Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
File:                     e3T7MiZmknZU8foeyLcJwwU1UOM.mft (raw, json)
Hash identifier:          o29GNDPsgoXEIYkpFdTMGmJEaqVrEoel349vN0487f8=
Subject key identifier:   5F:B6:97:29:28:E6:DB:F3:15:9A:F1:D7:6F:36:27:02:CD:1D:1F:F1
Authority key identifier: 7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
Certificate issuer:       /CN=A91F1451/serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
Manifest number:          35
Signing time:             Tue 03 Mar 2026 08:18:40 +0000
Manifest this update:     Tue 03 Mar 2026 08:18:39 +0000
Manifest next update:     Tue 10 Mar 2026 08:18:39 +0000
Files and hashes:         1: e3T7MiZmknZU8foeyLcJwwU1UOM.crl (hash: ypHbedOqZw3X0kxPVulQRjDKA6j84i0ByjiUwbpubeY=)
                          2: AC465D48D02211F0A5535D5AC4F9AE02.roa (hash: CPLpp/+FM2b54xSn6vuECW27aWUXXJQyS5P46Daeh1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1451, serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
        Validity
            Not Before: Mar  3 08:18:39 2026 GMT
            Not After : Mar 10 08:18:39 2026 GMT
        Subject: CN=69a69960-f8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2b:e9:8d:66:a8:fd:87:ff:c5:1c:a4:78:4e:
                    17:5c:68:73:de:a4:38:27:ed:00:a9:5f:d6:87:0c:
                    00:ee:96:97:11:1f:84:06:54:8f:12:29:c7:d9:a4:
                    a8:9c:52:8d:2a:fb:7c:43:a5:f1:d7:1a:37:18:75:
                    36:9e:c5:c9:fd:0c:d9:96:98:8c:3b:75:80:1d:b2:
                    13:a9:83:dc:24:a2:7f:93:f1:d9:ce:ad:a0:95:fe:
                    cd:ba:8d:78:4f:f0:c7:e8:49:81:6e:7d:a7:28:3f:
                    9a:27:67:d3:53:1e:81:98:ce:48:6c:e2:17:99:c6:
                    e5:1f:8b:b2:8c:c9:76:bf:c7:69:c5:c1:56:97:9c:
                    44:33:ca:01:27:22:e3:e8:10:b4:c1:df:b9:34:91:
                    b2:75:c6:62:fb:87:70:c7:9e:33:1e:cc:42:b5:48:
                    e7:8d:e8:b9:96:97:5d:37:3d:fb:9e:cb:ae:29:b9:
                    2e:26:2f:e9:f5:c4:29:0c:cd:12:3e:10:31:78:29:
                    e4:0e:35:8d:8e:40:74:7d:eb:f3:f4:e0:c2:da:5b:
                    c9:4e:f5:9f:16:c2:14:b1:0e:1f:04:86:34:1b:fa:
                    38:22:f2:c3:3b:48:be:ed:3b:d4:47:28:66:cb:2e:
                    30:0f:d7:f8:7f:8b:a2:9e:ba:3c:2b:3f:77:6d:3d:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B6:97:29:28:E6:DB:F3:15:9A:F1:D7:6F:36:27:02:CD:1D:1F:F1
            X509v3 Authority Key Identifier:
                keyid:7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:a0:62:18:91:7d:ca:3d:d1:aa:d0:cf:74:69:c1:b7:e0:02:
         6e:d5:5b:8e:9d:bb:f2:a5:a4:0f:ca:d3:ef:03:4f:26:be:90:
         90:40:79:44:c8:dd:0f:f3:07:8d:d3:85:93:c7:24:cc:b2:82:
         bb:95:1c:20:d1:93:cd:be:66:e7:36:86:9a:51:fb:da:73:b5:
         72:dd:a1:a3:c6:d2:10:62:38:64:f7:d8:4b:10:11:54:32:f7:
         a3:f5:ba:fe:7e:75:df:1a:72:e4:84:79:92:41:33:d6:ec:fc:
         93:6e:2b:bf:44:2b:15:6e:31:5e:09:df:94:ce:35:4a:98:ad:
         ed:62:80:89:7e:a5:df:ac:6c:ba:e3:19:3d:a2:52:a9:df:db:
         41:fc:f6:a7:3d:8b:de:a1:6d:95:c8:6c:fe:3a:a3:f7:bc:28:
         09:ab:de:02:c6:8b:7f:d3:db:00:4d:91:60:37:d4:d6:4f:4e:
         ef:f6:81:8a:93:b4:16:0f:7d:cc:33:80:77:de:43:e5:3f:08:
         96:99:42:35:68:a3:b8:ef:0b:16:f7:0a:a4:96:1e:81:ed:67:
         17:38:1a:a7:c9:0c:47:25:79:55:dd:e2:b6:3f:33:8a:59:d7:
         6b:5c:d5:5f:8e:09:54:7b:99:bb:be:42:95:bd:ee:e8:4c:f5:
         aa:b2:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:26:05 2026 by rpki-client