Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
File:                     3TbkXHHT2Ss80actX1qzJbNGrco.mft (raw, json)
Hash identifier:          sMBXdowYiHIDnEKRogfFpWN+g2wHyxTdp13byAw5x8w=
Subject key identifier:   3A:C9:FD:23:08:F9:C2:58:30:47:5A:CF:F2:95:E7:00:3A:09:B9:F2
Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA
Certificate issuer:       /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
Manifest number:          018C
Signing time:             Fri 27 Mar 2026 03:55:05 +0000
Manifest this update:     Fri 27 Mar 2026 03:55:05 +0000
Manifest next update:     Fri 03 Apr 2026 03:55:05 +0000
Files and hashes:         1: 3TbkXHHT2Ss80actX1qzJbNGrco.crl (hash: mxFlCyzbrYuTSvfgHc3UkGVljt85SzTfl0CvDsTsnPM=)
                          2: 89D7E6869E9211EF8726F76AC4F9AE02.roa (hash: VyYP9wSjKOiDhQAeFQwUCWE8o44zFR3WDi4mofWlQgc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl
                          rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA
        Validity
            Not Before: Mar 27 03:55:05 2026 GMT
            Not After : Apr  3 03:55:05 2026 GMT
        Subject: CN=69c5ff99-cfde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:3a:28:8d:94:01:06:a7:c6:a6:c1:64:35:
                    10:b4:be:cf:b4:0a:03:95:93:02:04:36:80:c4:fc:
                    c3:48:b6:44:89:5c:4a:34:68:e5:e3:aa:b8:31:d4:
                    52:37:f7:0b:13:c8:55:73:43:33:9f:f8:67:2e:ed:
                    72:c5:88:61:f0:fe:f2:3c:85:ac:fb:4a:97:e2:48:
                    77:e3:f2:d4:1b:c5:0d:1a:9a:53:a0:fc:11:40:04:
                    23:2d:8d:1b:5b:85:28:b0:00:04:69:1a:2e:8c:9e:
                    a2:ad:de:0e:de:27:c9:0f:92:9b:b3:87:1c:f8:6b:
                    a7:a5:69:e7:cb:ce:aa:a9:c7:f6:3f:40:b8:c0:ed:
                    b1:d4:44:ea:d9:90:74:5a:ff:01:29:63:d1:fe:d7:
                    ca:56:b6:39:05:06:32:80:83:91:24:df:dc:cf:8c:
                    bd:b3:06:64:1b:e1:a3:3b:4f:9d:ed:81:90:16:3c:
                    26:dd:e3:21:07:2c:b1:ab:55:6f:48:8e:51:fb:09:
                    3a:28:72:d7:1d:0e:2b:46:18:0f:8f:29:58:74:4b:
                    9a:f2:ab:df:05:a6:0c:19:4e:b3:b6:52:f1:6b:f6:
                    7f:1f:86:c4:9e:15:d3:a1:12:9a:2e:6e:a6:7a:73:
                    e7:45:4a:b7:dd:f7:5c:33:94:8b:b9:1b:bd:36:03:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C9:FD:23:08:F9:C2:58:30:47:5A:CF:F2:95:E7:00:3A:09:B9:F2
            X509v3 Authority Key Identifier:
                keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ea:2e:fa:f1:c4:58:93:17:42:c0:47:84:72:4b:fc:da:50:
         e9:f7:4d:42:a8:c3:2d:05:6e:39:72:4e:27:6f:d5:2f:62:f9:
         cc:ff:26:78:2f:63:1d:08:7f:9b:e9:f8:33:06:ed:95:a7:09:
         9a:99:89:c3:8c:45:92:13:de:f8:92:48:3d:04:36:28:25:cf:
         c9:df:0b:d7:47:80:8a:90:92:43:aa:53:02:b0:59:1e:bb:59:
         bf:43:51:41:5d:08:d1:c4:66:7a:20:6e:48:d4:0c:ea:9b:fb:
         72:dc:c3:84:3b:0d:fa:bd:54:08:88:52:fe:20:e5:95:e0:0a:
         58:88:fc:e2:dd:a4:21:62:3c:b7:05:cb:91:58:d2:43:ab:bb:
         6c:d5:61:b2:86:89:4d:a4:fd:9c:f6:e4:5c:a4:42:2f:82:69:
         8d:7c:af:00:c1:9d:9a:47:27:41:28:6c:2c:cf:b8:d1:41:ac:
         c7:0e:c1:71:b8:c5:70:a9:9b:f4:63:a9:fa:32:59:65:e1:ad:
         94:e3:24:65:39:e8:b3:77:08:b7:47:5e:3b:43:28:4e:d7:31:
         f8:38:80:1f:00:43:5b:5a:03:d1:c1:c8:55:37:55:ca:f0:6e:
         95:a6:6c:e6:c7:4d:b9:4a:98:76:22:1e:9f:16:74:71:7c:ff:
         42:d0:3a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:58 2026 by rpki-client