Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
File:                     E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json)
Hash identifier:          uzhLXdkYAfBcnJW0YjTdYXFRd4PWR5e2RahRMRnZKVI=
Subject key identifier:   03:3E:81:1E:A3:7E:39:13:18:EB:32:2A:C9:C0:81:2F:E5:83:F4:01
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Certificate issuer:       /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
Manifest number:          018B
Signing time:             Wed 25 Mar 2026 03:45:48 +0000
Manifest this update:     Wed 25 Mar 2026 03:45:47 +0000
Manifest next update:     Wed 01 Apr 2026 03:45:47 +0000
Files and hashes:         1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: K0UjAVc5Dz3Mh7gxpvawQE3XsKahN9oqI+Pm9uwL9sM=)
                          2: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: TmPmnCGLgyK9Ap1rfmXl6pOPPj4J1wY9n/QSsrwz+OQ=)
                          3: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: YDCHKzV19Ubj3YzIiUsWRoQfZaKPPY3EdfIFom647Eg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
                          rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
        Validity
            Not Before: Mar 25 03:45:47 2026 GMT
            Not After : Apr  1 03:45:47 2026 GMT
        Subject: CN=69c35a6b-e9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:17:85:e1:b3:d6:f6:d3:15:8d:18:14:52:
                    c6:f9:a4:9b:55:da:0b:1f:fd:88:9e:8a:45:e1:ae:
                    cd:ee:76:3f:7d:da:8f:5f:6a:0f:1c:de:b7:b9:14:
                    a0:f2:e0:59:a4:c6:6f:56:e6:a0:3d:f4:44:76:ad:
                    f6:50:95:90:54:ac:fd:bd:4b:0d:c3:22:de:94:9b:
                    3d:f8:e8:b7:7c:70:91:6a:83:5c:ef:d5:54:91:aa:
                    06:a9:c0:92:82:79:b6:45:2f:8a:d9:1f:48:3f:c8:
                    f6:d0:46:15:49:25:18:9f:68:d7:0d:e8:e9:25:d9:
                    5d:bb:33:1b:98:e1:88:42:a8:16:ab:28:f7:7f:dc:
                    86:78:8a:70:fe:16:ee:92:89:76:e0:16:bd:b8:44:
                    0a:ba:12:9e:eb:1b:a0:d8:1a:a9:3c:ec:76:96:37:
                    81:7c:c4:d1:a7:21:48:1c:13:fd:ec:e6:10:f2:68:
                    b6:d3:c0:ba:fe:ee:77:22:3e:a0:0b:54:42:d6:d2:
                    44:8b:1d:c0:83:ac:a5:d2:be:54:68:af:e5:7f:8c:
                    89:0b:37:74:97:8c:da:30:0c:48:26:b4:1d:d9:56:
                    77:79:e3:c6:c7:89:53:58:47:96:67:a4:5c:66:d6:
                    e8:92:6e:53:46:b8:59:25:df:fd:87:65:b9:7a:86:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3E:81:1E:A3:7E:39:13:18:EB:32:2A:C9:C0:81:2F:E5:83:F4:01
            X509v3 Authority Key Identifier:
                keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:33:f2:36:75:38:a6:d4:03:5e:29:e4:c4:09:0e:3f:50:9c:
         34:c8:1f:70:c9:99:f0:d1:ea:5a:64:07:28:69:76:df:9b:cd:
         27:a5:ec:5c:9e:6a:50:a6:24:2f:a3:48:3c:64:b5:ea:46:44:
         df:ff:7d:a9:a6:73:80:83:30:c0:8e:25:f1:4f:6a:9d:af:79:
         67:0d:20:bb:c9:a4:b2:bf:03:46:e2:77:f3:d1:d6:ed:2b:57:
         42:5b:69:35:f0:87:cb:06:fe:d2:a0:c7:c8:ad:d9:60:10:19:
         3d:f9:5c:5d:c8:ab:d2:45:cb:df:40:8a:ba:5c:49:77:8f:74:
         f3:48:6e:8f:74:8f:b8:96:cb:b4:96:a2:43:c4:e8:b9:f4:a8:
         cb:fe:c8:df:bb:6b:b6:cc:d3:5f:c5:c9:d5:50:be:07:a4:87:
         9a:31:4f:3e:ee:b2:71:a7:4f:d1:bb:9b:e2:5c:28:3d:6f:cd:
         85:6f:48:14:66:54:98:65:85:a3:2f:0f:bc:af:77:d8:04:5c:
         73:b1:4b:f7:88:b0:db:fd:e1:af:e6:8d:f6:1d:d7:24:93:5b:
         c7:57:66:17:9e:47:e5:76:0b:f3:9e:18:23:99:87:25:f1:bf:
         81:81:f0:95:4f:a3:e0:62:f9:71:a3:3b:3a:19:2e:a3:24:6e:
         3e:10:7a:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM0OTAxMTAvBgNVBAUTKDEzNzM1M0QwRThDMTQ1QTU4MENCMDBCQzMyMjIwODlD
NDA0OEFFNTEwHhcNMjYwMzI1MDM0NTQ3WhcNMjYwNDAxMDM0NTQ3WjAYMRYwFAYD
VQQDEw02OWMzNWE2Yi1lOWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0DYXheGz1vbTFY0YFFLG+aSbVdoLH/2InopF4a7N7nY/fdqPX2oPHN63uRSg
8uBZpMZvVuagPfREdq32UJWQVKz9vUsNwyLelJs9+Oi3fHCRaoNc79VUkaoGqcCS
gnm2RS+K2R9IP8j20EYVSSUYn2jXDejpJdlduzMbmOGIQqgWqyj3f9yGeIpw/hbu
kol24Ba9uEQKuhKe6xug2BqpPOx2ljeBfMTRpyFIHBP97OYQ8mi208C6/u53Ij6g
C1RC1tJEix3Ag6yl0r5UaK/lf4yJCzd0l4zaMAxIJrQd2VZ3eePGx4lTWEeWZ6Rc
Ztbokm5TRrhZJd/9h2W5eoYCmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAM+gR6j
fjkTGOsyKsnAgS/lg/QBMB8GA1UdIwQYMBaAFBNzU9DowUWlgMsAvDIiCJxASK5R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ5MC85OTE5OEYxMkQw
NTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJhV0F5d0M4TWlJSW5FQkly
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0UzTlQwT2pCUmFXQXl3QzhNaUlJbkVCSXJsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzQ5MC85OTE5OEYxMkQwNTQxMUVFQUY3OTlGMTZDNEY5QUUwMi9FM05UME9qQlJh
V0F5d0M4TWlJSW5FQklybEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUDPyNnU4ptQDXinkxAkOP1CcNMgfcMmZ8NHqWmQHKGl235vNJ6XsXJ5qUKYk
L6NIPGS16kZE3/99qaZzgIMwwI4l8U9qna95Zw0gu8mksr8DRuJ389HW7StXQltp
NfCHywb+0qDHyK3ZYBAZPflcXcir0kXL30CKulxJd49080huj3SPuJbLtJaiQ8To
ufSoy/7I37trtszTX8XJ1VC+B6SHmjFPPu6ycadP0bub4lwoPW/NhW9IFGZUmGWF
oy8PvK932ARcc7FL94iw2/3hr+aN9h3XJJNbx1dmF55H5XYL854YI5mHJfG/gYHw
lU+j4GL5caM7OhkuoyRuPhB6KQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:03:06 2026 by rpki-client