Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
File:                     3fyp0DSUWlkkEWE31ih38M5Svxs.mft (raw, json)
Hash identifier:          5ond8NJQ2s5jZSfFBcmAhlt8/a73gMsEn9FI/FxDXMQ=
Subject key identifier:   74:EB:77:C4:78:A9:E0:D7:29:5B:9A:3A:A7:BA:EE:FB:95:D1:5A:D6
Authority key identifier: DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B
Certificate issuer:       /CN=A916CDAC/serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
Manifest number:          72
Signing time:             Wed 25 Mar 2026 07:10:57 +0000
Manifest this update:     Wed 25 Mar 2026 07:10:56 +0000
Manifest next update:     Wed 01 Apr 2026 07:10:56 +0000
Files and hashes:         1: 3fyp0DSUWlkkEWE31ih38M5Svxs.crl (hash: VE3Iw4RioVmWLPt5i9l3gO+2vHmwNjMyDGT1W4ll/rc=)
                          2: 7AA2F5228F4411F0830D0B1EC4F9AE02.roa (hash: wZA4/4bMMzyJpfxKqGciBuzuLo+xJsHik2HMyxfURfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
        Validity
            Not Before: Mar 25 07:10:56 2026 GMT
            Not After : Apr  1 07:10:56 2026 GMT
        Subject: CN=69c38a81-c31b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dd:50:c6:7f:13:09:1f:5c:63:58:a2:bf:f1:
                    ac:67:45:e9:89:ba:09:37:18:5f:10:b8:5e:05:b8:
                    5b:d3:94:d8:4e:bd:40:08:44:da:a8:16:bc:6c:ce:
                    f5:aa:8f:b9:de:92:16:58:72:5e:75:fa:91:44:ac:
                    ba:ce:80:2f:17:94:e8:95:93:c2:98:14:79:30:fb:
                    0a:c2:b2:e7:12:a6:4a:5f:98:30:85:f0:76:7f:77:
                    c1:30:07:ca:ef:8a:1b:5b:b0:02:66:1b:c8:d3:4d:
                    01:dd:33:6f:63:f6:27:a5:d7:fc:42:8c:6f:6e:33:
                    d9:0d:4f:b2:4c:9e:89:53:63:e1:2c:da:fe:9f:a2:
                    b1:40:f1:99:0a:99:eb:69:e6:44:3b:d5:32:1d:2e:
                    1c:b7:f2:31:8d:0a:ca:c6:9e:04:61:2a:20:fe:2a:
                    01:44:20:a6:11:45:55:f0:9c:a3:fb:ac:31:21:6e:
                    69:53:08:4a:3e:23:d2:c6:01:7b:02:58:1b:b4:0d:
                    39:53:0d:89:1d:a9:15:b7:ca:1b:9e:42:be:2b:d5:
                    55:4e:c5:06:b1:fe:7d:00:95:59:ee:93:0e:8e:70:
                    1c:7b:2d:c6:25:b9:5c:8c:28:85:c3:18:c7:f8:da:
                    d4:27:8b:d5:d0:80:cd:46:76:2a:fd:15:8f:d8:93:
                    01:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EB:77:C4:78:A9:E0:D7:29:5B:9A:3A:A7:BA:EE:FB:95:D1:5A:D6
            X509v3 Authority Key Identifier:
                keyid:DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f8:99:c4:43:98:44:ce:cb:71:f8:d7:29:c1:d6:ec:64:16:
         6f:8d:62:8c:fc:35:74:8c:d1:43:3f:2e:c9:df:3a:05:10:f7:
         4a:59:4c:35:99:f8:56:28:97:62:01:11:38:52:c8:31:17:30:
         a7:9f:ff:d9:a2:0c:41:bc:d0:3f:58:f7:61:d1:30:9c:e4:bb:
         e4:b0:97:90:2f:8d:08:39:cf:19:0f:46:c2:e2:f6:46:36:13:
         ed:0b:ea:7d:af:f3:15:15:3e:b5:9b:d3:33:c1:a9:9c:c8:13:
         3c:f1:21:53:66:94:98:ad:36:e5:04:9c:e0:e2:4a:4c:61:3a:
         53:82:63:ae:8e:67:90:de:71:4e:03:e2:a2:92:ac:bf:c6:af:
         6b:d8:7d:3a:18:46:39:74:3c:b5:18:99:07:f5:b7:53:df:cd:
         61:f0:aa:c9:73:51:d8:a2:3f:9e:1d:87:a9:89:ff:2a:64:4d:
         f0:a7:20:76:43:85:00:8e:b8:b5:fb:3d:18:22:94:c8:61:3d:
         84:0f:29:da:7d:5e:22:61:e0:be:3a:cd:5c:8f:53:a2:53:40:
         fb:81:26:f6:e3:92:8b:7c:af:3e:a5:b8:dc:c2:a6:cc:21:f0:
         89:d9:f9:8d:f7:fc:fa:f3:8a:66:48:92:df:6a:0f:3d:e2:10:
         12:27:a6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:29 2026 by rpki-client