Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
File:                     EE3r2037i5__46TvfbFlevst9-I.mft (raw, json)
Hash identifier:          AL2MbhqkuescbS2Lo7wxqp4lMaaLstbX7Qc9h7xGgTc=
Subject key identifier:   98:52:95:E7:72:0E:49:8A:31:04:7D:CF:75:BB:36:43:87:8E:FC:96
Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2
Certificate issuer:       /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
Manifest number:          0237
Signing time:             Wed 25 Mar 2026 01:58:35 +0000
Manifest this update:     Wed 25 Mar 2026 01:58:34 +0000
Manifest next update:     Wed 01 Apr 2026 01:58:34 +0000
Files and hashes:         1: EE3r2037i5__46TvfbFlevst9-I.crl (hash: wLMhsSurNFqQ1jYwpuOTukoXkUnABTs0YSb80dxD5Q0=)
                          2: 01003962C9DC11ED8D68375EC4F9AE02.roa (hash: YpkLELI+RfMgGSNxlJJxGUE0f/y0YL4bJPjpf69tlbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F10DC, serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
        Validity
            Not Before: Mar 25 01:58:34 2026 GMT
            Not After : Apr  1 01:58:34 2026 GMT
        Subject: CN=69c3414b-c475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:36:81:ff:8e:51:dc:42:4b:ce:0a:f9:2b:d6:
                    82:b2:81:64:39:c6:92:b6:3d:87:5a:5e:80:7b:a8:
                    eb:fc:9b:ae:48:ea:fd:dd:48:e4:52:82:5d:c1:67:
                    d4:b1:c6:f4:06:20:45:f3:be:55:a5:3f:46:17:cd:
                    86:0d:f0:7b:bd:cd:64:19:f1:91:6e:1a:31:6b:58:
                    9f:48:77:68:6a:25:7d:12:2d:88:2a:e4:87:5e:6d:
                    6b:ca:31:d4:9a:96:90:8a:da:84:a5:ad:dc:06:1c:
                    92:3f:31:92:65:b7:d7:f6:85:e4:66:c0:8e:31:27:
                    0a:cf:e9:f8:b6:ae:31:0e:39:3d:ef:5a:a9:9c:29:
                    2e:9e:d2:ba:2f:94:30:9f:86:9c:11:d4:38:18:7a:
                    7b:e1:f4:7e:45:f8:77:3a:d9:65:aa:67:75:37:2c:
                    9b:c8:c6:35:a8:43:0c:da:42:c9:fc:bf:38:6e:c0:
                    ea:b7:41:94:03:3b:5c:47:c8:80:5f:0b:c0:af:e3:
                    c1:3e:9d:b5:87:de:34:90:ec:c9:32:dc:e2:88:d8:
                    78:db:bc:c5:dd:0c:46:2e:02:26:6e:ab:c2:3a:70:
                    9b:0b:aa:9e:ae:1b:c6:18:96:e9:69:bf:5a:7d:9a:
                    04:fc:e1:9c:43:f1:bc:82:7a:82:ae:d9:3a:a2:af:
                    42:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:52:95:E7:72:0E:49:8A:31:04:7D:CF:75:BB:36:43:87:8E:FC:96
            X509v3 Authority Key Identifier:
                keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:33:a8:23:1e:eb:1c:f1:f8:12:83:1b:c1:c9:95:4d:f5:48:
         37:d7:5f:45:2e:c8:35:46:8c:a1:b0:86:48:1d:82:14:61:b9:
         4a:49:59:e8:4a:80:33:99:03:cb:82:d0:db:8b:c0:6d:74:ca:
         19:fa:7a:43:a7:b5:27:bb:d8:9e:c8:69:5e:65:d1:96:11:8e:
         20:e9:3a:7b:de:c0:27:7a:a1:9e:d6:ff:fe:10:fa:4c:2f:c9:
         d1:39:b9:dc:11:55:1a:9f:a4:30:5c:c6:a8:16:c0:50:26:93:
         d5:1a:31:a9:b6:77:70:43:ff:d6:bc:e5:08:c8:d3:5d:f7:a3:
         21:9f:06:b9:82:e2:af:0d:cb:d3:d5:b7:b5:74:70:42:86:8b:
         49:72:25:9e:a0:95:6e:9d:5d:68:db:de:dc:9a:22:2f:42:1e:
         19:eb:50:c9:72:0b:4a:46:bf:5b:5c:2b:79:df:7e:2a:09:41:
         9f:cd:e6:90:c6:a9:28:94:ea:24:ba:d2:c9:1c:e9:3f:65:07:
         13:12:9d:f1:08:52:fe:1d:f2:ca:af:00:dc:e4:33:c3:d1:8b:
         6d:f2:3b:6b:da:44:74:e8:97:50:8b:ba:f9:0a:ec:f3:fd:3b:
         80:9f:0e:cb:44:99:3a:e6:b5:42:68:da:1b:28:c6:b8:cd:11:
         24:3b:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:44 2026 by rpki-client