Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
File:                     y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json)
Hash identifier:          EXCyN88Xidm4hmCbYPpyvZfkQh39z8vIXW10tvkv85c=
Subject key identifier:   4D:13:56:5E:A3:BF:21:7F:5A:5C:21:41:B8:08:63:DF:A0:FD:72:8A
Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
Certificate issuer:       /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Certificate serial:       26B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
Manifest number:          269D
Signing time:             Thu 26 Mar 2026 15:41:57 +0000
Manifest this update:     Thu 26 Mar 2026 15:41:57 +0000
Manifest next update:     Thu 02 Apr 2026 15:41:57 +0000
Files and hashes:         1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: ZlVHVZtuaouwa8sxzMO+ariH+4cvsWIIOZlVrXSDqKQ=)
                          2: FBD68828FCBF11F0A4D02CBC666F56BC.roa (hash: SxJM2aFKgBGF6I9rZ7S9/EziiSoyCz/xteiPP/MBsS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
                          rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 15:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9912 (0x26b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
        Validity
            Not Before: Mar 26 15:41:57 2026 GMT
            Not After : Apr  2 15:41:57 2026 GMT
        Subject: CN=69c553c5-3786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2c:6a:5b:60:e2:eb:4b:80:91:84:76:91:3d:
                    00:0f:e6:a3:2a:6b:19:cd:60:af:ff:17:ad:a2:0e:
                    f4:9f:4f:6f:1a:1b:45:fe:4b:26:44:a2:c3:bd:ca:
                    57:49:5d:b1:05:2b:e5:32:20:8b:f0:9a:47:21:66:
                    cc:7c:20:04:e6:7a:41:e1:b0:42:b7:8a:24:92:4f:
                    8b:4b:5b:6e:9f:b1:1a:43:fa:58:2f:23:db:40:06:
                    86:23:10:e5:e4:41:35:ab:71:f3:a2:24:aa:fd:51:
                    eb:a3:19:d8:ef:73:54:bc:96:b6:f8:8a:01:e4:e3:
                    4b:dc:09:ce:96:7c:74:41:ee:61:35:5d:a1:cb:2e:
                    e1:e8:b0:e3:66:57:e2:94:a4:6a:33:d2:b8:83:6b:
                    1a:62:36:63:ab:e6:d0:28:e4:56:4c:6f:96:2b:82:
                    59:62:fb:a0:41:08:91:f5:57:82:1a:ab:87:d9:0d:
                    b2:19:ab:12:50:c6:dc:3c:12:a9:49:2e:d6:50:f6:
                    e9:c5:7f:80:4b:b7:27:e6:11:30:e4:07:92:db:0d:
                    35:4a:44:c6:5c:db:64:09:03:3a:27:34:f2:7f:1b:
                    a4:86:aa:37:0e:36:7c:6c:4b:1d:de:ab:e4:7b:cb:
                    d1:3e:17:cb:39:4d:b5:8c:43:df:54:5d:dd:b3:1f:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:13:56:5E:A3:BF:21:7F:5A:5C:21:41:B8:08:63:DF:A0:FD:72:8A
            X509v3 Authority Key Identifier:
                keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:79:e1:fb:b0:0e:45:7f:90:65:0d:b2:4a:36:bf:4f:85:74:
         96:b8:f0:a1:eb:07:37:72:be:db:e7:86:e6:89:da:b2:56:3a:
         96:6b:1f:f1:33:f4:57:f0:01:a2:1b:23:88:48:b4:2a:0b:a5:
         58:a2:7b:a9:89:98:c7:b8:ba:e3:cd:34:7a:3d:6d:ac:ca:f5:
         20:14:66:f4:10:c5:70:d7:ea:ef:8a:f4:84:52:f4:09:2b:a3:
         19:f8:68:2e:c5:58:f4:c2:20:0c:3e:e8:0d:91:c8:74:5d:fe:
         82:41:86:39:57:03:4b:bb:c5:a3:da:7c:fe:9c:e4:e4:ad:55:
         93:43:89:d2:3c:dc:ba:05:5b:84:21:86:ed:b6:65:a0:07:bf:
         b3:6d:8b:43:4d:04:7b:a1:74:7a:ad:35:ee:58:df:bd:6a:d4:
         af:be:ca:d0:6b:24:8c:bf:a2:63:54:29:78:19:1f:79:8f:82:
         2b:f8:cd:c8:c1:07:b2:fc:cd:28:dd:44:55:55:cb:9d:e0:22:
         50:a9:11:65:53:19:d8:a9:d4:8c:05:c0:b0:cb:b5:a7:fe:f4:
         10:be:56:a1:66:61:d7:f5:a7:e7:59:b2:84:4f:f2:19:25:e9:
         67:11:47:7a:b4:8d:5a:ab:97:61:e7:5b:0a:b6:eb:df:ac:65:
         66:00:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:29:45 2026 by rpki-client