Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
File:                     35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json)
Hash identifier:          OGyVrDMPevz1vo1fXyGBqVeoQNe51soTHhW56APMuwM=
Subject key identifier:   C9:99:A4:8E:D6:5C:73:1B:E8:EF:27:D9:B4:21:9A:9F:B9:D4:44:45
Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D
Certificate issuer:       /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
Manifest number:          58
Signing time:             Sun 01 Mar 2026 09:32:46 +0000
Manifest this update:     Sun 01 Mar 2026 09:32:46 +0000
Manifest next update:     Sun 08 Mar 2026 09:32:46 +0000
Files and hashes:         1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: hj1h38hkhlSgPZJAstq186pmBl4fWFs91p2/jVpQ90A=)
                          2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: EjqSo3SW+tOTV2FfgYGjfnvYu8XgeXYJLsSNDtZjQcU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl
                          rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D
        Validity
            Not Before: Mar  1 09:32:46 2026 GMT
            Not After : Mar  8 09:32:46 2026 GMT
        Subject: CN=69a407be-2f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:ac:f8:a0:fb:8f:80:1d:b6:4a:08:c1:82:
                    89:4a:41:92:3a:ab:70:a7:55:fd:d4:3d:c3:d5:fe:
                    09:f4:f5:a3:26:9f:5d:9a:cc:a8:e8:4f:d8:f9:4e:
                    1d:a8:7e:30:0a:52:a3:54:48:d0:88:6d:e3:86:b7:
                    6d:0c:96:eb:47:90:ca:32:6a:6b:93:de:14:3f:2b:
                    66:e4:7c:28:8d:4e:3f:9e:b5:19:b1:05:fa:99:57:
                    94:7f:d0:99:a5:55:fd:1d:f4:15:30:5d:f3:f6:31:
                    11:22:50:04:5c:f3:c1:70:7f:fc:23:0c:53:dc:78:
                    b4:1a:5c:67:6e:81:8a:24:fd:6d:90:53:4a:06:fe:
                    5c:76:dd:98:df:45:e3:a6:dd:19:5a:92:81:6d:b8:
                    75:ee:35:26:2e:1a:4a:23:39:51:c7:a5:0b:dc:04:
                    ee:93:98:10:b3:2f:d2:8c:15:eb:d4:12:f9:65:f5:
                    4f:b6:b9:4a:ea:a4:13:a5:ce:5c:de:14:f6:e9:6b:
                    c0:24:71:95:3e:7c:61:5d:98:94:0e:09:95:bd:a8:
                    54:6c:30:ae:be:d0:ef:33:9d:e0:4e:35:43:9c:cb:
                    4f:0c:74:b9:2a:21:2d:c4:1e:38:66:60:5b:f8:a7:
                    46:08:ac:b3:20:ba:01:eb:d3:d7:1f:45:be:a0:59:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:99:A4:8E:D6:5C:73:1B:E8:EF:27:D9:B4:21:9A:9F:B9:D4:44:45
            X509v3 Authority Key Identifier:
                keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b8:aa:1d:01:3f:f0:09:be:bd:52:33:60:1e:10:72:56:f0:
         63:f4:f7:38:a8:83:ef:b9:0c:c4:02:8f:76:6f:6e:49:91:7d:
         76:ee:bd:43:18:ea:98:e1:f0:0d:a1:f2:f6:89:f5:86:b9:b6:
         bf:56:62:23:87:c0:3f:76:c6:49:f5:77:c1:c7:c4:9e:41:5f:
         67:57:2f:0b:f5:17:18:ad:8d:a3:7f:53:24:04:c8:74:eb:60:
         ea:1a:7e:b7:d2:36:f2:30:a0:da:7d:8f:ce:8d:8a:a4:c7:38:
         10:36:7f:7b:4d:63:33:58:4e:28:82:80:8d:00:6e:35:4e:a0:
         7d:35:46:17:19:ff:e3:5e:1b:bc:a7:f5:c7:23:e1:99:5e:18:
         19:ed:f2:01:f1:32:43:89:52:01:0e:4f:9e:21:1a:fb:5f:ef:
         59:b2:57:14:60:e7:2c:b2:8a:9e:a5:5d:50:78:1f:10:03:db:
         7c:d1:37:4d:fd:8f:fb:82:24:8e:94:88:0d:7c:e9:9b:07:27:
         bd:d9:b9:28:0b:e2:90:0b:81:a8:9f:b4:3c:5e:3a:5a:1c:ef:
         3d:57:23:94:5a:de:f7:6a:b0:71:61:41:ea:91:b8:73:ca:3c:
         6c:5a:47:db:d7:b7:0a:e2:a7:a8:1c:0d:da:fd:6b:69:7b:68:
         bc:4f:a3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:49 2026 by rpki-client