Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
File:                     e3T7MiZmknZU8foeyLcJwwU1UOM.mft (raw, json)
Hash identifier:          zI9u/+hoTpMpBI3fGz5ilTY9ERfjoaQxu0RTi5y33I8=
Subject key identifier:   6B:6A:9A:C7:5E:DC:CD:EF:3F:60:22:98:B0:5F:F4:0D:85:69:CB:61
Authority key identifier: 7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
Certificate issuer:       /CN=A91F1451/serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
Manifest number:          34
Signing time:             Sun 01 Mar 2026 10:06:32 +0000
Manifest this update:     Sun 01 Mar 2026 10:06:31 +0000
Manifest next update:     Sun 08 Mar 2026 10:06:31 +0000
Files and hashes:         1: e3T7MiZmknZU8foeyLcJwwU1UOM.crl (hash: 8B254Y53fdJFgjPluPSZ6sXGKnstsYVEWQ2UM+Jrbtg=)
                          2: AC465D48D02211F0A5535D5AC4F9AE02.roa (hash: CPLpp/+FM2b54xSn6vuECW27aWUXXJQyS5P46Daeh1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1451, serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
        Validity
            Not Before: Mar  1 10:06:31 2026 GMT
            Not After : Mar  8 10:06:31 2026 GMT
        Subject: CN=69a40fa8-c689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:4a:87:0a:e0:cb:e6:02:fc:1f:59:6d:d0:
                    c9:ed:02:7b:7d:a0:27:6f:c9:0d:0c:8a:ab:2c:3d:
                    95:ea:ba:65:ab:41:bd:66:c4:e6:3c:f0:f7:19:2f:
                    1c:c9:0d:34:3a:33:4c:bd:56:81:a4:6d:a6:dc:b5:
                    7b:d0:fc:99:ee:29:24:45:45:de:ae:6e:ff:81:ae:
                    7a:13:5a:e3:14:6a:05:48:5f:ff:d7:87:05:d7:68:
                    09:0d:f9:62:97:d6:df:69:0a:01:e3:63:27:cd:e4:
                    44:6d:f9:09:c9:8f:3f:62:36:5b:dc:96:17:d6:52:
                    d4:2a:80:37:ef:05:ae:f6:c7:f3:92:00:7c:47:f2:
                    72:50:5a:08:c3:bd:1c:2a:11:e4:68:2a:7c:22:33:
                    71:8c:a6:59:d1:9d:2f:a9:aa:d2:8c:c6:5b:5f:6e:
                    f3:4e:be:20:62:00:ad:bc:65:f3:23:e2:64:1b:75:
                    89:f1:64:a5:41:de:f3:89:3e:13:2b:9b:2a:b3:c9:
                    dc:2d:3b:06:36:de:cd:a1:de:9e:5c:dc:62:3d:c1:
                    6a:a8:a5:5a:87:35:3f:fb:4a:a3:ff:32:35:ce:8e:
                    81:49:cc:e5:08:44:20:46:86:7c:88:b2:9e:ba:25:
                    3d:fa:7e:30:b8:62:4c:af:d2:15:c6:bc:0e:91:7f:
                    5f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6A:9A:C7:5E:DC:CD:EF:3F:60:22:98:B0:5F:F4:0D:85:69:CB:61
            X509v3 Authority Key Identifier:
                keyid:7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:63:61:b5:b9:71:27:d6:97:70:80:d0:aa:67:4e:12:a0:0b:
         dc:dd:df:5b:2c:50:b7:43:8b:77:7b:7a:2e:11:8a:d3:e4:52:
         9d:06:c1:da:9e:74:17:ff:0d:98:b7:62:07:fd:6b:c7:c9:19:
         9f:c3:4f:6d:99:d6:ac:21:98:51:cb:ce:bc:b1:40:d1:27:08:
         0f:68:c2:20:3a:fc:bf:55:c8:6e:f4:ec:95:38:4b:08:99:3d:
         94:4f:6e:0d:4b:ad:4e:85:ea:bb:12:b7:96:e1:2b:c7:36:ed:
         68:99:68:6b:a5:28:30:9e:02:5b:f6:67:b0:1a:51:a6:50:0b:
         47:59:13:df:90:72:32:b0:e8:dc:c0:01:c1:f8:d4:6f:19:d3:
         d7:9b:02:ed:f5:1c:95:6e:8e:d5:4e:fe:3f:d1:d7:41:31:ed:
         17:1a:9b:f2:1f:d0:7e:88:28:46:20:38:b7:23:ad:69:62:c4:
         b8:16:fb:eb:eb:13:1b:e0:17:6e:c1:89:07:ad:d5:08:ec:df:
         73:23:30:f2:0c:bf:f7:d5:e9:fe:ba:ec:78:f0:cf:18:df:8c:
         27:29:13:3b:ee:9a:10:8a:28:60:2f:10:fb:41:c1:fb:5e:d3:
         98:c2:de:50:7e:84:17:04:06:ea:05:d2:a9:16:36:0a:bc:47:
         a5:4a:2c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:30:40 2026 by rpki-client