Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
File:                     6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json)
Hash identifier:          w71uD6ugsK8IXowp0+2rDXpGvT7F3diLDXebpPQxVOc=
Subject key identifier:   12:7D:49:CB:61:5D:74:97:AE:A4:06:58:47:CC:DC:68:72:2A:10:89
Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8
Certificate issuer:       /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
Certificate serial:       351E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
Manifest number:          3519
Signing time:             Sat 28 Feb 2026 14:50:59 +0000
Manifest this update:     Sat 28 Feb 2026 14:50:59 +0000
Manifest next update:     Sat 07 Mar 2026 14:50:59 +0000
Files and hashes:         1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: K6yLsvph1I6xCfeVke6mdQ7YKfeUoBn0Dnc0/XVkCoY=)
                          2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: mbjRZ38hTmzNJxu5Qy/hpIsa9dhCLIHmpMwMWiWa89U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl
                          rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13598 (0x351e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8
        Validity
            Not Before: Feb 28 14:50:59 2026 GMT
            Not After : Mar  7 14:50:59 2026 GMT
        Subject: CN=69a300d3-1bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:75:fa:26:d6:c6:04:35:d8:3f:e5:df:43:
                    94:d6:9d:96:9b:6d:a9:12:fc:56:14:95:73:29:0e:
                    5d:e8:df:b8:26:43:c8:a2:5f:da:3c:bf:32:f8:16:
                    f1:e8:52:3e:85:56:ad:56:ab:12:0e:fe:ca:8f:42:
                    bc:05:84:b2:92:61:fa:48:37:5d:d3:8d:3f:a2:b1:
                    6a:da:34:80:bc:c2:24:da:ed:78:a2:dd:37:de:44:
                    81:74:d5:f3:11:14:54:f9:bc:75:15:8d:08:83:c4:
                    cf:06:16:5d:ef:b8:16:a2:07:be:96:7c:e4:0d:79:
                    b8:26:3d:37:fb:8c:e8:e8:38:99:15:12:ec:ab:01:
                    62:d1:1a:27:4b:fb:b3:5a:a6:71:27:31:25:7e:0b:
                    1e:70:05:0e:5e:7c:cd:fd:95:65:da:26:c9:63:64:
                    06:cb:ab:db:ca:28:c2:e9:62:18:76:30:08:bf:ec:
                    e8:5f:9a:83:f4:92:d6:10:31:1b:dc:49:12:a1:c7:
                    d0:6f:c7:34:20:f0:b7:ad:4c:2a:47:c8:9b:1f:77:
                    d7:ba:ee:b5:ec:39:09:0e:c9:73:07:db:f3:ae:f6:
                    94:7c:2e:3c:24:35:36:8f:0c:bc:d2:98:f9:12:d6:
                    65:35:e0:c5:f9:28:b3:57:54:d3:8b:df:60:e3:7e:
                    11:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7D:49:CB:61:5D:74:97:AE:A4:06:58:47:CC:DC:68:72:2A:10:89
            X509v3 Authority Key Identifier:
                keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:09:56:04:6e:42:65:0b:eb:25:3f:05:09:f2:15:73:2a:df:
         df:96:79:b7:f3:e4:4f:b5:29:6b:3d:c5:de:04:2d:ec:be:4b:
         a3:17:af:60:15:bb:34:db:12:1a:17:e1:47:41:d7:07:de:af:
         b2:f4:92:6e:07:8f:86:28:8e:62:65:18:6f:0f:c2:f5:34:8a:
         04:aa:2c:68:5c:97:c6:25:b1:46:a1:18:60:01:63:55:3b:39:
         b0:1e:52:da:6f:18:70:eb:b6:80:25:c5:e5:8e:57:90:2f:ab:
         1f:c4:16:28:4f:8e:53:8e:f9:49:7f:14:20:03:e8:20:b2:03:
         b9:23:a2:f4:d8:93:96:0d:58:f8:24:68:4e:67:5c:47:ba:0c:
         07:2a:76:37:3b:61:d4:9c:5a:c9:0f:d5:a5:b7:40:4d:18:b1:
         50:34:a4:3c:fa:d0:07:64:3d:f0:30:e5:af:ec:77:13:ad:a4:
         5f:14:8e:13:d3:55:61:f9:64:e5:f3:69:c6:04:da:0e:60:d3:
         97:57:de:81:e9:72:a3:85:fe:9f:52:e2:da:0f:48:c0:dc:cd:
         6d:8b:5f:b4:ca:83:ed:c9:a3:ea:bb:84:b6:51:ec:2d:94:ba:
         86:85:c2:f5:e0:ee:09:5b:ef:27:75:2c:69:ce:13:74:59:f0:
         33:77:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:03:43 2026 by rpki-client