Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
File:                     _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json)
Hash identifier:          z/W4NFZ+pGwfI99eueV+QVq0xxAAk17lieZEn+oF8K4=
Subject key identifier:   A4:2D:92:A9:B1:65:12:EF:41:83:72:27:2B:21:4E:3A:C2:CC:E5:D3
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Certificate issuer:       /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial:       01E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
Manifest number:          01E3
Signing time:             Sun 01 Mar 2026 04:09:54 +0000
Manifest this update:     Sun 01 Mar 2026 04:09:53 +0000
Manifest next update:     Sun 08 Mar 2026 04:09:53 +0000
Files and hashes:         1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: JW/a7n5V7j7XZkelrdf30iiwumKgUa2QIMS8ovFE8V4=)
                          2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: m1n+fMnb/ADNpdU1kcDXhgieJ7VTBfqDuhZU4DVN5dI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
                          rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
        Validity
            Not Before: Mar  1 04:09:53 2026 GMT
            Not After : Mar  8 04:09:53 2026 GMT
        Subject: CN=69a3bc12-6615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:58:db:22:dd:70:40:f1:80:f9:93:02:93:
                    24:30:d5:93:3e:c9:8c:43:06:3a:2f:a3:56:b0:90:
                    81:7f:3e:d1:20:a0:42:42:e0:55:98:a2:74:27:f4:
                    0d:cd:cc:8f:bd:02:e3:98:33:a5:92:ed:8f:38:5c:
                    53:54:4e:a0:dd:a9:1c:6d:93:e6:cc:27:18:09:0e:
                    2f:82:6e:2e:66:2c:c9:cd:c3:db:59:96:4d:cc:7c:
                    e9:f3:79:62:69:a4:ea:b0:0b:cd:c7:90:9f:07:33:
                    16:a2:17:35:cd:e8:63:0f:62:74:47:79:04:b2:e9:
                    e1:7c:5b:b4:99:b3:28:b3:f3:5f:5c:09:6c:ba:1c:
                    81:d5:10:26:b8:35:e9:5b:62:df:a5:f3:9d:ba:29:
                    86:24:e9:ad:50:7f:e7:01:0e:42:7f:95:4a:72:51:
                    b2:8f:d8:02:0d:33:d7:cf:dc:70:b3:78:81:cd:4e:
                    15:f3:89:e9:4d:c1:9f:d3:61:a3:26:6f:45:4c:62:
                    79:3f:ae:c6:61:37:e9:8c:4a:01:c5:bb:bd:09:a7:
                    5c:d1:f9:1e:cb:01:88:4d:b0:36:b4:c0:a3:2e:8a:
                    48:bf:03:aa:78:b4:e8:a9:77:fb:1f:41:dd:7b:5b:
                    de:82:4d:aa:8c:01:cd:a3:ab:cc:aa:28:67:b5:ee:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2D:92:A9:B1:65:12:EF:41:83:72:27:2B:21:4E:3A:C2:CC:E5:D3
            X509v3 Authority Key Identifier:
                keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:71:65:30:b4:42:33:95:9b:bd:a1:fd:3c:13:8a:de:bd:fe:
         68:ce:a2:46:9c:7f:2f:bf:4d:7c:fc:61:6b:ce:9b:ab:38:e2:
         62:a1:9c:e2:d3:55:1d:2d:52:c6:ad:36:45:77:b7:0c:cf:9f:
         df:80:eb:79:b2:47:60:7e:af:d0:53:29:fd:2d:0a:22:cf:5f:
         1b:09:db:99:6d:13:47:1b:ce:aa:ba:63:ec:ac:61:fe:29:29:
         3f:f2:a5:0b:8c:55:36:d3:c5:4c:16:8d:eb:f0:f6:61:cb:f1:
         19:c2:ae:b8:0a:24:60:a5:d6:11:ab:e5:d8:7b:7e:ca:a7:45:
         4b:24:e2:c6:91:b0:bc:53:f2:94:bf:68:ec:a1:92:18:74:83:
         5a:4b:c9:ae:86:44:32:10:06:17:ce:4d:ba:6c:8a:1a:d9:68:
         e8:33:0f:a9:af:b5:14:8f:31:d0:f3:bb:8f:6b:a8:91:a0:90:
         84:8c:08:f8:f9:79:5f:34:a1:ea:43:fc:04:85:84:e8:d2:26:
         2e:06:dc:86:50:7e:a5:d9:e6:b9:62:e0:ab:47:e0:5d:11:65:
         64:83:e4:35:c4:21:46:25:cf:95:59:88:06:8c:6a:a0:7a:e2:
         a7:26:d8:08:73:8f:a3:71:6b:d2:50:9b:21:56:71:44:be:3a:
         78:01:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:49 2026 by rpki-client