Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
File:                     MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json)
Hash identifier:          reC6dNVBpJSR5zQfUuuV7vo14Yiw++2LVFusBQ7AWy8=
Subject key identifier:   EE:10:CC:2D:C1:B7:7E:81:E3:4C:A3:5E:48:9C:B3:D0:BC:C7:FE:33
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Certificate issuer:       /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
Manifest number:          0227
Signing time:             Sun 01 Mar 2026 03:29:24 +0000
Manifest this update:     Sun 01 Mar 2026 03:29:23 +0000
Manifest next update:     Sun 08 Mar 2026 03:29:23 +0000
Files and hashes:         1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: +J4Fyic8i1UERj8xvq0YSMzTZs4ck/9AEfLANS3NJDc=)
                          2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: EAhOEk1Moc8akKSrCsGi3T0LgEn8rEjOcRa2pHiI7Xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
                          rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
        Validity
            Not Before: Mar  1 03:29:23 2026 GMT
            Not After : Mar  8 03:29:23 2026 GMT
        Subject: CN=69a3b294-e09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:a1:0b:00:88:a7:56:b1:ce:60:01:b5:48:
                    f3:32:b6:79:98:7c:1f:05:64:95:f0:6f:c8:b2:8e:
                    6c:0d:43:e5:20:ae:2a:7f:a5:5f:6d:d3:42:62:3e:
                    01:d2:08:38:d8:76:a1:63:ba:ba:b4:bb:5b:51:55:
                    d2:bb:1c:6b:74:a9:cf:3f:8a:7e:eb:ed:0e:67:54:
                    d0:8a:cf:97:ee:9b:49:39:a5:bf:cb:07:0c:85:83:
                    25:cc:fc:d0:45:8d:4b:66:ca:17:4c:98:0a:36:ca:
                    50:e0:22:5f:fa:26:22:c6:4f:df:e4:d2:e8:cd:70:
                    e2:c4:c1:12:c9:e5:7e:0d:a0:8f:88:ee:38:36:5b:
                    df:7d:5e:54:1c:fd:2f:4c:9b:62:ee:c0:ee:77:68:
                    6a:57:4b:27:ad:ac:cd:81:dd:af:b5:6f:04:c9:ba:
                    a4:21:ea:d6:6c:8e:2b:cf:ae:75:a0:49:25:99:c9:
                    92:3e:93:c9:e9:b2:7b:75:93:8a:d8:02:30:da:ca:
                    e5:7f:da:90:fc:ec:e1:60:25:aa:59:e8:af:44:70:
                    98:28:a9:2b:54:ac:b7:d6:8b:4b:2b:75:3d:bc:65:
                    0a:21:0e:c4:a9:ea:2f:f3:55:b1:14:e9:36:86:45:
                    4b:98:2e:ef:85:22:de:3d:f1:07:32:05:a7:5b:1a:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:10:CC:2D:C1:B7:7E:81:E3:4C:A3:5E:48:9C:B3:D0:BC:C7:FE:33
            X509v3 Authority Key Identifier:
                keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:78:48:3e:b6:0a:c6:7f:9b:1e:f0:d0:35:c8:87:a6:43:eb:
         87:50:ee:48:fc:9b:f8:dd:14:1e:40:74:92:c6:e2:5b:40:87:
         dd:7b:04:14:64:14:5d:b4:0f:a8:28:02:bb:47:41:08:8e:7f:
         fd:22:c3:12:62:ec:4f:34:8e:9a:a3:b8:3f:b3:f2:ff:23:3b:
         d3:a6:6c:f3:77:39:6c:7f:ce:3a:97:69:a9:60:5d:01:b4:3d:
         73:ef:aa:83:f7:d4:6a:c2:52:ed:dc:fc:b7:f1:bd:60:14:22:
         e7:17:93:fe:f0:68:73:61:44:ff:72:1a:a4:6e:82:26:58:b1:
         8f:3d:3e:ec:0e:0c:75:53:ea:87:cb:05:37:ed:b3:80:ae:af:
         80:86:d1:68:44:50:73:b5:d2:b3:3a:46:48:35:b1:71:79:af:
         cd:df:7b:4e:40:d6:03:13:5f:e3:b8:3f:96:f0:55:54:10:8e:
         8e:4a:60:78:a0:af:91:b4:90:75:86:71:c8:36:84:26:bd:de:
         f6:86:f3:d7:74:b2:a9:ce:0c:97:d4:fc:d5:35:a5:06:b9:70:
         4f:07:13:95:9e:2e:a4:27:ac:53:2c:3f:f0:1c:c4:37:9a:51:
         1e:e0:04:7a:00:4c:16:94:ea:a0:e9:57:c9:f2:9e:27:d2:51:
         aa:3b:e6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:22 2026 by rpki-client