Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
File:                     e3dUqC3QY6R-jsNdFj72skSNEts.mft (raw, json)
Hash identifier:          uh96mybsve7hjcxaWbWG7a1skCg/lEx+A6qXkJKK7rM=
Subject key identifier:   F5:6F:45:2E:4A:14:AE:F1:B7:CD:1A:EE:13:57:22:39:B4:26:30:75
Authority key identifier: 7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB
Certificate issuer:       /CN=A9189311/serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB
Certificate serial:       2837
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
Manifest number:          281E
Signing time:             Thu 26 Mar 2026 15:38:02 +0000
Manifest this update:     Thu 26 Mar 2026 15:38:02 +0000
Manifest next update:     Thu 02 Apr 2026 15:38:02 +0000
Files and hashes:         1: e3dUqC3QY6R-jsNdFj72skSNEts.crl (hash: yFYQQ6rMgEIECTZYRadk6YH8Fr6ZuXyNhcOeOCKP1nQ=)
                          2: F5BBEA5AF6A611E7B40C7427C4F9AE02.roa (hash: jX+faSi98u6rI1llUGpD7X8uVE2k5e81nnO0sXDJRio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl
                          rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 15:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10295 (0x2837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189311, serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB
        Validity
            Not Before: Mar 26 15:38:02 2026 GMT
            Not After : Apr  2 15:38:02 2026 GMT
        Subject: CN=69c552da-3a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:3f:86:14:ae:44:a9:26:c0:0a:06:2d:93:
                    d5:04:c4:ed:80:0b:87:a6:f0:0d:8b:aa:c5:53:e7:
                    6f:b4:6f:0f:49:90:0d:89:60:36:f6:d2:2a:fc:cc:
                    d7:cd:10:17:2a:67:8e:5c:b7:e4:1e:94:55:79:47:
                    1f:7f:1c:13:92:fd:ff:c7:d2:4b:14:cb:9f:7f:d9:
                    f2:fb:a0:4d:c0:e8:91:03:10:ac:47:1d:db:97:96:
                    18:ff:d8:d5:48:9f:96:ba:7d:9d:fb:65:86:3f:8b:
                    d2:f0:a8:f7:6b:a0:70:77:2d:1b:4b:6f:96:96:2f:
                    d3:4b:69:63:c5:96:9f:ec:0b:2d:d5:1d:4a:8b:49:
                    9e:81:83:e1:24:fd:1c:81:81:a5:07:92:b8:1e:1c:
                    c4:85:98:43:54:41:45:b2:d0:63:80:b5:a3:3a:bc:
                    fc:9b:42:a4:9b:50:67:8d:99:2a:7c:ab:8b:e9:3e:
                    df:f8:29:a0:9b:76:8a:91:74:31:47:9b:45:06:90:
                    36:0e:73:7b:c6:b7:ab:96:29:a7:50:6c:55:df:74:
                    c9:12:53:b8:64:59:d4:13:aa:72:1c:64:a6:19:41:
                    73:3e:be:80:e2:bb:c0:ad:6c:90:e4:5e:62:ce:3f:
                    85:60:6c:f1:21:b2:a4:c9:99:9d:14:fe:77:22:29:
                    cc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6F:45:2E:4A:14:AE:F1:B7:CD:1A:EE:13:57:22:39:B4:26:30:75
            X509v3 Authority Key Identifier:
                keyid:7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:84:2f:64:45:fe:2f:7e:a2:db:4a:2d:ea:e1:93:44:41:62:
         59:80:16:a6:19:51:8f:b6:f6:c2:35:26:52:09:dd:a9:d8:f8:
         0b:aa:1c:b9:d1:28:40:35:cf:4f:be:dd:69:28:af:7c:5f:cc:
         d0:7e:03:c5:de:92:14:bd:19:37:4b:8f:44:49:98:64:c2:6d:
         0b:df:5d:2a:5d:02:3f:62:dc:14:02:09:44:c1:46:4d:a5:f6:
         d4:cb:7a:a1:b5:74:b3:9c:8c:9d:78:56:ac:9e:a6:46:43:57:
         06:48:b6:0c:30:cb:45:88:b9:b5:73:bf:b0:3e:e1:ee:45:df:
         cc:9b:08:8e:f7:15:42:f9:a6:f5:8e:ae:c2:3c:25:fe:27:27:
         05:5f:a6:94:ed:1e:ba:fc:65:05:0f:e6:75:ae:d3:20:ff:d7:
         3c:36:4f:ff:7c:ae:12:9f:e7:86:6e:57:a4:3d:8d:b0:97:df:
         22:ea:96:9d:be:fb:af:41:d8:71:a7:a0:72:17:a3:ac:b7:1b:
         1a:16:4f:e2:a0:68:99:5c:7d:7a:dd:ca:9e:21:bc:ed:0e:18:
         b4:7a:54:e2:51:77:0e:3a:c4:24:8e:8b:66:66:0f:5f:79:cc:
         0c:98:a0:36:b1:9c:8c:f0:29:09:45:40:99:1f:b0:d7:ea:a5:
         ce:a1:62:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:06 2026 by rpki-client