Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
File:                     3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json)
Hash identifier:          OUhNVdNkxp3ZnziVR8L7ZpNO/WdYkRGyn09NbQ7veoM=
Subject key identifier:   E7:58:53:E3:79:C3:34:8E:03:3B:2D:3D:D2:DF:24:3F:69:5B:42:36
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Certificate issuer:       /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial:       1933
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
Manifest number:          192A
Signing time:             Thu 26 Mar 2026 15:47:28 +0000
Manifest this update:     Thu 26 Mar 2026 15:47:27 +0000
Manifest next update:     Thu 02 Apr 2026 15:47:27 +0000
Files and hashes:         1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: u1N7eWTIlOPD7k2DPAkHCMgu8KCJlAh6fkYX909JIaU=)
                          2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: huSx5kpORQn0tkU4TRAPmVkFRxR4g/qvraibL4XJAo8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6451 (0x1933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
        Validity
            Not Before: Mar 26 15:47:27 2026 GMT
            Not After : Apr  2 15:47:27 2026 GMT
        Subject: CN=69c55510-2a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:24:12:4e:f7:52:b2:86:3f:97:9a:db:a2:
                    64:41:cf:03:7c:a1:7f:de:83:73:6b:e1:74:7a:df:
                    6c:3b:7c:03:c1:f8:19:a8:10:1d:26:5d:76:02:04:
                    f1:65:38:5c:5a:0b:7a:98:c5:14:92:da:23:36:48:
                    b4:ba:ea:12:5d:e5:a5:26:54:b7:f2:8a:ef:fa:64:
                    da:7e:88:e5:78:f0:c4:e0:04:8f:93:6a:ea:70:8e:
                    d3:f2:64:d6:b9:d5:ef:73:3c:b6:68:e9:60:0a:ba:
                    e8:56:2c:ec:1a:03:4e:e9:00:ca:3c:ec:aa:a4:8b:
                    b2:97:74:4c:13:f7:a9:c4:9b:8f:57:cb:0f:fa:77:
                    c5:54:12:5b:2f:83:ea:02:13:eb:da:49:0c:d5:21:
                    d0:c3:d3:19:1e:53:55:57:1a:f9:2e:12:f5:8d:cf:
                    49:d5:e1:d5:7e:ef:69:24:50:8d:78:6e:c8:dc:a0:
                    31:21:ca:3c:1d:08:5a:63:f5:13:29:3d:e2:2b:87:
                    21:47:1f:18:69:20:7f:04:79:96:24:f4:e3:d0:06:
                    77:28:44:83:52:4c:f0:8f:88:36:06:23:99:cd:59:
                    64:6a:09:50:61:04:4e:ef:f3:63:95:49:b9:dd:a8:
                    2e:8c:40:ec:4b:ac:18:bf:60:4f:8a:d9:d3:81:b7:
                    d9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:58:53:E3:79:C3:34:8E:03:3B:2D:3D:D2:DF:24:3F:69:5B:42:36
            X509v3 Authority Key Identifier:
                keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c4:e8:5c:c8:1f:22:fe:69:97:23:d6:93:e0:b0:1b:c4:36:
         f9:73:79:02:d2:72:2c:8f:dd:26:1e:b4:ca:7a:49:0c:90:22:
         1f:b5:c0:4a:f0:fa:76:2e:91:3d:8e:d6:d5:cf:f3:db:a1:40:
         97:e5:eb:cb:a4:60:75:d8:21:00:f9:2a:b3:76:f5:ea:5b:77:
         a1:3b:6e:55:47:24:5f:7d:ff:cf:7b:3a:83:36:d6:2d:25:45:
         2e:b6:80:6c:90:f8:6a:b5:2e:0a:6e:db:92:69:b4:bd:c3:98:
         08:27:92:12:4a:24:b1:0d:eb:67:ba:b8:86:fa:c2:5d:75:0c:
         4c:25:3f:9a:f2:c7:f4:09:56:3c:be:84:3d:f3:9c:14:f5:82:
         39:8a:8e:fc:72:9b:81:ac:70:a0:37:ca:60:92:50:66:82:97:
         4e:01:d8:7a:e8:80:5d:57:ac:54:58:84:a9:79:07:d1:a8:3e:
         f5:2a:ce:71:f6:b9:2c:c1:2f:c2:35:a7:82:12:86:95:3e:48:
         84:40:a1:64:c3:0f:01:12:10:39:c5:12:4d:57:86:a4:6d:99:
         6f:9c:ad:55:b6:51:4a:e5:ed:30:3f:d2:4b:3f:ae:0a:44:5d:
         45:1a:f4:ad:fb:aa:c5:59:8d:87:bd:e0:a2:14:45:46:7b:38:
         e7:8a:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:29 2026 by rpki-client