Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
File:                     e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json)
Hash identifier:          alA/tgszmv9OFAiTN7qHAO/30lOGZ1vwdncmwh5Syjw=
Subject key identifier:   84:17:A2:6A:69:22:2E:8A:CB:2D:F2:70:82:65:AF:E2:79:AB:1E:17
Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
Certificate issuer:       /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Certificate serial:       042E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
Manifest number:          0425
Signing time:             Thu 12 Mar 2026 23:55:47 +0000
Manifest this update:     Thu 12 Mar 2026 23:55:47 +0000
Manifest next update:     Thu 19 Mar 2026 23:55:47 +0000
Files and hashes:         1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: Gn1dzhzx443QmGjAOjw+XbSCgRM4vrBjBprix/wlvV4=)
                          2: F85D97D8278411F0B46E4A7FC4F9AE02.roa (hash: NDb1B6PZCJBf2fRK/qRZGkVfT4s79ZM1HP5X452K/f8=)
                          3: 6808AEBA278511F09AB25F80C4F9AE02.roa (hash: ewFG9f1A1EcDgaPSb2+JVSwRlChjjJB/i/qV3kUsLPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
        Validity
            Not Before: Mar 12 23:55:47 2026 GMT
            Not After : Mar 19 23:55:47 2026 GMT
        Subject: CN=69b35283-8b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:63:a5:21:9b:f4:d9:4a:5f:94:92:9c:7f:
                    80:2b:10:18:8f:20:bf:6c:8b:7a:5a:da:17:91:b1:
                    6c:57:bc:ad:6b:c4:8e:20:ec:95:29:7c:92:de:7b:
                    a9:83:85:01:c3:01:39:fd:58:3a:71:c7:99:39:f4:
                    c7:fa:66:41:f2:e9:ae:e1:52:d1:be:60:7d:fb:c0:
                    5d:65:de:7c:65:3c:71:4b:86:93:3d:b0:cc:84:8e:
                    6b:73:de:2c:b2:f7:32:ad:8f:cd:e0:18:73:3e:1e:
                    a9:ed:42:a4:3a:08:08:d4:21:3d:66:4b:0c:65:e2:
                    1c:67:b2:ee:93:99:58:da:66:f1:89:93:b5:2f:fa:
                    5c:6c:4d:24:36:f8:7d:8c:d1:32:4a:ca:cd:63:0c:
                    e1:fe:07:23:78:e0:f5:ed:82:8e:d9:5b:01:2e:fa:
                    44:eb:28:3b:86:93:f8:e0:7c:e9:4c:b1:71:1c:50:
                    a1:5e:ea:3c:bd:5e:b4:fc:4a:88:a2:09:b1:e8:43:
                    7f:79:6a:06:17:8e:78:c9:41:77:30:cc:3f:63:9e:
                    09:f5:c9:36:8b:f7:ec:eb:c1:f6:88:92:f4:bd:02:
                    2b:a5:22:e0:20:95:13:4f:4d:d7:87:96:f1:2e:f5:
                    8a:54:ea:38:ca:b1:15:8f:4f:f0:f4:03:48:81:97:
                    32:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:17:A2:6A:69:22:2E:8A:CB:2D:F2:70:82:65:AF:E2:79:AB:1E:17
            X509v3 Authority Key Identifier:
                keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:11:c0:e6:ce:3c:c9:d8:d4:fe:a9:ad:26:7b:61:23:8b:80:
         2d:bb:36:3f:75:cd:52:c0:e1:0a:f2:06:df:65:2e:ea:df:9a:
         79:3a:a1:80:70:2c:7a:d9:6b:d9:4c:7a:69:49:97:f8:05:d1:
         be:51:7b:ee:47:ea:f4:90:51:f4:25:fb:d2:e7:16:d5:28:d0:
         e0:36:cd:01:ae:88:82:2f:1c:cc:61:08:d7:10:6f:af:37:f6:
         4f:59:43:be:0b:47:8e:9b:ec:bc:58:6e:09:7e:20:c0:fd:52:
         c0:4b:48:fc:d1:82:9d:3e:40:3a:ba:b2:77:17:33:ac:13:80:
         bc:2f:03:34:e5:35:ae:d5:38:df:67:f5:07:6c:b4:5d:3c:f3:
         d6:13:40:38:8f:f6:bf:72:64:c5:f9:0f:d1:b7:03:6c:ea:39:
         52:dd:b9:1e:40:6c:2b:b2:4a:56:f1:29:92:84:21:1a:5e:c7:
         92:8a:a5:87:af:2a:37:4b:cf:26:e8:92:a5:cf:33:ea:49:f1:
         f5:6c:a3:10:e6:ab:3d:b4:2e:64:4b:aa:e4:d4:ac:75:01:cd:
         61:b9:15:b4:e2:51:d5:92:1b:ec:2e:9e:0e:ea:d6:f0:6d:69:
         8a:d6:ad:fd:7a:56:e2:68:b1:c0:88:9a:a1:8f:9e:b7:ea:93:
         df:cf:44:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:53:03 2026 by rpki-client