Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
File:                     E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json)
Hash identifier:          blDZnw3LTy9B+J+jmjSADuwi82wahNAcbXv/m9+lOzY=
Subject key identifier:   45:ED:79:9E:7A:CE:0B:3C:D5:77:E4:07:57:07:E4:E4:8B:38:42:DF
Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
Certificate issuer:       /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Certificate serial:       0559
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
Manifest number:          054E
Signing time:             Sun 01 Mar 2026 23:26:08 +0000
Manifest this update:     Sun 01 Mar 2026 23:26:06 +0000
Manifest next update:     Sun 08 Mar 2026 23:26:06 +0000
Files and hashes:         1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: Yez7WQZYssUAa4H84Ic5zPTfgzxr9NEJxDJ0OmMYDGo=)
                          2: E7676A04A13B11F0B587F733C4F9AE02.roa (hash: XfFdX5d8Ofy55y20y+nCuMM/y19ZpXijIq/KSvDPE2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
                          rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369 (0x559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
        Validity
            Not Before: Mar  1 23:26:06 2026 GMT
            Not After : Mar  8 23:26:06 2026 GMT
        Subject: CN=69a4cb0f-347e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c8:fd:52:87:a0:68:c2:9a:4e:97:06:8d:a6:
                    cc:78:68:33:99:61:83:23:a9:58:2a:c7:31:7c:e9:
                    03:23:30:20:83:a3:6a:e6:39:09:64:dd:c4:a5:08:
                    6e:41:c4:08:6c:22:62:3d:b9:6b:65:28:a3:74:85:
                    c3:5e:b0:2b:24:b4:42:5d:d2:fb:81:79:27:2b:7e:
                    37:a6:73:89:24:d3:58:0e:72:0e:38:7d:bf:39:03:
                    24:77:5f:f0:1b:fe:64:77:41:8f:8e:21:ff:67:7f:
                    d2:c6:9b:fa:15:c5:c9:70:06:60:7d:a5:41:cb:5b:
                    e0:4f:9c:f7:36:70:aa:fe:78:98:f2:76:45:ec:b8:
                    62:9e:06:04:53:11:3c:ab:51:b3:88:94:e1:ba:4f:
                    40:98:ea:87:c5:ff:7d:01:74:4d:7c:ab:7a:ee:09:
                    94:ce:fd:13:02:03:7e:75:4c:1d:46:15:98:15:0e:
                    34:78:4f:b6:d6:62:ea:f3:0e:d1:95:7f:17:6c:da:
                    98:36:be:5f:84:0b:f4:03:74:4c:95:89:ec:f6:64:
                    f8:15:44:1d:0a:64:fc:7f:53:4d:7b:20:1a:65:bb:
                    94:f3:f2:3a:76:69:5d:59:63:d7:f2:d6:f8:92:b4:
                    66:66:84:9b:85:55:6b:29:c0:64:6e:b6:c2:76:fb:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:ED:79:9E:7A:CE:0B:3C:D5:77:E4:07:57:07:E4:E4:8B:38:42:DF
            X509v3 Authority Key Identifier:
                keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:20:05:f6:8d:d6:e8:1f:b3:bd:5b:95:e6:aa:9d:73:77:23:
         72:d3:43:8b:c9:b8:94:31:73:58:b1:6c:bd:57:b8:55:cc:65:
         ae:de:1a:c7:85:78:99:7a:ea:2f:73:53:0f:28:1e:3e:d2:51:
         75:e5:04:b2:fa:68:88:7c:17:ef:51:33:b9:dd:e3:8f:23:b0:
         d3:0b:bf:46:aa:7c:17:58:6e:b4:14:0c:39:0a:29:2a:c8:78:
         db:42:dc:21:31:05:dd:e2:73:c6:3b:21:51:2e:76:50:ef:75:
         91:8d:e7:25:93:9f:06:f8:0d:b5:59:a7:d4:f3:64:17:ce:79:
         27:c2:ad:5d:d7:f0:50:2f:73:6b:1c:b2:e3:0e:e7:4f:7f:5a:
         4c:cf:06:90:57:07:5d:f0:46:d7:2b:83:7c:c4:f6:3c:c1:ad:
         8e:71:63:b8:ba:81:37:f6:e3:30:a4:92:2e:25:9d:e2:b4:ac:
         85:2d:39:cd:75:92:55:ce:13:a3:6d:c0:37:a8:e2:a8:7c:18:
         00:eb:c4:01:f1:2f:29:43:70:f0:c9:13:34:66:14:69:63:e0:
         35:04:41:f1:21:65:c8:1e:8b:2a:ba:58:03:20:5f:37:b8:b1:
         bc:fb:f0:10:8f:4b:9d:6e:75:59:67:4b:84:ff:db:ad:6c:e9:
         69:9b:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:49:31 2026 by rpki-client