Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
File:                     t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json)
Hash identifier:          twylPtAQ3jL/a/jzk3MO58H8r6haL4vP1aU0oDZZpDo=
Subject key identifier:   98:B6:9E:46:CB:11:6A:B3:BD:E5:E3:47:BA:59:F6:11:A1:1F:CB:E2
Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35
Certificate issuer:       /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235
Certificate serial:       07DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
Manifest number:          2DF3
Signing time:             Sat 28 Feb 2026 16:27:19 +0000
Manifest this update:     Sat 28 Feb 2026 16:27:18 +0000
Manifest next update:     Sat 07 Mar 2026 16:27:18 +0000
Files and hashes:         1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: h/Rn2GgYkM5NnNlf/zzN/4LRhmWKCJPiVm8zmotBrI8=)
                          2: 4F7B7728DD5D11EF9312601BC4F9AE02.roa (hash: Ftg4ftCr2lGn4RvcA0VVEwLsH6nD0OpE3hi7kVlpjbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl
                          rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235
        Validity
            Not Before: Feb 28 16:27:18 2026 GMT
            Not After : Mar  7 16:27:18 2026 GMT
        Subject: CN=69a31767-8b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f7:64:c0:5c:a3:ce:31:94:2e:20:ee:ab:ef:
                    08:6b:1d:40:e7:95:7e:5b:f3:80:ba:f5:24:10:64:
                    34:8a:2d:0b:cc:23:2b:ba:83:98:7c:4a:64:78:22:
                    8f:48:ed:ff:ae:7c:4a:cf:1d:da:ef:99:bf:68:13:
                    24:f9:55:d9:ac:45:bb:4d:97:eb:76:fc:c6:9c:26:
                    e7:d9:7c:7c:ef:32:5a:15:e7:16:af:84:a4:d4:12:
                    a1:53:f5:13:2a:c9:e8:a0:82:e8:c6:f6:03:40:bb:
                    9c:6c:2c:fe:d0:1c:f1:6b:5e:7a:59:01:fe:b5:18:
                    d4:49:76:f0:05:7b:95:e1:39:72:de:33:fb:69:ed:
                    df:bf:66:e9:22:0f:72:bf:d5:43:c4:c5:a0:e4:aa:
                    1f:1e:ce:80:a9:bc:a1:75:7a:3c:e7:37:b7:2d:33:
                    1a:eb:29:6d:8d:6e:2a:c6:71:65:4b:49:b2:4d:f0:
                    db:75:4a:e9:d1:8e:b8:06:8c:3b:3a:16:6b:f3:77:
                    4e:28:ba:ba:fa:b3:48:20:27:b2:14:4c:2c:f8:46:
                    f5:39:c1:99:0d:1a:02:68:10:1d:56:7e:0e:8d:6f:
                    22:a5:68:a8:7c:72:19:46:a9:50:73:27:fc:48:c6:
                    8b:b5:ff:9c:47:c6:ab:af:53:b5:13:81:22:2f:c3:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B6:9E:46:CB:11:6A:B3:BD:E5:E3:47:BA:59:F6:11:A1:1F:CB:E2
            X509v3 Authority Key Identifier:
                keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c5:c5:85:f6:f5:82:97:04:8a:3e:90:eb:46:1d:51:55:22:
         e7:e3:be:8f:77:81:b9:17:e9:b4:ef:4c:0a:a7:d7:f4:2b:18:
         bb:60:fe:85:f2:e3:00:a0:5b:14:38:c8:b1:fa:5c:6d:1f:b8:
         22:b8:1d:85:1b:6a:b1:d9:3d:ea:3a:54:2c:1f:28:61:d6:aa:
         17:10:70:2b:04:94:1f:fc:4f:82:44:10:fc:fb:d9:1d:0b:43:
         e1:51:93:66:33:8b:52:d6:ff:e0:51:1a:d7:7c:c3:91:e4:4a:
         68:70:f9:09:1d:99:09:23:41:75:bd:3b:92:97:a6:00:e0:d4:
         ef:40:9f:9e:32:94:ec:51:c2:58:af:1b:e7:85:e7:60:65:7a:
         32:48:65:2d:17:5a:0f:8d:20:e1:95:b1:fa:7a:9d:3e:8a:7e:
         dd:1c:47:ea:3f:a9:cf:ad:b0:d4:63:4e:05:0f:8d:e5:c1:18:
         39:fc:80:37:78:4a:76:8b:b8:64:f9:1f:d3:c3:d8:25:d1:26:
         ca:8f:c2:d2:af:ec:05:08:fb:b7:9b:57:79:1a:86:81:dd:1c:
         f2:53:94:42:43:e6:f3:52:ac:aa:5b:59:86:12:f3:87:a4:ff:
         c0:56:cb:e8:89:dd:0e:68:3d:4a:5d:76:9b:02:92:7b:ad:43:
         b0:19:ca:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:54 2026 by rpki-client