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: yONrg2sH+eBsiVGKVK7byokzLbpaW+3f04DunD1yziY=)
                          2: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: 2DhSKbqHerwHAcJuXyOqA5Uvz8i+b7ElwkCYt1IMjOk=)
                          3: 52DDE6AEB97F11F085A49519C4F9AE02.roa (hash: yOuWRsyltBFagKzqpGS582aWz7h2FY8ZBcuACxag5X4=)
                          4: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: dENzJEUKeZTxWU/8nd/lAkN4nDmqFnhB+bpqCZU0QcI=)
                          5: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: RJWWol/N3kpabs0RDHnKDFjohXYhNv2bTe01qDy5yFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
                          rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4514 (0x11a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
        Validity
            Not Before: Feb 28 19:04:30 2026 GMT
            Not After : Mar  7 19:04:30 2026 GMT
        Subject: CN=69a33c3e-3574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:c0:51:c9:4e:67:73:30:78:1e:7c:b5:43:
                    82:a1:ff:9a:af:1a:9b:54:2c:81:08:ef:76:6c:23:
                    8d:cc:ee:ac:57:da:e7:24:6a:0b:41:fe:97:9a:d9:
                    d0:9b:dd:01:5f:36:ab:95:56:d6:39:cc:9d:de:6a:
                    8e:dc:00:9a:bb:1f:07:f3:56:18:07:13:aa:49:12:
                    49:5c:f1:13:4a:93:72:02:fc:98:3e:47:55:d4:b0:
                    5e:1f:9e:8b:94:03:0a:37:ba:05:67:ce:17:c3:10:
                    da:d2:bc:d6:28:72:c9:60:4a:bb:c3:af:11:92:32:
                    5a:0a:4c:b8:86:ef:b2:28:28:9e:68:f6:db:dd:b2:
                    b8:f7:36:01:b1:5a:69:fd:7b:ee:10:b4:57:e7:02:
                    75:e5:43:06:1f:fc:c1:7e:42:ce:b8:50:23:95:d5:
                    38:7c:a8:65:6a:5d:02:b3:be:f5:66:09:30:25:e8:
                    0e:b8:5b:ab:9b:e2:21:49:f6:4d:6c:61:c4:6e:be:
                    be:db:08:48:54:70:50:5c:97:1d:99:e6:a8:fc:15:
                    20:d8:d4:e8:10:b6:59:b8:88:13:50:ee:c5:9c:0e:
                    10:7f:f4:8e:b4:c6:89:19:28:5a:b4:6c:0f:23:23:
                    21:7a:2a:42:77:20:01:30:5d:1c:e2:50:8c:8a:34:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7E:6F:5C:53:15:DD:7C:8C:6A:D0:1C:D0:8D:8B:B3:A2:44:EB:E5
            X509v3 Authority Key Identifier:
                keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:cc:68:6a:09:ea:d1:c5:1a:9a:c0:94:dc:35:cf:c8:a8:ee:
         7e:f5:ae:0b:55:dd:0b:8c:fc:0f:82:59:67:9d:e5:d1:fa:7e:
         86:c0:2b:d9:11:ba:84:80:d3:80:05:6b:7b:8f:37:6d:55:96:
         7f:ac:88:80:c5:c1:20:a6:e5:6e:cb:29:49:7f:58:d1:d1:51:
         2d:3c:aa:6b:6f:32:27:d7:12:ad:96:e1:bb:20:e7:33:f3:0b:
         e4:3f:9d:00:f3:05:bc:31:49:b4:2f:f4:44:96:81:75:76:c3:
         b0:cf:c8:f6:44:8b:71:5e:45:f1:94:19:32:92:8e:e0:89:b7:
         72:d9:fd:75:11:b8:a7:48:49:ea:04:b2:a7:2e:e1:35:35:dd:
         17:0c:cb:a7:76:75:6f:b9:f1:f2:14:d4:1f:df:78:0e:2a:ee:
         15:10:10:ff:94:31:1a:3d:cf:af:ed:fa:6c:cf:2a:84:28:10:
         60:94:47:b9:1d:f0:23:8f:17:05:84:51:be:b6:3d:a7:92:5a:
         9d:3c:ba:7b:34:60:e2:b5:69:8f:59:80:43:74:e3:bd:48:9b:
         23:28:c8:33:9e:79:db:a9:66:10:17:15:e4:f9:70:eb:5d:57:
         77:67:0b:2e:a2:75:c0:9a:84:9a:e3:e8:45:5e:31:77:76:5d:
         27:e2:8b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:48 2026 by rpki-client