Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
File:                     3IDIXlEBCJqyQl0_yRd5haASXG4.mft (raw, json)
Hash identifier:          Sb74YR7dc3HUdD8v0lpZuqo1yiagIALAubx4Bjw2rOo=
Subject key identifier:   25:5E:0C:64:28:C0:54:07:C9:D0:C1:FA:69:FE:7E:1E:BD:D3:43:E1
Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E
Certificate issuer:       /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
Manifest number:          E4
Signing time:             Sun 01 Mar 2026 22:49:39 +0000
Manifest this update:     Sun 01 Mar 2026 22:49:38 +0000
Manifest next update:     Sun 08 Mar 2026 22:49:38 +0000
Files and hashes:         1: 3IDIXlEBCJqyQl0_yRd5haASXG4.crl (hash: uCSSZvYw0gsbSyN7NbWfdiUbftG3Wl0StsLLOc90qAg=)
                          2: 727850D8D3EF11EFB596E00CC4F9AE02.roa (hash: q0DHa5Wl8wyW8RcDFN0Qyu7ppbrZZWsxIyNW/w1xs0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl
                          rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D74A6, serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E
        Validity
            Not Before: Mar  1 22:49:38 2026 GMT
            Not After : Mar  8 22:49:38 2026 GMT
        Subject: CN=69a4c282-bd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:cf:50:02:57:49:74:57:c1:24:a3:88:52:
                    9e:37:a2:6f:54:af:8c:fb:2c:db:b5:fc:a8:33:e8:
                    eb:25:9a:a1:b6:ae:8d:f0:f6:46:99:9b:30:8f:61:
                    f6:f1:89:74:07:07:6b:aa:a9:5d:da:38:18:30:c3:
                    ca:0b:64:cb:f7:36:6a:5b:91:4b:c4:62:5d:b8:27:
                    7a:72:ab:df:1c:d3:67:cf:cf:1a:92:07:19:e9:11:
                    b9:02:77:62:7d:82:0d:6d:70:5f:6d:e4:ac:07:f6:
                    f3:d2:33:8a:df:0b:57:b4:8e:d3:30:89:e8:78:42:
                    78:3f:5f:10:e8:7f:59:ba:ff:a2:79:d2:1c:62:30:
                    09:c8:a8:08:6c:4c:7a:86:75:6a:94:8e:32:76:77:
                    ab:89:f8:cc:6c:04:5a:48:ff:30:35:d3:2f:f8:d7:
                    23:ce:d6:da:b6:08:e6:01:f5:45:a1:54:46:b8:7f:
                    e0:65:77:92:52:4e:bd:f7:c0:74:92:cd:bb:19:cc:
                    ba:25:e7:56:ac:b0:f5:1d:f4:0d:87:05:c9:92:3c:
                    0c:a8:69:fd:63:1d:ab:72:ba:9c:a1:46:ae:17:f5:
                    ff:07:d7:84:c5:c4:f3:82:9d:d8:4d:59:fc:03:c3:
                    d2:a4:4f:e4:b4:77:73:88:ef:d3:7e:7c:bd:35:de:
                    98:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5E:0C:64:28:C0:54:07:C9:D0:C1:FA:69:FE:7E:1E:BD:D3:43:E1
            X509v3 Authority Key Identifier:
                keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:2c:12:68:c6:58:95:9d:da:cc:a5:e4:99:c8:9e:20:08:2e:
         6e:76:56:0f:66:35:1f:ef:36:cb:c9:10:5a:98:ce:13:53:d3:
         82:98:74:0e:a8:cb:27:02:04:25:d9:b7:2e:0b:76:d9:5d:ae:
         44:f4:6f:64:a7:b4:c9:da:79:34:af:bb:ff:d3:1a:b0:a1:47:
         dc:5b:b7:7b:c2:08:77:79:f9:e1:56:12:4b:02:b1:61:11:d5:
         fd:b0:86:72:87:e5:57:87:d8:dd:4d:95:89:94:cb:ec:8f:21:
         8c:aa:99:70:45:f9:f7:8e:50:67:c1:6b:2d:35:c1:2c:23:20:
         70:37:29:d6:f6:67:53:0b:27:d2:57:c4:d6:20:b6:3f:f2:66:
         97:88:d2:7e:7c:fd:5b:43:72:46:0b:19:58:d0:68:92:fb:a2:
         c6:2b:8d:1e:15:49:23:06:70:0d:8c:2a:8c:05:b7:27:1f:81:
         45:3f:40:45:f6:99:6a:ea:d5:58:04:1a:cf:b5:19:10:75:2a:
         17:c1:2b:61:97:15:15:33:57:ba:0e:17:8a:cd:21:d6:00:3e:
         d7:79:5a:a4:bd:6d:4e:96:2c:61:09:b8:97:f9:b9:5a:64:cd:
         60:71:76:56:47:77:09:2e:a0:d7:1f:8c:29:5d:76:5b:c3:69:
         dc:22:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:02 2026 by rpki-client