Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
File:                     SLmUWYf2drRs7T3hKEmoo49AaLU.mft (raw, json)
Hash identifier:          kmxBN7QlxijMw0eJVk8Na9KnzocuTNzvSZcdV2mH80k=
Subject key identifier:   2B:3C:94:E2:83:5D:20:56:43:90:CE:C0:25:E5:ED:F7:AE:9E:FE:B9
Authority key identifier: 48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5
Certificate issuer:       /CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5
Certificate serial:       087C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
Manifest number:          0868
Signing time:             Sat 28 Feb 2026 21:06:16 +0000
Manifest this update:     Sat 28 Feb 2026 21:06:14 +0000
Manifest next update:     Sat 07 Mar 2026 21:06:14 +0000
Files and hashes:         1: SLmUWYf2drRs7T3hKEmoo49AaLU.crl (hash: YaXZprqZXR31aQ/HVuCwu6iOxNwYnofo++oA4/3PmOA=)
                          2: 37A46070F6F211EA922F482BC4F9AE02.roa (hash: 945IwSRQpquR63B4O0BtV6nqh3ke3gGQ6coFK1lAOcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2172 (0x87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1BAB, serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5
        Validity
            Not Before: Feb 28 21:06:14 2026 GMT
            Not After : Mar  7 21:06:14 2026 GMT
        Subject: CN=69a358c7-cdc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:73:28:f9:3a:69:07:36:fe:e5:7e:a4:1b:cf:
                    c1:4f:e3:db:17:2a:ac:d2:b4:e7:97:9a:4a:ec:0a:
                    4f:54:11:c5:c0:ed:7c:c1:c5:44:1e:1c:54:04:40:
                    e8:04:eb:98:7f:3e:8a:5e:c5:52:3b:ba:65:7c:79:
                    d1:ad:7b:d6:4c:39:d7:10:37:6a:15:d2:5c:e4:a6:
                    b2:f0:e3:43:b3:91:4c:6c:a4:6e:e6:c4:9a:a0:6c:
                    59:ad:98:fa:7a:33:9e:cb:48:22:bf:60:ad:c7:86:
                    33:3f:b5:ce:0d:8c:c2:c6:00:fa:07:b0:90:b9:40:
                    59:4d:96:41:98:ae:18:8b:be:d3:45:ea:a5:b7:6a:
                    d6:55:d3:e3:44:72:79:ed:1d:ee:6c:dc:06:94:70:
                    20:84:b8:19:bf:a3:ef:51:e0:c8:82:81:34:26:d4:
                    51:8d:04:5f:5a:d3:40:f1:b0:c8:99:8c:eb:bc:fe:
                    65:aa:c8:e6:9f:a0:87:a6:a8:c3:c7:02:e9:3a:69:
                    e3:7d:c5:09:1b:33:85:bc:0e:16:c3:d1:14:6a:99:
                    19:e7:57:8d:15:b4:f7:18:81:8e:91:33:8f:23:f7:
                    16:c5:7a:ca:7c:3a:0f:ef:42:16:26:3f:8b:14:a0:
                    a6:b6:fd:07:87:9e:83:91:ba:c1:b6:cf:f9:e6:bf:
                    94:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3C:94:E2:83:5D:20:56:43:90:CE:C0:25:E5:ED:F7:AE:9E:FE:B9
            X509v3 Authority Key Identifier:
                keyid:48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:bd:82:96:78:65:c9:5e:99:c3:70:09:91:81:ff:1d:88:d0:
         4d:29:19:a5:9b:70:12:a9:cc:90:48:39:66:95:51:70:76:09:
         6e:86:12:34:1b:e4:00:73:85:cd:52:8d:60:d4:bd:21:66:9b:
         b3:d2:7d:62:e5:4b:f9:b9:6c:7c:ae:c3:6e:2b:57:62:ad:a1:
         3f:4f:a9:57:59:c4:f9:53:11:e7:61:a8:0c:33:0c:18:e3:95:
         ff:10:9f:7e:28:19:a6:9d:2b:fe:c7:b6:6f:a3:80:df:ab:0d:
         8a:f6:ea:8e:02:d3:76:04:45:fc:52:87:75:fd:52:c1:10:7a:
         21:db:5b:d7:46:e6:1c:3a:cb:31:4e:d6:db:a6:6b:55:a2:ae:
         61:41:27:ac:09:69:a4:d1:08:71:3c:d5:fd:22:04:d1:70:45:
         8b:26:ca:91:d2:b6:52:8a:06:37:4e:7c:0b:59:1e:5d:32:8d:
         84:1e:cc:d8:9f:3d:32:d5:fc:1e:d8:08:60:c9:76:40:82:05:
         46:a8:66:50:69:61:cd:60:b0:f1:1f:60:a5:d8:ad:18:e7:5e:
         22:7d:e2:5b:93:63:b4:e5:8b:a2:bf:cd:e1:09:5b:11:3d:66:
         32:29:53:d7:4c:61:78:c4:7a:6a:24:a9:13:e4:a2:79:ee:59:
         a3:14:8a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:47 2026 by rpki-client