Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
File:                     3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json)
Hash identifier:          PinAzuYvden0f9JiAIoylArAYxwrVsLQ9ceb0S9nZHg=
Subject key identifier:   AD:F6:6B:97:BF:7C:7B:B7:C6:1C:11:6A:8A:36:04:E0:6D:67:3E:7E
Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
Certificate issuer:       /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Certificate serial:       08BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
Manifest number:          08B2
Signing time:             Mon 02 Mar 2026 00:12:26 +0000
Manifest this update:     Mon 02 Mar 2026 00:12:24 +0000
Manifest next update:     Mon 09 Mar 2026 00:12:24 +0000
Files and hashes:         1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: kE4QJti5podU8YwXriFet7yEkLPEs8wcB8CPpDO+mKY=)
                          2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: 3Ec92baJsmBFXlv6Q2B/yYGvWMA45NR4PIY2EvsfluM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl
                          rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2239 (0x8bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
        Validity
            Not Before: Mar  2 00:12:24 2026 GMT
            Not After : Mar  9 00:12:24 2026 GMT
        Subject: CN=69a4d5ea-7b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b5:bc:37:d1:e1:e8:35:bf:1a:89:aa:27:e7:
                    05:61:7a:eb:e1:88:0b:0c:f2:14:bd:bf:a7:81:ac:
                    8c:83:1f:d5:b7:f5:19:fa:47:41:e7:b5:42:b5:a5:
                    b8:67:cb:04:a3:e9:1b:34:45:71:b7:dc:2d:8a:2b:
                    20:8b:10:54:71:43:8b:65:5c:ce:01:fd:e4:6a:44:
                    b4:89:80:6e:e7:da:e2:4d:8c:ce:47:6f:00:ca:13:
                    d1:81:0c:f9:4b:a6:67:e4:2f:64:e7:20:ba:5c:e3:
                    75:02:1f:03:a4:93:e6:50:fc:03:3a:9d:f9:9e:99:
                    d6:77:2a:2d:b9:07:8e:6d:6f:94:1f:8e:f8:1f:d6:
                    bb:4e:c4:15:82:48:9e:c8:7f:00:d8:da:e6:80:2d:
                    8a:d2:15:49:2d:77:97:d5:b2:0c:a2:06:21:a5:0f:
                    36:c6:bc:c8:74:5e:c3:63:8b:c4:ad:4e:73:fd:7b:
                    ad:77:75:98:30:62:64:32:f1:bb:18:31:9a:bc:22:
                    98:47:d5:76:39:f8:cb:10:37:2a:b6:92:0b:4e:23:
                    55:e9:f1:86:1d:84:ec:b1:69:45:da:ee:38:01:60:
                    d2:69:4f:6e:56:b9:27:df:f4:e0:3e:db:2b:d1:04:
                    0c:4c:3a:4e:08:d8:b7:01:74:bf:52:3b:60:40:7a:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F6:6B:97:BF:7C:7B:B7:C6:1C:11:6A:8A:36:04:E0:6D:67:3E:7E
            X509v3 Authority Key Identifier:
                keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2a:09:ab:04:4f:c7:60:5c:a2:46:28:31:93:a5:cb:eb:19:
         76:4f:4b:86:6b:bb:c6:d5:0f:e1:10:bf:64:d2:8d:8e:0b:d2:
         d9:ad:8f:58:14:48:37:33:53:14:83:30:8d:f2:61:a5:26:7f:
         01:5c:20:bf:9e:8e:fa:63:85:8a:17:27:ac:ca:33:f2:b9:17:
         ec:6d:60:24:bc:5a:63:5d:57:21:32:1e:51:9e:a7:77:38:b4:
         3b:85:e8:81:2d:9f:0e:2c:e8:1d:33:43:3f:51:89:33:8a:ef:
         0d:97:a0:cd:f6:98:a2:d5:60:c3:5c:cc:4b:04:75:9a:57:50:
         3d:d3:f8:99:56:aa:d6:d0:83:d6:6a:90:5b:b5:d4:e6:fb:15:
         a1:12:85:34:bf:0c:9d:cf:2a:f4:3d:c2:ec:b4:a9:e8:cc:fb:
         de:d1:b6:9c:53:03:38:f3:14:2b:ae:2f:b0:9e:36:32:05:f8:
         1e:63:3e:63:63:d4:69:58:5f:cb:de:fc:a2:70:1d:6f:47:d0:
         9d:ec:ac:3c:24:e0:e4:27:ee:2a:65:f3:3a:b7:be:93:5a:92:
         1e:f3:0d:2a:36:ee:c0:7a:0b:83:29:c4:9e:c2:02:10:26:5d:
         34:ea:06:73:1d:e9:d5:34:9a:2c:85:8e:c7:92:ee:ee:43:25:
         51:bd:df:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0RGRkIxMTAvBgNVBAUTKERFQjU2MzlGNTg0N0M3MERFMEZDNDRCRTc4NDI0MTE4
RjhBMjA2QzYwHhcNMjYwMzAyMDAxMjI0WhcNMjYwMzA5MDAxMjI0WjAYMRYwFAYD
VQQDEw02OWE0ZDVlYS03YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkLW8N9Hh6DW/GomqJ+cFYXrr4YgLDPIUvb+ngayMgx/Vt/UZ+kdB57VCtaW4
Z8sEo+kbNEVxt9wtiisgixBUcUOLZVzOAf3kakS0iYBu59riTYzOR28AyhPRgQz5
S6Zn5C9k5yC6XON1Ah8DpJPmUPwDOp35npnWdyotuQeObW+UH474H9a7TsQVgkie
yH8A2NrmgC2K0hVJLXeX1bIMogYhpQ82xrzIdF7DY4vErU5z/Xutd3WYMGJkMvG7
GDGavCKYR9V2OfjLEDcqtpILTiNV6fGGHYTssWlF2u44AWDSaU9uVrkn3/TgPtsr
0QQMTDpOCNi3AXS/UjtgQHpXWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK32a5e/
fHu3xhwRaoo2BOBtZz5+MB8GA1UdIwQYMBaAFN61Y59YR8cN4PxEvnhCQRj4ogbG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREZGQi8yN0U1MDZFNkQ0
RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3M2dfRVMtZUVKQkdQaWlC
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNyVmpuMWhIeHczZ19FUy1lRUpCR1BpaUJzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
REZGQi8yN0U1MDZFNkQ0RUYxMUVBOUE2MTcyNEFDNEY5QUUwMi8zclZqbjFoSHh3
M2dfRVMtZUVKQkdQaWlCc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFSoJqwRPx2BcokYoMZOly+sZdk9Lhmu7xtUP4RC/ZNKNjgvS2a2PWBRINzNT
FIMwjfJhpSZ/AVwgv56O+mOFihcnrMoz8rkX7G1gJLxaY11XITIeUZ6ndzi0O4Xo
gS2fDizoHTNDP1GJM4rvDZegzfaYotVgw1zMSwR1mldQPdP4mVaq1tCD1mqQW7XU
5vsVoRKFNL8Mnc8q9D3C7LSp6Mz73tG2nFMDOPMUK64vsJ42MgX4HmM+Y2PUaVhf
y978onAdb0fQneysPCTg5CfuKmXzOre+k1qSHvMNKjbuwHoLgynEnsICECZdNOoG
cx3p1TSaLIWOx5Lu7kMlUb3fBQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:54 2026 by rpki-client