Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
File:                     Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft (raw, json)
Hash identifier:          juN38QuHwfpP8aGE78rFKqSK0Yr/CtsukQ26CFYltIE=
Subject key identifier:   FD:8D:12:5A:A1:7C:96:4B:87:8E:BE:28:85:DA:84:B3:2D:D1:6D:F0
Authority key identifier: 4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D
Certificate issuer:       /CN=A91EE0A0/serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
Certificate serial:       02F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
Manifest number:          02F1
Signing time:             Mon 02 Mar 2026 00:26:45 +0000
Manifest this update:     Mon 02 Mar 2026 00:26:41 +0000
Manifest next update:     Mon 09 Mar 2026 00:26:41 +0000
Files and hashes:         1: Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl (hash: agxqrjeU5B0JDHc5ddw/C0NSg+4CiVQrleSgnZ/6h8g=)
                          2: 9682ACDE16A611ED86A3EF0CC4F9AE02.roa (hash: LqX1NYcUBpIFn4nEYWAdBnB30XYthrymeUC3YsifzY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE0A0, serialNumber=4A2FBB460D1BD8F316F6642D9EB5F4C3B220189D
        Validity
            Not Before: Mar  2 00:26:41 2026 GMT
            Not After : Mar  9 00:26:41 2026 GMT
        Subject: CN=69a4d944-db64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1e:df:10:e6:f7:73:7a:94:d4:ef:d8:09:7e:
                    f4:87:98:5d:eb:6c:12:1e:29:48:5c:7c:80:de:47:
                    86:72:2f:25:d9:09:22:51:a8:e7:7f:b3:b8:a4:81:
                    be:27:41:ad:81:8f:df:e9:09:4f:97:09:7c:c3:2f:
                    99:45:bd:79:3a:41:71:0d:54:a1:7d:f4:2c:e7:f1:
                    b2:46:d6:85:b9:bf:9b:d1:06:74:3f:0f:27:66:b5:
                    b8:7f:81:d9:aa:22:d9:3e:27:bb:cb:8c:9e:5f:cd:
                    ec:b8:d3:03:e6:84:57:9e:1c:27:8f:d4:ce:58:ce:
                    e0:ad:83:26:d3:14:e3:a9:66:5f:db:b0:da:05:5a:
                    40:95:31:c5:d1:96:29:40:ef:03:81:01:37:c2:a8:
                    20:58:94:c3:52:ed:1c:49:7b:43:87:d7:15:14:22:
                    ae:1d:9e:78:47:b1:64:93:d3:07:0c:7f:2c:1f:9e:
                    3b:13:fc:06:53:09:b6:eb:1a:78:1f:43:6a:45:6e:
                    e8:2b:f5:b5:8a:e8:13:cd:41:df:f5:d3:04:de:b2:
                    f1:e2:e9:2e:c8:d4:23:6c:8a:05:3f:01:2c:5c:cd:
                    7d:c7:b8:a8:2a:e7:58:e6:41:be:74:01:44:34:14:
                    00:c6:00:9a:73:59:28:82:3d:18:c8:d6:10:c1:07:
                    b7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8D:12:5A:A1:7C:96:4B:87:8E:BE:28:85:DA:84:B3:2D:D1:6D:F0
            X509v3 Authority Key Identifier:
                keyid:4A:2F:BB:46:0D:1B:D8:F3:16:F6:64:2D:9E:B5:F4:C3:B2:20:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE0A0/A425756216A411ED8E37C70CC4F9AE02/Si-7Rg0b2PMW9mQtnrX0w7IgGJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:9a:d6:a1:86:3b:1d:fe:8e:22:19:73:ac:93:b2:8d:65:17:
         25:50:4c:f1:70:73:1f:e4:0f:19:7b:32:6f:d6:01:3e:45:86:
         0d:54:dc:bf:8a:64:3b:a5:6e:3c:81:2c:82:26:3e:32:0f:5a:
         52:d6:7b:34:f6:79:0f:bf:25:b2:08:f8:02:97:6f:2e:88:85:
         8f:20:f8:50:de:71:06:71:25:e1:05:19:3c:0c:28:c1:e0:7a:
         d6:50:54:01:fd:c4:02:e1:65:03:5a:61:fe:b0:59:09:c6:95:
         3a:32:97:f2:79:6c:67:66:a2:6f:e5:d0:4a:68:8d:38:00:cd:
         d6:a5:45:e1:ba:4a:de:ef:ea:40:66:1b:8d:23:a9:20:94:7d:
         97:9b:fe:60:36:74:2d:c6:0e:4b:a9:41:15:42:4f:ef:49:7c:
         7d:92:9d:bb:3b:f4:8d:1e:87:a9:f6:55:45:ba:c0:f0:99:f5:
         0c:f9:9b:b2:0f:b2:71:44:be:1c:ac:74:44:c6:23:e5:d2:3a:
         4a:0f:38:1c:cc:9a:11:d8:c4:7e:44:1a:c0:c2:9c:39:ea:ec:
         b3:b0:61:05:73:34:41:d8:df:52:87:19:90:02:3e:6e:bb:99:
         fd:63:6c:cd:19:12:ca:b5:25:fe:95:73:61:81:01:89:2b:29:
         25:0f:33:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:24 2026 by rpki-client