Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
File:                     etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json)
Hash identifier:          uWbR9rxhVT6iGtEAduv4Gypqa83J+HsWdVyxFuIZUCc=
Subject key identifier:   A9:8C:A5:5A:37:9A:B8:62:AF:53:6B:64:53:2E:67:A1:B0:97:6E:CA
Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
Certificate issuer:       /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
Manifest number:          C4
Signing time:             Wed 25 Mar 2026 06:18:18 +0000
Manifest this update:     Wed 25 Mar 2026 06:18:17 +0000
Manifest next update:     Wed 01 Apr 2026 06:18:17 +0000
Files and hashes:         1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: TSMsMTKzgLJ7GWHdYADsKecvgluSRnDXmdP5IGc/BQk=)
                          2: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: Y942Edc3zkEm9fZtolJhfuXkLoHHfiwv6fjHDuYaXR0=)
                          3: 395D655C7E7D11F09D59515FC4F9AE02.roa (hash: g/g7DXG6Ubt8dKOM6X6VWHF4PzVg9zAkTugtS1fW6FU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
                          rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
        Validity
            Not Before: Mar 25 06:18:17 2026 GMT
            Not After : Apr  1 06:18:17 2026 GMT
        Subject: CN=69c37e29-2d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:cd:ff:34:ee:75:3c:12:c4:d7:18:13:da:
                    8f:e8:47:7c:2f:22:b8:9f:d1:ab:e3:0d:7d:fc:d8:
                    11:90:9d:ae:96:44:e6:4e:2e:dd:82:45:d3:7e:40:
                    cf:11:36:35:43:2f:02:d5:f3:56:33:9a:3a:b5:81:
                    81:39:36:68:a0:31:8e:50:18:7c:62:65:e4:78:9a:
                    86:b3:17:b6:0b:e0:6f:c3:6e:ec:ed:a8:f2:bd:7a:
                    25:46:93:99:8d:ca:24:b1:9b:33:1e:f6:87:70:1a:
                    3e:ac:3f:dc:b9:fd:53:01:ee:b5:76:ab:6f:a3:60:
                    fd:75:0b:47:52:f9:64:9e:56:fb:6e:2a:23:56:20:
                    0b:90:ee:ab:03:66:02:5a:56:6a:92:e9:e6:6b:53:
                    68:ac:85:71:f8:24:d1:c0:03:66:c3:58:d6:8f:b5:
                    bc:fd:07:ae:3e:8c:da:58:d0:56:16:62:9c:cd:ef:
                    eb:ba:6f:01:c1:32:03:cd:52:e8:4b:fb:d9:2f:c9:
                    ae:5f:ae:85:8d:82:ea:ae:eb:f4:22:50:f0:fc:96:
                    c9:4d:9e:09:2e:dc:be:d6:2a:9d:57:2a:ca:af:f2:
                    e3:6f:0f:fc:79:fe:76:16:ea:9f:ca:2b:47:ba:73:
                    5e:9f:1a:9b:90:65:bf:39:48:39:09:0c:a6:a8:9e:
                    45:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8C:A5:5A:37:9A:B8:62:AF:53:6B:64:53:2E:67:A1:B0:97:6E:CA
            X509v3 Authority Key Identifier:
                keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:3f:f2:18:ee:f4:48:13:30:38:eb:90:99:b2:01:99:81:dd:
         26:f5:92:38:25:76:40:41:9f:af:74:fd:14:34:08:86:a9:7a:
         b6:40:47:b5:f4:9a:dc:55:ac:4a:a9:c6:08:05:8d:f5:e9:a9:
         43:c7:fd:49:d0:f0:27:08:ae:79:5b:12:21:a5:78:8b:a1:b4:
         3e:36:46:08:05:7f:a7:4b:ba:0c:11:42:ba:9d:71:d6:61:06:
         85:57:6b:27:50:60:ae:02:f9:ac:f3:d9:b1:3f:3b:b5:a2:de:
         84:27:1b:cb:a0:e4:84:93:f9:9e:4a:3f:1a:79:b3:02:7c:06:
         b5:6f:b0:93:26:4a:ae:c6:22:3c:64:81:40:9b:b0:cc:a0:32:
         d5:2a:76:d0:75:16:51:45:87:40:83:bb:23:4b:9b:98:8e:12:
         04:8c:7a:8d:f1:c6:39:bf:b5:e1:cc:bf:c4:ae:0c:21:ff:f5:
         c5:20:bf:5a:44:50:18:cb:bc:6b:fd:ba:7f:81:c6:1c:58:aa:
         c7:42:96:7d:6f:a8:b6:27:f5:c7:32:11:63:49:b6:8a:10:d6:
         48:7c:cf:00:24:60:50:03:19:48:a5:30:1b:cc:3d:a6:89:8a:
         46:48:fe:bd:e6:d7:3c:21:3f:27:60:86:9c:29:1d:84:96:da:
         14:5d:0a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:24 2026 by rpki-client