Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
File:                     3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json)
Hash identifier:          DT9f58oDiCft9QCcDqJP/dDYL75cC/30cWgrqSx4aTM=
Subject key identifier:   55:A0:84:94:A4:AD:8A:76:21:41:EF:8B:16:04:25:BC:77:05:27:23
Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
Certificate issuer:       /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Certificate serial:       0BDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
Manifest number:          40F8
Signing time:             Tue 24 Mar 2026 14:48:23 +0000
Manifest this update:     Tue 24 Mar 2026 14:48:22 +0000
Manifest next update:     Tue 31 Mar 2026 14:48:22 +0000
Files and hashes:         1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: AP7EKdEFLoTldCV3Y9Xfzs0p6hr6JXddg2ucFjliuVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
                          rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3034 (0xbda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
        Validity
            Not Before: Mar 24 14:48:22 2026 GMT
            Not After : Mar 31 14:48:22 2026 GMT
        Subject: CN=69c2a436-a0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:c3:f9:ec:2f:ba:6a:0e:25:39:23:b0:63:
                    2d:aa:54:9e:54:f1:b1:55:a6:9d:34:3c:90:33:4f:
                    73:7e:3e:d9:b2:66:0b:e2:3b:f5:a0:1b:0e:00:00:
                    6c:a7:1e:21:fc:e2:ec:16:4d:c5:c9:59:6d:97:db:
                    e5:a0:16:19:56:f5:2f:25:97:e7:6d:8f:c5:8b:90:
                    5d:ae:60:a9:9e:b1:e2:52:ed:98:0b:ad:b0:b9:cb:
                    d6:1a:d7:8c:bb:8e:be:2b:84:a1:eb:11:cd:66:9c:
                    a9:fc:b5:71:de:1f:1a:08:0a:c9:4c:6d:96:7a:4f:
                    e3:64:c1:96:dc:6f:c4:64:14:84:ab:b3:8d:b2:d0:
                    58:43:3d:b3:7c:6d:f3:e8:7f:91:39:32:20:11:3a:
                    84:d1:7d:d6:f9:e5:f8:c9:2a:44:11:2b:a1:8a:4f:
                    fd:2e:b8:74:3c:9c:0b:28:ec:2d:8f:4b:66:d8:63:
                    c9:80:28:43:7a:6b:67:cd:73:74:05:b0:a5:e0:e0:
                    c8:28:de:86:75:2c:93:07:04:2a:6c:c4:d5:db:d8:
                    ca:09:3e:38:e2:52:01:d0:f7:92:fb:91:93:33:0e:
                    44:42:17:87:a6:77:66:8d:1c:8c:22:b3:7b:87:4e:
                    a4:48:4f:32:57:55:a9:22:e2:80:68:36:58:98:70:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A0:84:94:A4:AD:8A:76:21:41:EF:8B:16:04:25:BC:77:05:27:23
            X509v3 Authority Key Identifier:
                keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:52:ff:2a:39:cf:c3:f1:1d:2b:81:49:d5:f2:96:fb:b6:26:
         06:c5:6f:5e:38:6e:01:3e:00:41:a3:5c:6c:9e:94:76:34:2e:
         a9:b4:a4:e5:7e:c5:47:e6:d9:0a:79:73:c9:4a:30:20:fd:d7:
         d9:1c:02:0f:ae:8b:d8:7c:53:74:b9:10:24:d5:8b:6e:96:58:
         99:98:2f:41:6a:d6:8e:59:af:b2:73:9e:7d:c9:96:43:e3:3c:
         12:88:63:fd:37:97:a9:7a:6e:2a:06:56:60:f1:cc:c9:55:d3:
         c8:d6:0e:57:b3:5b:dc:31:bb:13:a9:84:be:92:12:a0:70:d4:
         4a:4d:cd:9b:ce:16:72:ac:eb:e2:43:22:40:1b:91:c5:f3:34:
         56:ee:96:1e:bd:3d:f3:e0:84:58:e2:ac:60:1f:9d:09:e8:c6:
         d1:53:ad:0c:f9:d6:fe:97:1c:6b:17:7a:e6:cc:03:49:69:18:
         97:da:a3:3d:d4:84:0c:46:9d:02:40:be:7e:f0:fb:23:cb:fa:
         31:a6:a2:b9:01:40:a4:55:86:a0:45:a1:e8:d0:9c:f2:2a:3a:
         34:dc:3d:d9:22:19:4a:09:02:35:7c:4e:f5:15:0d:52:2c:94:
         6d:23:0d:f7:88:aa:79:23:c4:34:5f:66:ad:04:e4:28:86:1e:
         8e:27:ea:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:14 2026 by rpki-client