Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
File:                     3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json)
Hash identifier:          BFK2IxPwFAA8jFgZBX8QHaHiQZ5r/lRH7CG4mFOaiTU=
Subject key identifier:   B6:60:5B:C0:F1:FE:A9:7C:45:49:A2:79:70:93:2B:C6:DD:A0:15:6B
Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
Certificate issuer:       /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
Manifest number:          012C
Signing time:             Wed 25 Mar 2026 04:47:34 +0000
Manifest this update:     Wed 25 Mar 2026 04:47:33 +0000
Manifest next update:     Wed 01 Apr 2026 04:47:33 +0000
Files and hashes:         1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: 794Kq/cl6Tova2t+FeHXm36wbjC8fXlGgQqVcPoJ/xw=)
                          2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: qCZfH+xJ2p/8mTPa4y8ptTvD/J5HFYkwYWe+Fplo+JE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
                          rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
        Validity
            Not Before: Mar 25 04:47:33 2026 GMT
            Not After : Apr  1 04:47:33 2026 GMT
        Subject: CN=69c368e6-4122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fb:65:8e:c7:a8:17:e1:89:68:f4:a4:7d:6e:
                    ad:c7:d3:d7:4c:38:ce:1c:4e:0d:5e:be:6b:5c:e5:
                    d5:e3:b1:7b:dc:19:07:d9:ea:f1:dc:f3:26:d5:45:
                    3f:6c:a5:1a:30:74:b0:35:a7:2e:20:8c:5f:c9:cf:
                    f4:84:a0:77:67:36:d9:d1:dd:1a:1a:ec:bd:bb:18:
                    bc:4d:b0:37:76:2d:6e:b8:5f:55:d5:cb:4e:40:8a:
                    06:66:67:7b:06:eb:8a:57:82:59:6a:69:dd:f3:b6:
                    82:3d:ae:c8:0c:dc:5a:e0:3b:d6:86:dd:10:57:3b:
                    ff:2a:c2:7c:7f:95:32:71:ce:64:6f:94:4c:ab:96:
                    49:61:98:cb:1e:a9:29:21:1e:6e:2c:22:1e:f9:dc:
                    d5:fa:ae:36:02:4d:3b:32:77:90:e7:7a:05:32:ce:
                    e7:6f:fb:ac:28:4b:af:e6:dd:48:91:bc:b7:87:5d:
                    4c:63:28:3b:af:54:90:fd:cf:af:a3:fe:92:9a:b5:
                    7f:a6:53:38:5c:ac:67:bf:f9:5d:47:e9:c1:51:8f:
                    02:fc:12:28:ab:2d:6e:c6:8e:56:92:e0:11:91:4d:
                    01:a5:6f:75:29:20:8c:c9:cc:59:69:f8:8a:6d:fb:
                    05:ee:f4:f2:0a:0c:f7:3e:8f:62:5a:7b:ba:28:ec:
                    de:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:60:5B:C0:F1:FE:A9:7C:45:49:A2:79:70:93:2B:C6:DD:A0:15:6B
            X509v3 Authority Key Identifier:
                keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:7c:4b:2a:f6:ff:4b:7d:15:74:08:26:f2:c9:ba:ca:1a:0a:
         ff:14:dc:3d:91:e5:7d:cd:86:a9:b8:ba:c5:76:91:54:33:ac:
         f0:85:fc:22:7b:a3:62:c2:bc:27:0a:34:27:ca:f9:41:9b:c6:
         06:50:9a:f8:80:25:01:99:5e:02:e9:91:1c:4d:f4:2e:56:a9:
         c1:33:32:6f:09:17:f0:be:2c:b4:fb:89:42:ba:51:58:c9:2c:
         9d:5d:6b:69:fe:bb:af:d1:ae:01:b6:8b:8a:6d:a5:bd:28:a2:
         63:c4:e5:de:ed:54:3e:ea:f3:fe:bc:32:45:34:96:f3:fd:42:
         7f:e4:c8:96:a1:63:d8:3a:2f:ac:a9:ae:3e:50:39:c8:50:0f:
         fe:02:a5:24:df:14:de:21:5c:63:e8:b8:d5:17:a0:2b:fa:6a:
         f7:43:90:a6:f1:10:b5:75:b5:83:72:bd:9e:ae:48:07:e2:fa:
         0a:21:48:af:85:98:ac:1a:d1:18:7a:c8:e9:a2:aa:bd:8e:a3:
         e6:f8:97:65:95:4a:ac:cd:cf:74:80:f2:49:3d:22:9c:53:24:
         44:3b:25:e0:17:ab:b3:01:de:96:89:35:8b:ad:78:d3:a3:7d:
         f7:96:dd:7f:83:bb:63:a2:54:d1:b3:46:24:fc:1a:e0:7b:28:
         9d:d0:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:48:45 2026 by rpki-client