Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File:                     UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier:          tCIHmZ3JTt8sfvtvLkFya6gm3EfQ8AUDsvJkx9I/yqY=
Subject key identifier:   96:67:44:E9:46:E7:D5:74:79:B3:A3:4C:C8:5E:9A:C7:0E:43:DF:65
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer:       /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial:       109B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number:          1091
Signing time:             Tue 12 May 2026 15:42:41 +0000
Manifest this update:     Tue 12 May 2026 15:42:41 +0000
Manifest next update:     Tue 19 May 2026 15:42:41 +0000
Files and hashes:         1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: lsvy86oo2RU3foMQXRxLhbliJ4Xy6FLbt/L51NX8/Is=)
                          2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mHPPM3GX+02Dm30uq1wseLE1/5qkA4HH/6sTSHF4ag8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4251 (0x109b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
        Validity
            Not Before: May 12 15:42:41 2026 GMT
            Not After : May 19 15:42:41 2026 GMT
        Subject: CN=6a034a71-136a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a7:fe:76:ba:41:04:0b:81:42:fb:9f:b2:b2:
                    0f:87:47:c6:31:24:26:c5:50:77:09:ad:27:e4:00:
                    99:e6:31:9a:26:c4:d2:4e:0c:8f:bb:f2:f3:25:b3:
                    37:45:e3:d2:b1:69:c4:75:a8:fb:1a:4b:90:59:8e:
                    3e:47:9d:ad:02:dd:f2:70:be:8a:e5:95:0f:a3:e3:
                    51:84:21:31:19:3f:a1:de:a8:49:1f:99:d4:cf:c0:
                    83:42:4a:06:1b:63:ff:41:24:31:d3:cd:5e:9f:3d:
                    c3:d5:5b:6c:b0:cb:5f:4c:b8:89:f6:95:ad:d4:ea:
                    fa:26:48:3a:53:69:9e:44:97:97:b9:a1:3f:15:1f:
                    ac:1c:c7:96:e1:fd:0a:20:d7:3e:af:59:88:cd:c3:
                    c9:e3:99:ed:77:6f:e5:64:43:4f:b5:ed:ed:de:e6:
                    0e:7e:47:0e:ef:e9:cc:16:bd:84:93:d6:47:63:84:
                    d0:ee:16:48:d2:a8:5a:44:5e:09:ef:97:da:31:3a:
                    16:fb:56:f3:f8:37:55:a5:3e:80:f1:72:92:00:26:
                    61:0b:69:52:a2:ac:5c:aa:1c:f2:b3:64:a4:09:28:
                    f7:52:fe:04:cd:65:bd:02:c1:62:e4:db:2a:04:a1:
                    87:d3:67:b8:33:6c:78:37:74:ca:9a:7d:42:bd:0f:
                    46:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:67:44:E9:46:E7:D5:74:79:B3:A3:4C:C8:5E:9A:C7:0E:43:DF:65
            X509v3 Authority Key Identifier:
                keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fa:f7:f6:43:c0:f4:20:ce:b8:4c:65:ed:ce:bf:fd:c9:7f:
         55:f5:cc:2f:6f:7b:c4:ea:e0:5a:b3:16:92:d7:4a:95:9b:47:
         e8:b6:8d:09:68:8c:b7:13:64:be:8e:86:70:d5:a8:a6:52:1f:
         80:cf:1b:bd:fb:ad:fd:75:15:54:da:3a:50:2c:b7:5e:4a:e2:
         08:4f:5d:4e:9c:8f:94:8b:20:c3:ef:cd:dd:16:f7:c1:ee:ba:
         ae:a2:a6:da:03:06:5f:84:a9:99:19:e1:a8:94:0b:9a:7e:8f:
         07:ee:d4:8b:f0:08:c6:26:91:10:5d:78:d7:e4:e8:18:1e:1e:
         1a:b1:a7:06:ff:b8:79:8f:b4:3e:cb:56:5c:67:88:d0:ff:9d:
         90:e5:c1:05:b4:3f:21:eb:dd:54:18:ae:4f:89:f6:ef:33:b6:
         ac:f5:cd:d5:5b:db:f8:47:d4:6f:9f:ba:c6:ec:01:9a:ea:c9:
         45:a7:02:1b:69:63:ff:5f:70:48:3a:69:e7:4d:d3:88:f9:cf:
         06:d2:81:67:45:3d:3d:5b:1d:1e:ab:5d:10:7c:bb:b0:45:7a:
         02:64:9b:59:f0:0b:71:83:69:09:09:df:31:71:40:d5:ff:c1:
         ee:65:81:79:27:09:f3:be:bf:3a:c0:e2:e3:51:0d:38:ed:be:
         c4:7e:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:13:38 2026 by rpki-client