Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
File:                     d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json)
Hash identifier:          GqHwLGvrU9tSsaoLgynLZMfuEdkSlenl48CpSJ97fmc=
Subject key identifier:   D8:51:33:E1:9A:B6:A1:62:F1:5E:00:1A:AB:34:5C:74:2A:A9:93:F0
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Certificate issuer:       /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial:       351A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
Manifest number:          3516
Signing time:             Sat 28 Feb 2026 15:17:05 +0000
Manifest this update:     Sat 28 Feb 2026 15:17:04 +0000
Manifest next update:     Sat 07 Mar 2026 15:17:04 +0000
Files and hashes:         1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: WroyR4MOnH4eCzrsb6rvsX6KYaunTYlk2fpRLsw72No=)
                          2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: u0SIiLxxmi81N8BSICKYYu8IJ84iSOv3GERY4hpV5jk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
                          rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13594 (0x351a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
        Validity
            Not Before: Feb 28 15:17:04 2026 GMT
            Not After : Mar  7 15:17:04 2026 GMT
        Subject: CN=69a306f1-a95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:9f:04:e4:86:16:c1:98:2f:86:30:ca:2f:
                    08:78:45:8f:c7:85:9b:0a:e9:80:51:ea:ee:0b:cd:
                    9e:e1:12:fa:fe:5a:a9:57:04:b2:66:3d:c1:e3:29:
                    63:ec:90:35:32:86:4a:90:fc:ab:d1:86:a7:04:b6:
                    13:06:d7:3c:5e:2d:9a:bf:20:8e:f4:c0:09:18:d4:
                    c0:57:1f:b5:71:ab:76:7b:dd:26:fa:ab:38:6f:e8:
                    a1:59:33:c5:f0:53:91:38:cc:ee:b1:b8:f9:41:6a:
                    32:1a:18:f8:bf:1d:70:1a:3f:90:fe:31:7f:7a:42:
                    33:33:93:0d:b6:ac:e8:d0:17:a9:b4:45:37:48:b3:
                    b9:71:bb:fe:7b:13:a3:86:96:dd:bf:5d:6d:17:83:
                    56:0d:fd:7a:51:2f:51:90:b8:03:db:e5:a4:82:46:
                    e4:c2:76:92:f5:ed:71:ee:07:13:59:53:0d:bb:03:
                    cf:2b:f5:53:f4:f1:91:c0:e8:a3:46:e6:34:c0:be:
                    a5:ab:f9:08:85:a5:cc:b9:68:da:8a:23:38:f1:6c:
                    ba:89:51:2d:35:2f:52:82:42:89:37:af:00:8e:45:
                    f8:8e:bb:f5:37:07:74:53:a0:c0:41:eb:ec:f3:9a:
                    86:77:38:14:01:e0:49:b5:d2:1d:3a:0c:47:21:8e:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:51:33:E1:9A:B6:A1:62:F1:5E:00:1A:AB:34:5C:74:2A:A9:93:F0
            X509v3 Authority Key Identifier:
                keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ba:27:a2:f6:df:85:0a:38:c0:6b:64:91:38:fd:10:00:6d:
         5e:92:18:6e:b6:70:1d:89:26:ab:94:3f:47:5e:1c:70:81:88:
         f3:86:70:5c:39:e0:c0:c3:27:5a:d5:ee:8b:79:07:45:02:fb:
         91:2c:50:e5:10:53:88:0e:6f:4c:b2:46:8c:6f:99:d2:70:b7:
         48:e7:f7:12:d3:65:e1:8b:30:df:0a:a1:0e:80:3a:9e:82:2b:
         87:77:e4:13:d3:ac:f4:d2:ab:2e:7b:b9:e2:10:fb:99:28:43:
         a0:1c:78:c5:ad:c7:2e:05:b4:dd:96:64:5e:c5:52:7b:85:b5:
         c7:41:13:bb:32:9f:51:92:43:a6:c4:af:40:05:14:17:f7:c3:
         2c:d8:9b:54:32:71:4e:91:a0:df:4b:c2:b6:82:74:62:4d:bd:
         f1:48:37:16:04:1a:6e:75:73:0f:64:1f:85:ef:25:77:eb:50:
         b5:79:1f:bc:43:9f:59:70:3d:23:98:6f:e4:7b:f9:7c:94:d7:
         b8:c5:9c:25:c9:7e:75:ca:32:a5:08:ce:30:5b:23:ec:13:e1:
         c4:bb:b2:56:d1:dc:bf:0f:29:b8:67:cc:1d:bb:6a:c2:ab:24:
         2e:22:09:5f:82:d7:93:3b:24:5f:e7:6f:e7:28:3e:f1:19:b3:
         13:13:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:53 2026 by rpki-client