Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File:                     UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier:          9U9Of5q/iCAPQXGXZin7tq8ywyUiM6JbRoaj7HtJ5c8=
Subject key identifier:   96:90:7D:FA:84:F0:89:81:F2:8B:45:B3:BF:FD:16:2F:E8:01:E1:6F
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer:       /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial:       1082
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number:          1078
Signing time:             Tue 24 Mar 2026 15:39:08 +0000
Manifest this update:     Tue 24 Mar 2026 15:39:08 +0000
Manifest next update:     Tue 31 Mar 2026 15:39:08 +0000
Files and hashes:         1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: 7n0OomLd/jWyqy3JTtDBMAMIPQNCi9sI7+YQCGeT0+w=)
                          2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mHPPM3GX+02Dm30uq1wseLE1/5qkA4HH/6sTSHF4ag8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4226 (0x1082)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
        Validity
            Not Before: Mar 24 15:39:08 2026 GMT
            Not After : Mar 31 15:39:08 2026 GMT
        Subject: CN=69c2b01c-f3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:30:5f:48:a8:42:c4:c8:e6:ff:07:02:8f:
                    91:ae:65:e9:ec:3c:c7:b5:19:a8:11:74:db:fb:9d:
                    1f:9c:57:69:72:7d:7a:e6:59:5e:fe:b6:cc:06:93:
                    8e:a1:d2:93:51:88:65:f6:06:c6:7e:08:f4:5e:fd:
                    e0:19:f1:41:c6:30:55:f5:38:33:90:02:02:ab:ec:
                    a7:9c:f9:1a:c2:87:35:11:5a:ce:6c:3a:84:fd:43:
                    9f:e7:88:de:66:06:b8:d5:0b:e2:24:67:a9:ef:ff:
                    10:3e:ba:62:16:ad:76:4e:16:b1:79:69:8a:ed:f9:
                    b0:37:ff:1f:67:78:f1:64:a9:7a:93:cb:20:ec:fc:
                    9f:be:ca:01:e3:e6:1b:bf:d2:8c:b2:7d:1b:c4:ca:
                    db:34:47:49:0f:72:85:f5:2a:17:7e:41:85:b2:c8:
                    04:cc:9a:4c:52:0c:14:66:b6:06:4f:01:c7:4e:c2:
                    e0:a7:a5:52:f9:5c:8c:35:b7:f2:8e:f7:b8:d9:cb:
                    c5:84:5b:c7:0a:02:48:14:1a:2d:87:08:90:88:88:
                    be:90:2c:06:a4:af:57:73:17:b9:3a:01:e7:61:fd:
                    2b:79:3d:ab:81:8c:bb:f4:7c:23:78:e5:09:04:ff:
                    ed:12:71:16:88:48:8e:16:0e:c4:9c:74:68:e7:15:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:90:7D:FA:84:F0:89:81:F2:8B:45:B3:BF:FD:16:2F:E8:01:E1:6F
            X509v3 Authority Key Identifier:
                keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:05:c8:9f:20:75:a4:ae:0d:9f:4f:33:3e:fd:d0:d6:31:10:
         80:a4:eb:a3:a8:3f:9a:2a:47:71:3c:26:2a:07:0e:5b:5d:c4:
         e6:3a:45:eb:49:4a:b6:b5:b3:43:9a:1e:81:90:fd:73:6d:e4:
         25:4f:0d:a6:73:0e:a0:d8:2d:bc:1b:b0:81:f0:25:08:b3:31:
         83:24:26:b2:01:13:aa:c1:a8:09:08:4a:09:62:f9:9c:20:bd:
         6c:2a:6e:3a:71:56:58:5a:3f:20:2c:fe:8d:2c:9b:df:ef:78:
         8b:39:e6:0b:38:1f:4b:d5:43:76:97:01:de:74:50:d5:1b:85:
         cb:b6:23:21:50:eb:95:b5:e0:74:7f:6b:6e:40:d3:fe:54:22:
         10:b0:b0:9d:85:b6:64:2d:cf:22:db:5b:5b:5d:a4:7d:e7:14:
         bb:da:1a:4d:c5:4c:96:9f:d8:f7:a3:8c:16:19:5e:7b:47:c1:
         cb:07:cd:82:32:cc:d8:54:c0:4f:71:18:0c:de:f1:c7:18:c1:
         ea:09:41:dc:d1:4b:d1:12:dd:a6:23:09:3b:0d:0b:f9:47:bf:
         8e:b0:f5:c2:42:da:f0:b4:89:bd:97:28:40:03:c3:a2:77:7d:
         85:be:df:35:5f:b3:2f:d4:c7:5b:5f:c3:2f:9f:24:f3:0c:72:
         bf:b1:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:56 2026 by rpki-client