Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
File:                     3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json)
Hash identifier:          bC7wfOkAjanhffn4T4IK2P/+w8TDmRt+ygBokAntwqY=
Subject key identifier:   25:FB:FB:3F:77:9E:3F:A5:55:3F:F9:44:AA:71:11:C6:65:C0:2A:ED
Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
Certificate issuer:       /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
Manifest number:          0173
Signing time:             Wed 25 Mar 2026 03:59:34 +0000
Manifest this update:     Wed 25 Mar 2026 03:59:34 +0000
Manifest next update:     Wed 01 Apr 2026 03:59:34 +0000
Files and hashes:         1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: k7vWJsafgo1V90jatuoU0QpxJfJHyaUjOf9lU30h2D8=)
                          2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: opYVyfVrf8nOteK7/xjEMUl4M6X/BkvRe3zd604oEu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
        Validity
            Not Before: Mar 25 03:59:34 2026 GMT
            Not After : Apr  1 03:59:34 2026 GMT
        Subject: CN=69c35da6-514b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7d:1c:27:02:d6:74:48:33:7c:9b:30:4f:d3:
                    db:e0:97:31:cf:4b:3b:0e:31:91:c2:14:ad:83:b9:
                    cd:1e:d5:99:dc:b6:1d:6a:da:08:65:73:49:03:cc:
                    bd:e9:df:e7:7c:a1:fa:e5:27:9f:75:88:0d:15:bb:
                    e6:62:cd:ec:bb:5d:ea:26:a3:ed:6a:6b:97:f5:4a:
                    5e:3c:8a:88:ce:f2:ba:4f:86:e6:91:9d:73:6d:60:
                    0f:9a:9b:7d:f9:99:26:65:76:47:49:32:9f:4f:24:
                    5d:13:da:76:16:a2:83:ae:5c:d1:fd:69:d3:32:57:
                    4b:0c:3a:0a:ed:02:8e:5a:d4:91:e8:f1:e1:e5:67:
                    08:b8:77:2e:20:1c:a9:b8:98:d2:f5:9c:58:ca:f9:
                    3b:b9:0e:f6:1f:65:2a:63:0a:83:62:89:d3:43:57:
                    d6:d8:28:00:47:f4:5b:53:24:ed:27:ed:58:e3:ab:
                    25:52:27:c2:30:08:73:2b:a5:e9:8c:9e:f8:74:dc:
                    e4:87:3e:0d:ef:1b:42:24:71:d7:12:46:1b:1d:eb:
                    92:f4:9d:a0:57:25:9e:b9:9d:4c:31:5d:3d:10:bf:
                    70:7f:9a:d7:0a:82:6c:8c:12:0a:a1:98:0d:a5:94:
                    a7:f4:fd:40:f8:3c:42:01:1f:fd:0c:22:14:1c:bd:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FB:FB:3F:77:9E:3F:A5:55:3F:F9:44:AA:71:11:C6:65:C0:2A:ED
            X509v3 Authority Key Identifier:
                keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2a:df:af:e4:4e:82:80:f3:45:c5:fa:d1:87:1e:5b:d3:ba:
         12:97:90:d5:7d:aa:ab:8f:17:87:51:0c:be:47:84:9d:91:d5:
         42:61:c8:58:6b:5d:54:ab:60:eb:cb:38:ae:f1:38:0b:ff:77:
         15:89:62:60:4b:4f:c8:27:41:b1:4a:4f:32:e2:1e:d2:03:be:
         a7:48:7f:02:82:f7:fa:68:59:7c:2b:83:95:12:28:12:84:25:
         b4:c3:d3:3b:bc:e2:e8:1a:79:33:01:d5:a1:5f:3f:76:1c:f2:
         a3:2d:ca:68:3d:09:fa:9b:26:94:24:32:d6:cb:e2:8d:86:29:
         45:ff:c0:ab:58:f1:df:68:eb:77:b8:9d:43:1e:96:eb:c2:19:
         a5:e3:76:c3:b1:e9:5b:e6:10:b9:4a:dc:79:70:5c:7d:f0:ee:
         3d:73:29:79:e7:ee:b5:4b:55:aa:0a:d7:ce:06:a2:65:d0:f8:
         84:2f:53:06:0b:b9:1c:dd:85:0f:52:d8:ec:4c:1e:40:ad:fc:
         42:f0:b3:b8:df:4d:c8:6c:60:a6:13:2c:7d:55:6c:ce:73:4f:
         88:63:be:33:94:08:19:b9:c5:d1:d6:3c:f1:93:42:07:c5:a3:
         36:c0:c2:e5:18:49:dd:03:ab:a5:30:d8:ab:7a:bf:b9:d8:a1:
         a8:74:63:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFMkUxMTAvBgNVBAUTKEREMjQzMkQ4QUQ2QkIzRTlFOTk2NTU4MEJCQzZEMjIy
MTkwN0IzRjcwHhcNMjYwMzI1MDM1OTM0WhcNMjYwNDAxMDM1OTM0WjAYMRYwFAYD
VQQDEw02OWMzNWRhNi01MTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5H0cJwLWdEgzfJswT9Pb4Jcxz0s7DjGRwhStg7nNHtWZ3LYdatoIZXNJA8y9
6d/nfKH65SefdYgNFbvmYs3su13qJqPtamuX9UpePIqIzvK6T4bmkZ1zbWAPmpt9
+ZkmZXZHSTKfTyRdE9p2FqKDrlzR/WnTMldLDDoK7QKOWtSR6PHh5WcIuHcuIByp
uJjS9ZxYyvk7uQ72H2UqYwqDYonTQ1fW2CgAR/RbUyTtJ+1Y46slUifCMAhzK6Xp
jJ74dNzkhz4N7xtCJHHXEkYbHeuS9J2gVyWeuZ1MMV09EL9wf5rXCoJsjBIKoZgN
pZSn9P1A+DxCAR/9DCIUHL0NsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCX7+z93
nj+lVT/5RKpxEcZlwCrtMB8GA1UdIwQYMBaAFN0kMtita7Pp6ZZVgLvG0iIZB7P3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUyRS9FNzFBMEJCQ0Yy
MTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMtbnBsbFdBdThiU0loa0hz
X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNTUXkySzFycy1ucGxsV0F1OGJTSWhrSHNfYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUUyRS9FNzFBMEJCQ0YyMTcxMUVFQkNDQzMxMjBDNEY5QUUwMi8zU1F5MksxcnMt
bnBsbFdBdThiU0loa0hzX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUyrfr+ROgoDzRcX60YceW9O6EpeQ1X2qq48Xh1EMvkeEnZHVQmHIWGtdVKtg
68s4rvE4C/93FYliYEtPyCdBsUpPMuIe0gO+p0h/AoL3+mhZfCuDlRIoEoQltMPT
O7zi6Bp5MwHVoV8/dhzyoy3KaD0J+psmlCQy1svijYYpRf/Aq1jx32jrd7idQx6W
68IZpeN2w7HpW+YQuUrceXBcffDuPXMpeefutUtVqgrXzgaiZdD4hC9TBgu5HN2F
D1LY7EweQK38QvCzuN9NyGxgphMsfVVsznNPiGO+M5QIGbnF0dY88ZNCB8WjNsDC
5RhJ3QOrpTDYq3q/udihqHRjBg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:17 2026 by rpki-client