Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
File:                     3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json)
Hash identifier:          pyrwaWbmZHz6n+/iPS8loCRUjCJT4mU1QDBUcIHN6QM=
Subject key identifier:   E8:AA:1C:C7:AF:6F:93:E8:D7:07:6E:E8:78:B6:F0:1D:C8:6E:AC:08
Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
Certificate issuer:       /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Certificate serial:       071A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
Manifest number:          070D
Signing time:             Tue 24 Mar 2026 21:43:46 +0000
Manifest this update:     Tue 24 Mar 2026 21:43:45 +0000
Manifest next update:     Tue 31 Mar 2026 21:43:45 +0000
Files and hashes:         1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: H41ABWtTS+2mrxAeDEHPKHMtLXVlfnYVaCfKn18xM8c=)
                          2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: 7c5oSwVWti2WjgDXYCqZOoEG7KRtb2mj0zrvzawuV6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
                          rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1818 (0x71a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
        Validity
            Not Before: Mar 24 21:43:45 2026 GMT
            Not After : Mar 31 21:43:45 2026 GMT
        Subject: CN=69c30591-1875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:d9:49:45:38:19:d5:5f:71:db:15:d1:39:
                    1c:cb:6a:8c:9f:f9:e8:f4:8d:e5:a7:50:27:d8:f9:
                    1c:3b:68:b6:d3:81:f5:14:9d:ba:5e:76:1a:b8:c4:
                    bb:52:6d:85:36:63:2f:e0:5e:3c:55:39:18:7d:c1:
                    90:03:05:a8:d2:3f:b2:80:ee:10:05:ce:83:78:77:
                    75:69:19:32:77:4d:86:20:31:a0:ac:3d:f3:f2:30:
                    95:ef:ac:7d:dd:62:ca:a5:76:d4:69:46:5f:f9:74:
                    06:53:bd:8a:c7:58:8a:d3:3f:aa:d7:9a:4c:25:14:
                    db:0d:65:73:c6:43:c0:73:e2:a6:83:99:e1:db:77:
                    9d:72:5c:a5:a6:1d:91:bb:f9:0f:48:24:66:16:ca:
                    d7:9d:53:70:d1:aa:1f:02:af:bd:d1:4b:6e:7f:a0:
                    db:5a:9d:16:8e:57:06:6f:9f:d6:4d:e5:89:d9:24:
                    ee:76:e7:72:7e:36:e1:2b:a2:ec:29:a5:a4:d9:ea:
                    72:5d:38:4e:59:87:cd:7c:d2:ad:a1:93:c1:bd:cb:
                    18:49:2f:63:5a:86:2c:49:72:3b:d9:2b:fb:56:8c:
                    4a:84:c9:a0:60:25:9e:d9:97:44:ae:89:37:1b:68:
                    c9:47:d6:d8:92:38:bf:5f:27:85:ad:7e:79:f1:07:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AA:1C:C7:AF:6F:93:E8:D7:07:6E:E8:78:B6:F0:1D:C8:6E:AC:08
            X509v3 Authority Key Identifier:
                keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:6e:c0:d9:33:af:da:2b:9d:b3:f1:52:42:42:69:c2:bc:02:
         74:a2:88:83:33:fa:c4:1d:8a:1d:0b:6e:0e:73:c6:37:34:ab:
         45:e4:a1:b2:87:10:3b:c1:a0:0c:79:a1:c6:ad:74:82:2f:cc:
         73:08:a0:42:b8:55:69:f8:1c:48:27:02:e6:4c:4c:5c:bd:41:
         72:1b:bd:e6:a9:63:7b:a8:e3:d9:f2:49:f9:8f:1d:fc:d0:32:
         dd:25:9e:64:1c:41:fb:3e:72:16:61:5b:53:b3:0d:5b:f6:21:
         dc:e5:e2:25:43:91:14:81:e2:1b:0e:ce:3a:c7:4a:57:06:04:
         ec:93:25:5d:fc:c0:1a:00:00:bf:aa:67:af:ea:9a:43:55:f1:
         62:e8:09:b0:62:3d:ec:5f:99:e4:d2:90:f7:d3:2e:32:94:44:
         97:08:74:a1:f4:6f:d6:5d:d2:83:66:6c:22:84:1a:4c:5b:c4:
         da:3c:bd:4b:ce:5c:b5:6d:a1:c7:3c:71:87:f2:e7:9a:51:0e:
         25:a9:aa:54:04:32:e1:d9:6e:62:e7:2b:f4:3b:45:36:3f:03:
         50:b2:eb:a6:ac:b4:8d:a8:18:8f:e4:63:85:4f:de:8c:16:f9:
         b1:ed:0d:31:d7:38:2c:ef:1c:61:d1:de:6d:66:86:bb:26:ff:
         38:cc:d9:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA0QUMxMTAvBgNVBAUTKERDQUU4NzFCN0M1Q0I3OUJDN0VDRjY3OUIzQjJEM0M5
NTZBN0Q5RTMwHhcNMjYwMzI0MjE0MzQ1WhcNMjYwMzMxMjE0MzQ1WjAYMRYwFAYD
VQQDEw02OWMzMDU5MS0xODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtQnZSUU4GdVfcdsV0Tkcy2qMn/no9I3lp1An2PkcO2i204H1FJ26XnYauMS7
Um2FNmMv4F48VTkYfcGQAwWo0j+ygO4QBc6DeHd1aRkyd02GIDGgrD3z8jCV76x9
3WLKpXbUaUZf+XQGU72Kx1iK0z+q15pMJRTbDWVzxkPAc+Kmg5nh23edclylph2R
u/kPSCRmFsrXnVNw0aofAq+90Utuf6DbWp0WjlcGb5/WTeWJ2STududyfjbhK6Ls
KaWk2epyXThOWYfNfNKtoZPBvcsYSS9jWoYsSXI72Sv7VoxKhMmgYCWe2ZdErok3
G2jJR9bYkji/XyeFrX558QdeRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiqHMev
b5Po1wdu6Hi28B3IbqwIMB8GA1UdIwQYMBaAFNyuhxt8XLebx+z2ebOy08lWp9nj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy80OTcyMDk5Njgx
NDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1dkg3UFo1czdMVHlWYW4y
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNLNkhHM3hjdDV2SDdQWjVzN0xUeVZhbjJlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDRBQy80OTcyMDk5NjgxNDUxMUVCQjJERDVENEJDNEY5QUUwMi8zSzZIRzN4Y3Q1
dkg3UFo1czdMVHlWYW4yZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj27A2TOv2iuds/FSQkJpwrwCdKKIgzP6xB2KHQtuDnPGNzSrReShsocQO8Gg
DHmhxq10gi/McwigQrhVafgcSCcC5kxMXL1Bchu95qlje6jj2fJJ+Y8d/NAy3SWe
ZBxB+z5yFmFbU7MNW/Yh3OXiJUORFIHiGw7OOsdKVwYE7JMlXfzAGgAAv6pnr+qa
Q1XxYugJsGI97F+Z5NKQ99MuMpRElwh0ofRv1l3Sg2ZsIoQaTFvE2jy9S85ctW2h
xzxxh/LnmlEOJamqVAQy4dluYucr9DtFNj8DULLrpqy0jagYj+RjhU/ejBb5se0N
Mdc4LO8cYdHebWaGuyb/OMzZGA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:40 2026 by rpki-client