Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
File:                     sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json)
Hash identifier:          5JZDnS3FyfUcgCxPFDpEoaa/JlxT+kEAe+HPf0aYxz0=
Subject key identifier:   8C:17:46:96:C9:34:5F:6B:43:28:37:8F:DD:FE:45:6D:57:D6:97:29
Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40
Certificate issuer:       /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
Certificate serial:       351A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
Manifest number:          3515
Signing time:             Sun 01 Mar 2026 23:11:31 +0000
Manifest this update:     Sun 01 Mar 2026 23:11:31 +0000
Manifest next update:     Sun 08 Mar 2026 23:11:31 +0000
Files and hashes:         1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: pxV7uhs7XDU76s/x2xBBK5EM3lz97FPx3lTZgthRvmA=)
                          2: 8146430A45BE11EF92C29882C4F9AE02.roa (hash: zBVuWCHc4lzO9QNlV2GGFOrIuW/CBB9gjpbg2O07Y+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13594 (0x351a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62A9, serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
        Validity
            Not Before: Mar  1 23:11:31 2026 GMT
            Not After : Mar  8 23:11:31 2026 GMT
        Subject: CN=69a4c7a3-5344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:32:6d:77:58:6a:c7:93:15:1c:4a:36:34:
                    43:e6:dc:ee:d6:22:e4:93:29:99:14:5d:36:ca:45:
                    87:05:00:63:e6:8a:66:be:b5:c3:4e:b5:fa:29:68:
                    a1:3b:0e:2e:f4:54:b8:c0:d2:9d:bf:db:ea:23:be:
                    ad:9e:7e:74:06:82:85:a8:67:aa:03:4b:e0:80:13:
                    6e:d6:45:50:c2:fa:6b:1b:67:83:98:26:0e:dc:7d:
                    17:83:20:b3:e0:e2:2b:a1:38:39:be:49:e9:9d:9f:
                    9f:fa:f1:40:7c:d9:ad:d4:c4:23:ae:a6:72:ba:82:
                    8c:29:44:4b:83:18:0e:1e:61:46:ef:dd:b7:a2:0e:
                    13:c6:9f:0f:d6:c5:ee:09:f6:ea:65:de:44:e5:6a:
                    5b:15:15:94:d7:52:9c:fd:2d:68:dc:82:5f:08:3d:
                    39:7f:ab:4a:9f:14:5b:d8:e9:79:d0:f9:38:0d:f4:
                    e9:d1:37:dd:e9:3f:e1:67:47:c6:25:5c:66:4a:da:
                    11:f2:21:4c:a9:47:f0:16:f1:11:91:9a:86:0e:2d:
                    57:de:f2:63:25:31:c8:f2:d4:3d:7a:fc:53:a6:62:
                    ae:fd:42:67:fd:22:92:03:4f:48:5b:e7:cb:f2:3f:
                    35:e7:ba:b7:00:cf:b8:e2:0e:de:2d:6e:fb:8a:99:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:17:46:96:C9:34:5F:6B:43:28:37:8F:DD:FE:45:6D:57:D6:97:29
            X509v3 Authority Key Identifier:
                keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:cc:18:84:3d:92:43:64:4f:93:d4:e9:64:22:11:17:00:ca:
         cc:c2:f1:3e:5f:4a:f4:44:dc:f6:96:4f:62:0e:df:8f:54:b2:
         e0:59:c7:60:df:8d:14:5c:50:1b:46:58:39:6d:f7:81:34:31:
         56:6a:7a:5c:7b:33:72:14:ef:e8:db:15:9e:da:51:2c:52:d9:
         6a:09:e7:05:4c:d8:0f:ce:ee:84:f7:51:dc:cb:68:db:a9:4c:
         17:98:07:ca:8a:d5:59:1e:d7:6e:66:be:94:10:18:9c:56:29:
         18:5d:e1:d3:07:64:dc:3a:4f:e6:1c:34:98:ff:d0:f6:18:23:
         be:a6:fb:bb:9b:74:5d:20:1d:8f:03:96:e8:85:f2:4b:eb:01:
         af:73:24:5c:25:d3:4b:e5:c9:37:46:88:13:f9:64:9f:d6:82:
         3e:d5:a8:34:d7:5a:68:da:c9:07:18:3e:3f:17:39:37:33:46:
         87:af:27:df:a8:7e:24:c1:d9:4e:68:82:53:b9:ed:e7:86:2e:
         7e:16:ee:02:08:be:92:32:e0:10:b5:88:4f:e0:6e:e1:ff:79:
         56:43:96:30:0b:39:0b:c0:c0:12:3a:78:5b:b5:bd:09:69:a9:
         2c:7f:31:4c:09:b3:e8:ff:63:49:74:c4:ad:62:91:2a:16:73:
         93:24:0b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:06 2026 by rpki-client