Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File:                     UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier:          JiFU3RI8XnXPufjmzZLZrg9f4RK5FztDEaRmAFV0Qbg=
Subject key identifier:   D5:F3:DD:3E:73:50:28:88:A6:6E:34:B5:C9:F2:29:40:21:D2:4C:2B
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer:       /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial:       10E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number:          10D8
Signing time:             Thu 24 Sep 2026 15:39:55 +0000
Manifest this update:     Thu 24 Sep 2026 15:39:54 +0000
Manifest next update:     Thu 01 Oct 2026 15:39:54 +0000
Files and hashes:         1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: /ccvmZbXWV3MtSuB9aSO9/Nvh8bsxDkdClHhRv/rg4I=)
                          2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mDSdFAda1UgtQqeGInQfSpAqXmZ+NIepQJMYXkdE8Hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4323 (0x10e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
        Validity
            Not Before: Sep 24 15:39:54 2026 GMT
            Not After : Oct  1 15:39:54 2026 GMT
        Subject: CN=6ab5444b-01e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c2:b3:57:67:f2:df:15:cc:20:e4:94:f9:fa:
                    8c:d6:01:92:22:7b:54:d6:eb:da:f9:b5:60:8a:5a:
                    62:72:09:aa:4b:36:22:a4:c7:3f:b5:24:0f:d8:4c:
                    ae:7e:7c:c5:6e:9d:b6:68:1d:26:c8:a3:62:1a:0d:
                    6b:2b:f6:9e:3e:83:f1:da:d3:7c:a1:ca:49:37:33:
                    21:94:7b:ff:80:95:2a:7d:1a:ad:a4:71:58:83:12:
                    f1:56:44:a8:44:54:0a:b5:7c:db:26:9a:26:2e:bc:
                    48:16:c8:d9:df:25:05:2e:0c:92:3b:5d:af:be:88:
                    f4:8b:c9:78:c8:93:75:3b:16:1b:e4:e9:dd:96:9e:
                    2f:88:3f:a8:9c:28:2b:e0:a6:3a:e4:bb:fb:11:39:
                    a0:2f:53:e0:57:c6:01:98:ed:20:ef:93:cd:8c:c4:
                    a0:c4:2f:98:e0:08:4a:ec:cd:7b:35:65:f5:31:34:
                    b4:da:77:ae:1a:a3:2c:42:3a:41:dd:62:24:39:85:
                    51:17:cd:f3:f8:2d:32:74:dd:8f:77:a4:64:b6:81:
                    7c:c6:66:09:4f:b5:e2:7d:42:fe:5e:8c:61:06:93:
                    cc:1b:52:f6:2c:3c:3f:3c:7d:74:99:7b:3e:b9:ae:
                    22:70:1f:51:4b:c7:95:47:b6:35:a4:bb:16:bc:f8:
                    a3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F3:DD:3E:73:50:28:88:A6:6E:34:B5:C9:F2:29:40:21:D2:4C:2B
            X509v3 Authority Key Identifier:
                keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:89:b0:dc:39:45:81:0d:8a:c8:2c:c1:32:0e:92:b2:89:e5:
         43:6c:fe:2f:3b:02:a1:00:aa:d6:54:1e:b7:d9:a0:f0:db:aa:
         15:9a:e3:74:85:0b:15:6c:65:27:91:f8:ae:9d:54:b6:da:0c:
         1a:88:ec:66:25:3a:92:97:f6:c5:ab:69:9e:47:4c:45:7b:9d:
         5e:da:db:8d:c3:95:ce:aa:b6:37:c6:cd:84:b5:2a:2a:22:ee:
         3b:a1:ed:8c:02:65:73:5b:39:cd:3b:2d:2b:e5:46:f5:bb:d1:
         33:08:d0:e5:e9:9c:7a:05:a6:4a:3f:c4:93:86:7d:2f:67:97:
         e3:1b:0d:c4:dc:db:c1:e0:00:9d:66:72:fd:6e:9b:3e:47:25:
         76:01:45:33:02:93:71:2a:2c:42:d4:10:10:1a:74:7e:9a:72:
         3b:9a:5e:cf:64:bb:d5:20:00:81:2a:01:6a:5c:c9:76:f7:71:
         64:77:8c:7c:75:e7:50:fc:cf:01:f2:17:a9:b3:3d:ba:c1:25:
         d6:08:4f:40:d5:04:54:3a:48:31:bb:57:51:53:f3:32:bb:8f:
         ca:64:53:47:6a:bc:db:66:3d:fc:52:52:e6:4e:ee:65:d8:d8:
         d1:71:c7:3e:03:32:75:14:41:34:e1:24:da:d6:b2:9d:f1:2b:
         b5:04:9d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:02:02 2026 by rpki-client