Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
File:                     3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json)
Hash identifier:          cQvBeWXN5My3Pb3eVQoJYVdG9Mi8Z1dkuaRzgcCs19o=
Subject key identifier:   62:C3:11:AC:C6:5A:19:13:CB:4E:35:8C:4D:48:4F:9C:FB:FE:63:EC
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Certificate issuer:       /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial:       1922
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
Manifest number:          191B
Signing time:             Sat 28 Feb 2026 15:48:42 +0000
Manifest this update:     Sat 28 Feb 2026 15:48:42 +0000
Manifest next update:     Sat 07 Mar 2026 15:48:42 +0000
Files and hashes:         1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: YjUQ+bmb59hUhH4m9+pdzcxUHVt43YlLJEe+dxFPMZ0=)
                          2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: iFM56WrKeXwdoA2Uh6qPu0ZtIRkJDq6/ES1KC7jnXoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6434 (0x1922)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
        Validity
            Not Before: Feb 28 15:48:42 2026 GMT
            Not After : Mar  7 15:48:42 2026 GMT
        Subject: CN=69a30e5a-3fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6c:c6:bd:b8:b8:d7:f8:5d:dd:fc:e7:07:b5:
                    09:e2:a4:9f:74:bb:c9:ed:71:e6:40:f0:0f:c5:17:
                    2f:cd:54:8d:9d:af:4e:97:b0:fd:a6:24:47:ad:84:
                    d8:26:fa:0a:53:98:2e:cd:90:2e:a4:ec:30:92:af:
                    d9:73:84:eb:b7:48:78:88:1d:3f:47:41:50:0f:98:
                    d2:ab:2d:b1:1c:7b:e9:e4:97:7b:45:9c:64:38:26:
                    c1:60:44:62:54:da:9e:c9:d8:26:67:dd:36:09:f2:
                    2e:bc:47:72:28:36:49:f4:84:21:37:6a:4c:86:49:
                    12:c4:e5:ac:17:4d:57:38:2a:54:07:6f:4e:01:70:
                    4a:af:69:97:22:75:cd:c8:e3:63:75:73:12:cd:cc:
                    61:93:90:61:78:ad:dc:4a:28:c7:3e:2f:0e:b7:fd:
                    b0:ae:30:5a:46:6a:63:c2:1d:e9:fa:2c:19:dc:c5:
                    af:40:3e:83:6c:33:6e:6d:5e:40:ba:36:b6:37:aa:
                    cd:86:f1:83:d1:fd:5a:6b:49:a6:99:a2:bb:57:58:
                    02:75:eb:cf:71:24:57:81:16:be:26:3e:2f:03:05:
                    42:0a:7b:9f:08:aa:e1:b0:d4:52:00:1e:31:d1:2a:
                    d1:a5:7c:48:5f:f8:41:ac:e5:0e:32:cf:49:ee:2d:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C3:11:AC:C6:5A:19:13:CB:4E:35:8C:4D:48:4F:9C:FB:FE:63:EC
            X509v3 Authority Key Identifier:
                keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:19:9d:95:ce:39:ff:29:8e:04:81:f9:a9:dc:93:76:f2:c0:
         3a:59:a5:39:bc:6e:fc:38:82:e0:0a:b9:65:ad:5e:46:f9:98:
         58:50:49:d9:3e:7f:e1:33:d1:0c:28:0f:6a:23:9c:59:cf:cb:
         fa:40:9d:7d:39:88:40:f8:60:99:8b:05:09:29:9e:4d:61:a1:
         9b:a6:b5:25:09:6b:74:06:73:a2:2b:88:0d:cc:f9:e6:67:0d:
         7d:a6:f0:9f:de:7f:ba:0b:71:d3:bc:44:73:e2:22:66:60:cb:
         97:1c:f9:b2:51:31:4f:41:1d:ba:a4:6d:eb:b1:4e:9e:3a:a3:
         66:5c:43:b7:2b:ca:51:5f:fa:e0:de:51:f8:4e:12:df:93:2f:
         9e:5e:13:a9:ee:d2:2d:2c:77:51:06:ed:a5:34:10:f6:b6:6e:
         a7:c3:7f:be:b2:64:50:77:0a:6f:6a:f5:db:58:47:df:60:fc:
         ba:e2:90:ba:89:69:9d:8a:96:93:46:ed:62:a4:3e:28:f3:b0:
         2e:5e:d9:90:a9:c0:dc:f7:62:a4:81:96:f1:d9:15:a6:5d:eb:
         00:3f:2d:b4:73:3a:18:0f:1a:01:d2:89:f0:1e:4a:92:08:b5:
         f0:ce:35:af:75:a2:ec:fc:35:ca:b8:2b:c2:b9:d8:bf:c6:38:
         09:0c:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:03:07 2026 by rpki-client