Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
File:                     VU9dfGbsUOhKiru6mWgXfkcp02Y.mft (raw, json)
Hash identifier:          25ccg+D02gAkpGMdH4XIonmiRSenE5GDWbx6sPVAlLo=
Subject key identifier:   75:00:2C:DE:95:41:3C:0C:54:B8:85:42:F9:1F:7C:BB:34:3E:7A:46
Authority key identifier: 55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66
Certificate issuer:       /CN=A91E8BE3/serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
Manifest number:          E3
Signing time:             Sun 01 Mar 2026 07:39:10 +0000
Manifest this update:     Sun 01 Mar 2026 07:39:09 +0000
Manifest next update:     Sun 08 Mar 2026 07:39:09 +0000
Files and hashes:         1: VU9dfGbsUOhKiru6mWgXfkcp02Y.crl (hash: SarB3uGB0U5RC5ptLyIKLmPsU9nRGeUFHBehwgfdTyw=)
                          2: 0AC098846EDA11F08D404571C4F9AE02.roa (hash: acdjNXRY3O7Ns10CD7LhPP3SNCPuRTHiDFnBena+n5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8BE3, serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
        Validity
            Not Before: Mar  1 07:39:09 2026 GMT
            Not After : Mar  8 07:39:09 2026 GMT
        Subject: CN=69a3ed1e-9ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:fd:3b:c8:3b:d6:93:5d:50:87:52:03:45:
                    f3:0a:88:1c:4e:6b:60:3e:a6:e8:3a:70:02:3d:ca:
                    7e:1e:84:6d:f4:a8:d2:79:35:54:6b:30:c7:8d:34:
                    40:5a:e6:55:0d:0d:94:8e:cb:43:60:2b:d7:86:4e:
                    22:32:86:9c:2a:30:1b:f6:20:6c:ab:c7:2a:eb:06:
                    9a:26:d3:71:21:8c:10:73:c6:9c:99:82:db:5b:a2:
                    6c:80:e1:fb:6a:1b:4c:80:31:1f:0f:7b:bc:75:82:
                    19:09:57:89:7d:0e:a2:8e:15:07:2d:01:c9:67:03:
                    f6:e4:80:a4:07:2f:8e:5d:f9:31:9c:d3:4b:9c:ac:
                    97:e9:03:94:55:94:fa:75:73:94:9e:ed:1c:08:a4:
                    9d:85:d1:15:8d:18:fe:86:57:27:fc:26:77:b1:f7:
                    bc:96:3f:f5:15:d3:56:97:cc:c0:a4:f2:d0:4b:64:
                    74:cc:49:da:a9:03:3d:e8:e9:e0:93:42:29:4e:1d:
                    4f:51:9c:9d:e1:e6:b9:4a:a2:97:b5:17:9d:86:92:
                    92:42:f5:c7:cd:d3:d8:d1:e6:4a:30:a2:ed:d4:76:
                    9b:a6:10:43:fd:51:55:06:4f:e9:79:c0:8e:2e:15:
                    ba:05:de:75:fc:44:1b:35:d2:cd:0b:a8:6f:d5:a8:
                    f7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:00:2C:DE:95:41:3C:0C:54:B8:85:42:F9:1F:7C:BB:34:3E:7A:46
            X509v3 Authority Key Identifier:
                keyid:55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:db:5c:7b:c9:5e:e4:93:e9:7d:4a:17:8a:ae:91:f6:67:03:
         b8:4a:c1:a9:f1:48:02:7a:4b:00:7d:60:35:e3:41:93:64:93:
         6b:12:ff:67:8e:cc:a4:34:66:13:c5:bb:e5:b1:01:30:f4:d6:
         5d:3f:8e:20:0f:54:aa:b7:48:b4:06:4e:b7:55:ba:d9:6d:ee:
         e6:07:9f:68:e9:72:f9:cd:5d:29:33:54:78:19:68:53:47:07:
         ca:f6:09:8f:82:da:a7:e3:f1:02:8b:27:0f:d1:00:0a:ce:b2:
         99:0a:63:16:1c:fd:39:83:e1:c5:fb:8f:9f:c3:fc:c3:68:84:
         38:01:a8:96:f9:82:cc:bf:e1:fb:32:12:d4:a7:5e:3d:db:ab:
         e2:d5:c6:73:d6:cc:5c:ce:54:aa:b7:3c:d7:d4:28:01:b9:c7:
         90:58:26:21:20:1c:1d:47:d6:3e:51:fc:89:29:a2:77:93:27:
         c4:dd:79:09:b9:1a:35:bd:e2:4f:88:71:57:8f:2b:42:75:c5:
         61:d1:00:20:97:eb:34:44:17:b0:3a:02:5a:8e:7c:f0:b9:77:
         49:ca:e4:af:85:71:b8:f7:95:68:4a:a7:c4:e2:69:2f:e1:30:
         c9:02:3b:03:26:95:b5:5d:47:52:16:ab:b0:29:00:ba:3b:96:
         e1:ca:37:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:44 2026 by rpki-client