Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
File:                     3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft (raw, json)
Hash identifier:          onoWATM8kE2cHdamx+8lGqXFxu9yboyn2T5s/JXQWZw=
Subject key identifier:   73:13:BD:3C:8C:FC:9B:1A:B2:10:90:64:B4:A1:44:92:27:89:7B:9B
Authority key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
Certificate issuer:       /CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Certificate serial:       0BB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
Manifest number:          0BA8
Signing time:             Tue 24 Mar 2026 18:51:07 +0000
Manifest this update:     Tue 24 Mar 2026 18:51:06 +0000
Manifest next update:     Tue 31 Mar 2026 18:51:06 +0000
Files and hashes:         1: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl (hash: FS2/DyNe93VrwbCQ/FffMv98qrmc6ytp5N/323ppBmU=)
                          2: 07F14B9C426411EABA91B569C4F9AE02.roa (hash: cS/wdhgr00IDQ4iDn6eXLrPbb+pnnoJwef/1Qu+PSys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2994 (0xbb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA447, serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
        Validity
            Not Before: Mar 24 18:51:06 2026 GMT
            Not After : Mar 31 18:51:06 2026 GMT
        Subject: CN=69c2dd1b-4152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:8a:ee:c1:b0:65:59:2c:08:32:99:45:c4:
                    da:6e:27:01:4c:51:17:a2:8b:03:76:93:cc:ca:00:
                    ca:07:7e:d5:9b:6b:10:23:71:85:48:3d:f6:96:6e:
                    90:c1:1e:7e:0a:c3:81:32:ae:7c:bd:70:cc:7d:fa:
                    11:fd:9b:84:8e:2f:b7:5f:62:fe:ea:78:b5:40:11:
                    7f:23:42:77:33:35:ab:db:c1:12:a3:16:1d:95:e1:
                    3d:e2:14:2f:b3:5f:2f:c7:9d:a2:b0:20:e8:91:f6:
                    24:17:7e:4a:9f:8a:f2:e5:9f:36:5a:79:b8:e7:74:
                    5d:ea:86:0b:cd:60:59:2a:b8:cb:60:da:63:5f:8b:
                    56:2a:1a:d2:c7:3f:d2:0c:32:12:80:80:bb:e6:4e:
                    44:9e:fa:19:39:e7:08:2e:68:3e:29:1d:d6:82:ec:
                    3a:fb:d4:f0:a1:20:43:be:a9:4b:f2:0d:51:cf:b7:
                    d4:ff:83:18:c3:98:6f:41:a4:b6:f4:6c:58:ba:1f:
                    e8:64:71:fa:e3:8b:04:ff:71:60:a7:c7:6a:4f:66:
                    fa:80:51:55:d7:99:bd:56:26:e1:26:dc:8e:6c:95:
                    5c:e7:bf:48:3f:2c:f4:81:16:fa:c4:f3:2b:70:9b:
                    4c:d7:6e:ad:79:a9:ba:1c:46:e1:85:a8:89:31:83:
                    f2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:13:BD:3C:8C:FC:9B:1A:B2:10:90:64:B4:A1:44:92:27:89:7B:9B
            X509v3 Authority Key Identifier:
                keyid:DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:aa:ca:6f:66:dc:9c:c7:c4:0f:78:fd:41:f8:5a:82:78:ea:
         7e:55:d8:73:12:a6:20:4c:7d:07:0e:2e:ef:6a:3b:32:8a:c4:
         60:30:d1:83:78:26:6c:9a:70:a3:e4:90:bb:24:10:fb:95:37:
         cf:2e:89:5b:69:36:b2:c4:be:61:85:0a:01:e8:32:26:e0:0b:
         1a:65:fe:f5:02:52:b3:ee:e8:26:6e:6c:7b:3c:21:74:0f:b1:
         05:8b:59:71:85:e6:01:de:8d:49:2e:09:d3:e9:29:6b:7c:58:
         39:e2:0a:a3:0c:79:50:b1:98:95:04:1b:0b:98:6a:d0:b7:95:
         fe:f6:8d:40:f6:a8:30:8c:77:51:9d:c2:b8:1b:7b:13:cb:92:
         cc:b8:bf:d8:2c:01:fd:d7:73:b7:0b:00:dc:1e:c2:97:67:5c:
         8f:46:05:f8:6b:6b:59:78:5d:32:df:5b:af:cc:9e:01:37:e2:
         42:f9:b7:ef:e4:5e:85:52:ac:7b:51:32:a8:c3:bd:e9:05:30:
         7d:2f:a3:5e:6c:80:1c:5b:a1:24:3f:66:9c:35:af:6e:dc:4a:
         c9:e1:15:f8:43:4e:ac:a9:b6:6f:17:9a:75:a8:e9:3d:a1:01:
         c0:2a:86:22:df:1d:13:5b:af:c4:07:33:2d:06:e4:42:06:39:
         ca:90:a4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:42 2026 by rpki-client