Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft
File:                     t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json)
Hash identifier:          odtScLb7bij0mHIvCGJshwig1wbSGrnsPzYamLZnVsI=
Subject key identifier:   BE:07:1B:EE:1E:09:50:0F:A8:0D:AA:92:4D:06:C7:0B:2D:62:FF:FE
Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A
Certificate issuer:       /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A
Certificate serial:       0493
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft
Manifest number:          048D
Signing time:             Mon 02 Mar 2026 01:56:35 +0000
Manifest this update:     Mon 02 Mar 2026 01:56:34 +0000
Manifest next update:     Mon 09 Mar 2026 01:56:34 +0000
Files and hashes:         1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: EnkPdqc8E7Kxu4B3bVRnAhlI8J40T/tDAbRobefKP58=)
                          2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: 2RXStLDjyOeuSTsmkifmHRekLcbCRcqX4watjvDv81g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl
                          rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171 (0x493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A
        Validity
            Not Before: Mar  2 01:56:34 2026 GMT
            Not After : Mar  9 01:56:34 2026 GMT
        Subject: CN=69a4ee53-4496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3b:6d:f3:24:bb:7d:ea:99:b7:13:09:30:ff:
                    7e:30:df:3b:fc:d0:ba:b6:21:3b:21:22:6d:af:a3:
                    29:51:de:a0:be:69:9e:5d:5c:9b:01:cc:83:2d:bc:
                    a9:a1:79:0c:a7:08:4e:9a:9a:81:e0:fb:27:e4:12:
                    59:59:f1:fa:06:2a:67:f1:5e:4c:7f:2b:d8:e7:56:
                    85:10:61:09:12:7b:00:a9:66:8a:17:08:ca:f8:af:
                    62:bc:d8:64:0c:bb:2b:6a:4b:61:14:75:c1:1f:5d:
                    22:d9:ad:e8:fa:75:b8:6f:0a:55:76:70:4c:f2:68:
                    37:62:04:87:07:06:8e:35:b5:e2:3f:99:4c:45:36:
                    13:f3:3d:80:e6:bf:e7:e4:42:74:67:eb:e0:a7:45:
                    dc:2e:1a:46:6c:42:b8:20:77:29:c0:92:6a:7e:2d:
                    42:28:14:80:96:42:78:82:63:da:b6:62:91:4b:79:
                    b3:66:e4:c2:17:69:fa:a0:ae:63:02:de:22:cc:78:
                    29:79:89:3a:2c:56:2c:fc:ae:b6:ce:70:34:93:67:
                    0f:b0:28:7d:dc:f8:68:f0:d2:97:6f:7d:f0:3d:34:
                    dd:be:46:ce:f3:a7:28:ca:30:3b:d0:69:b5:97:c0:
                    90:8d:02:6f:b3:3b:e5:b2:1d:80:84:e1:6d:0c:7f:
                    56:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:07:1B:EE:1E:09:50:0F:A8:0D:AA:92:4D:06:C7:0B:2D:62:FF:FE
            X509v3 Authority Key Identifier:
                keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:6f:3d:e7:3e:53:94:86:7e:48:f5:e5:0d:0a:09:e4:c9:75:
         71:9b:1b:b1:ef:7f:2f:d4:9f:5e:c5:f0:23:ce:e3:a9:ed:ee:
         6e:b7:37:2d:af:29:2e:ae:81:c6:86:39:6c:9b:3f:59:93:f5:
         1e:1e:bc:e2:19:e2:50:8a:6d:4c:ab:4e:a7:d6:5a:e9:13:e0:
         50:f3:2f:b8:95:fb:f5:45:03:c8:52:70:5f:32:4b:48:19:1c:
         2b:79:f5:dd:d6:80:8f:90:04:4e:76:5c:d3:99:2c:a5:fd:a5:
         2d:c2:80:e9:37:77:4e:8a:ea:aa:d6:a4:32:67:0e:58:6a:54:
         90:e7:34:2e:ae:5d:aa:a2:05:ae:d7:ae:c4:8f:bf:f2:47:0c:
         dc:f7:97:cf:63:a8:94:76:c2:6e:c6:16:b2:66:f4:5d:79:5d:
         31:b5:7e:95:cf:df:d1:f7:59:3c:49:2f:e1:08:3d:3c:b7:35:
         0e:44:3f:9c:09:dd:39:21:b7:a6:12:98:0e:86:bb:2a:b8:9c:
         d9:9b:f5:47:7a:71:b0:61:10:3e:2d:31:cb:01:e1:39:25:75:
         0a:e8:25:33:03:4c:9f:df:1f:27:60:2d:06:c8:af:3c:c9:5b:
         7c:36:c9:0a:54:9b:94:b4:5b:5f:ce:65:e4:3f:91:82:0d:83:
         6d:b9:d9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:02 2026 by rpki-client