Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
File:                     7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json)
Hash identifier:          2lMWXB2ZWRL/nYB9Nycqs60j/i4Kgj2yqn5KS0gGyMs=
Subject key identifier:   39:CB:CA:BA:3E:A2:F9:0C:31:03:04:03:17:CE:BE:58:C3:AC:54:1B
Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75
Certificate issuer:       /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75
Certificate serial:       3554
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
Manifest number:          3533
Signing time:             Sat 28 Feb 2026 15:15:56 +0000
Manifest this update:     Sat 28 Feb 2026 15:15:55 +0000
Manifest next update:     Sat 07 Mar 2026 15:15:55 +0000
Files and hashes:         1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: rJMPgi9mtkKvgxUED23cD/XVYPI8Q5C3VVN7Q6Z8T3s=)
                          2: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: LlAjrsD9ycrpFNBYdBCY0r9fbGY7oXTXFKR7+XLlDrc=)
                          3: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: COh4JhkMC+3XkvGRBIDud8yE0YD4qDE6A/jEDVUuxUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl
                          rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13652 (0x3554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75
        Validity
            Not Before: Feb 28 15:15:55 2026 GMT
            Not After : Mar  7 15:15:55 2026 GMT
        Subject: CN=69a306ac-e727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:98:91:65:2a:14:f2:41:5b:ab:3e:96:07:dc:
                    64:18:f9:17:fb:10:6e:a7:ea:3b:63:6c:b0:21:41:
                    5c:f1:4a:0d:79:7b:f9:80:66:c8:e9:fe:e5:78:0c:
                    19:65:f0:21:3e:40:64:d2:17:c1:4a:8e:e4:cc:68:
                    a0:27:24:22:64:0c:f4:c6:af:62:9c:4f:6f:8b:64:
                    92:d9:82:a2:b3:c5:93:fa:7e:35:13:1b:a7:d3:4a:
                    08:a5:6a:9a:73:92:9f:ab:ef:74:f4:54:5d:f7:2a:
                    01:d7:93:0b:6c:b2:0b:f0:dd:97:55:67:57:34:19:
                    3b:8b:14:3b:16:5c:ec:1b:2f:5b:cb:c2:cd:5d:27:
                    30:fa:39:53:2b:93:02:82:02:27:02:e3:3c:43:46:
                    b0:30:f8:11:d6:93:4b:e0:32:18:86:3f:ab:23:ec:
                    73:b0:1a:4e:78:4a:c8:c2:79:52:24:ea:93:ca:34:
                    9c:f7:5f:10:5c:55:e9:b1:bc:29:ad:c7:e1:c1:fb:
                    3e:a8:cb:67:1c:f0:05:f0:70:d1:02:a5:82:bf:47:
                    e4:0c:ce:9f:15:71:54:05:87:8c:93:c4:32:6d:ec:
                    5b:49:58:ff:c2:91:a5:b2:3e:42:63:a0:45:f7:ba:
                    ba:c2:da:6b:28:84:22:ab:d7:77:da:c9:a2:25:20:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CB:CA:BA:3E:A2:F9:0C:31:03:04:03:17:CE:BE:58:C3:AC:54:1B
            X509v3 Authority Key Identifier:
                keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:84:59:ee:25:50:82:83:90:5d:a2:87:37:aa:16:c7:8e:46:
         1d:20:8a:38:24:94:72:46:73:10:d1:c0:6f:14:67:ad:bc:67:
         07:1f:08:e3:75:86:86:a7:27:2e:69:88:0f:d2:ea:8a:fa:27:
         03:90:51:66:e3:d5:c2:4c:81:8f:5e:a8:02:f6:8d:c4:5a:34:
         94:6b:57:53:00:66:b9:60:de:67:dd:3a:54:37:ba:25:72:fe:
         c1:f5:e6:06:a5:05:ab:83:81:7f:99:30:77:0c:e8:a8:bf:80:
         5e:bb:15:c0:3b:c2:8d:68:0e:1a:89:87:fb:12:3b:9c:31:5f:
         06:f2:40:a6:88:1f:6d:ff:61:3f:12:bb:d8:7a:0f:de:41:f4:
         7b:0e:86:43:8d:13:17:12:df:db:82:14:c8:7b:c7:52:dc:70:
         02:60:f5:6c:e6:e4:b1:06:0d:fa:66:ec:8b:c9:2b:95:c9:ad:
         15:1b:b1:c7:53:73:69:b4:14:20:cb:a5:38:89:a7:ef:bb:13:
         52:32:4d:25:02:a2:bb:38:b2:eb:a5:09:91:14:2b:ba:a4:ab:
         ca:a9:f1:aa:90:3b:c5:c9:40:d2:48:45:e5:e0:aa:86:a4:fe:
         77:81:5d:88:07:e6:d0:b5:4b:f1:41:92:a2:03:b4:1b:91:2f:
         45:36:c4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:35 2026 by rpki-client