Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
File:                     gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft (raw, json)
Hash identifier:          2escKfAuUA1IuE2tZspJS9bUGgOGquElgsSsQwIqHFg=
Subject key identifier:   C2:01:D5:42:9D:9A:4A:1E:49:E1:37:FA:3D:20:DB:33:06:FC:30:93
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Certificate issuer:       /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial:       0E2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
Manifest number:          0E1E
Signing time:             Mon 02 Mar 2026 02:16:00 +0000
Manifest this update:     Mon 02 Mar 2026 02:15:59 +0000
Manifest next update:     Mon 09 Mar 2026 02:15:59 +0000
Files and hashes:         1: gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl (hash: QJ8JTeNubu1s5vKgINJgOiRmW2NzrS4/pM4tDWkcRj4=)
                          2: FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (hash: DD1ADaREQj4FZ7nnow63JObODw7KCChH9CO7F5RCGA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3626 (0xe2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
        Validity
            Not Before: Mar  2 02:15:59 2026 GMT
            Not After : Mar  9 02:15:59 2026 GMT
        Subject: CN=69a4f2e0-788c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:5a:4e:ba:2d:81:3a:bb:02:79:a2:e2:41:
                    6c:8a:c8:c2:30:55:f5:20:93:f4:ed:b6:22:8d:44:
                    56:e4:a7:ff:ce:61:c9:01:ef:18:bf:ef:62:1a:8a:
                    08:c6:e6:ce:ce:d9:0f:b0:a2:01:49:87:30:3d:cf:
                    26:cd:0a:da:02:a3:66:78:0c:84:4e:8a:9a:b8:16:
                    ca:59:23:6e:e0:dd:03:f7:25:10:d4:88:75:dd:c3:
                    f3:ab:23:df:21:31:1d:62:d3:b1:7c:e2:71:e5:28:
                    87:eb:09:1e:9f:74:15:ca:b4:7f:db:3c:fe:a2:0f:
                    33:74:81:9e:da:52:e6:e2:b8:b1:56:a2:02:a8:0f:
                    c5:80:06:99:5e:11:12:bb:3c:31:cb:5e:a3:57:6f:
                    a0:40:2b:e7:7b:44:d6:ca:9f:f3:93:e7:bf:a5:1d:
                    26:33:00:3e:d4:aa:34:fa:34:b2:dc:ec:c9:68:2b:
                    ec:a2:57:21:d9:16:3c:1b:f3:e8:50:a1:6b:37:4b:
                    73:2c:96:ff:8b:e1:f6:82:ea:24:44:21:48:ef:ad:
                    68:95:26:49:8d:41:c2:e7:d5:68:6a:d4:76:4c:54:
                    64:40:df:cf:ad:ce:e3:9d:5e:7a:2e:6d:95:f2:65:
                    33:16:1f:4c:41:73:31:03:ae:cf:d5:7d:6c:8a:07:
                    aa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:01:D5:42:9D:9A:4A:1E:49:E1:37:FA:3D:20:DB:33:06:FC:30:93
            X509v3 Authority Key Identifier:
                keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:45:a5:5c:cd:72:53:73:24:cf:dd:8b:4a:32:1d:fb:4e:48:
         6d:05:63:4c:04:9f:8c:c4:74:3d:b9:35:d3:27:3d:38:42:70:
         29:7f:ad:1d:f5:ff:e5:68:56:06:54:9c:81:89:e9:18:c8:49:
         42:ee:fc:d3:5d:bf:53:e5:95:f2:c3:26:99:bc:5b:8f:05:61:
         57:b3:38:d2:04:68:fb:bd:c9:3b:16:78:62:2a:33:4c:6a:89:
         2c:d2:97:8d:db:1f:2f:0b:75:b8:ba:f5:36:73:3e:d1:31:f9:
         bd:a5:b2:a5:1e:df:8a:31:5c:2f:f6:36:65:70:07:1b:f7:b7:
         16:2b:bc:ac:06:1b:93:5f:99:93:61:99:af:22:56:06:80:7a:
         0f:e8:f4:6a:70:bf:ca:a0:61:6e:18:f1:db:5b:1c:bc:79:2e:
         ca:5e:b9:0b:c5:13:17:3d:d1:c2:d7:31:32:31:dd:a1:86:8a:
         a5:90:b6:c1:8d:1f:3d:a2:b0:a4:83:ca:30:78:9a:80:84:35:
         21:7f:8e:03:42:1c:9b:64:16:01:c4:f2:2d:92:c7:ba:c5:3b:
         ac:72:23:72:be:86:dc:d2:9c:68:cf:ad:19:d6:6b:e8:bc:a8:
         3b:06:a5:71:ea:0c:bb:8c:93:e5:f8:64:8e:0c:5e:5a:de:66:
         75:62:ce:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:44 2026 by rpki-client