Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
File:                     3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json)
Hash identifier:          j7BzYfDTMk9wrHCpajLASBacyvjY03Ll581Z5s8nN7E=
Subject key identifier:   6A:6C:73:BF:5F:EA:5E:15:F1:16:F2:C4:79:D4:3D:A9:21:E9:C4:33
Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
Certificate issuer:       /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Certificate serial:       03F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
Manifest number:          03EC
Signing time:             Sun 01 Mar 2026 23:42:41 +0000
Manifest this update:     Sun 01 Mar 2026 23:42:39 +0000
Manifest next update:     Sun 08 Mar 2026 23:42:39 +0000
Files and hashes:         1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: KjQyPesz0Uf/ZTKBrGX4w859SEutVnWXk4B7jQZFiUY=)
                          2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: CDD/Tcfc9Kjy21BqgGhbMRtGmLglmTTkZnwltnHOeUk=)
                          3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: sduucqhaJqAQZzpNAGA/Gi3WzrGDW7tnjBHtfudSWis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
                          rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017 (0x3f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
        Validity
            Not Before: Mar  1 23:42:39 2026 GMT
            Not After : Mar  8 23:42:39 2026 GMT
        Subject: CN=69a4cef1-cdf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:a9:53:99:d6:7a:98:e0:12:70:d7:7d:85:
                    6b:c2:48:98:7a:49:d2:86:e8:36:f3:48:e1:c8:5d:
                    f6:57:5e:7b:6e:62:a8:6a:04:5d:a8:84:f0:8e:79:
                    0a:a1:ce:43:a0:c0:60:72:ce:ac:35:93:d8:5b:39:
                    05:15:ee:97:4b:c1:b9:28:eb:b4:a7:d2:8f:da:68:
                    72:ac:3a:5e:bd:05:e0:32:4a:17:80:74:68:35:35:
                    07:3d:48:2c:97:e6:9b:5b:35:77:74:ef:06:05:27:
                    e7:de:89:4b:b3:ed:3c:49:63:23:ef:cb:1c:2d:6a:
                    c4:16:c5:cb:9a:02:3e:bd:16:ee:8f:60:9d:13:25:
                    e0:3d:fd:10:85:dd:0d:45:3e:c2:21:3e:d2:4d:f8:
                    d7:e4:e8:54:da:bd:9d:00:67:23:ee:12:da:e9:10:
                    ce:44:19:e0:08:ba:67:b1:6d:13:b0:59:d1:38:4e:
                    b2:3a:6b:1e:19:e1:7e:e9:02:7c:2b:61:87:53:7e:
                    96:c4:af:8b:5c:8a:ee:06:d5:aa:48:d1:e8:87:06:
                    49:34:07:fa:62:32:4a:58:ba:9a:f5:84:07:14:42:
                    23:20:13:48:6f:1c:43:61:49:ab:e6:35:9d:8c:9c:
                    2d:fe:c4:bb:b7:20:15:5f:2f:64:c0:84:37:54:de:
                    03:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6C:73:BF:5F:EA:5E:15:F1:16:F2:C4:79:D4:3D:A9:21:E9:C4:33
            X509v3 Authority Key Identifier:
                keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:bb:d4:1b:2b:80:b0:aa:97:f9:d3:bc:3c:d5:0f:43:fd:45:
         c0:48:ea:15:68:ee:f6:f5:58:1e:d3:68:85:19:e2:40:ee:7a:
         64:49:0a:eb:ed:3b:dc:45:e5:c2:9f:2a:7b:0d:0e:3e:37:24:
         a9:70:f1:4c:7d:dd:74:0c:3b:93:ff:3a:32:ef:42:db:66:fc:
         09:1b:bd:b4:3f:fe:c3:2b:78:a5:03:54:1f:25:21:ae:4c:0a:
         5b:ac:15:d4:8d:09:fb:d4:ad:fd:4c:89:58:04:ec:8c:f5:c2:
         6d:9a:8e:37:27:e8:33:e6:a4:c2:30:15:2f:a8:56:de:17:b1:
         65:6c:ec:59:78:8e:d2:a4:e7:ed:85:32:23:a8:ec:7a:56:21:
         8c:5c:9f:9b:9c:a3:8f:0f:c2:ac:bc:7c:3c:d9:51:8e:db:00:
         c5:f3:83:31:e8:e2:bf:43:67:da:ff:77:18:a7:89:c1:4d:cc:
         3e:c0:11:34:34:56:49:bf:79:da:51:56:0a:eb:f2:94:f3:04:
         cd:ec:76:24:6b:96:21:0c:52:4b:a7:dd:24:00:ec:d1:11:67:
         76:0f:c2:56:46:3f:b5:88:60:37:6b:a8:18:ec:ac:7c:09:c5:
         98:f5:a8:ca:ef:c4:17:96:e7:db:2b:3e:ed:4f:82:f8:6c:ad:
         62:e8:33:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNFRkIxMTAvBgNVBAUTKEREOEQyQzgzQkI0QTFFQTlFMTM3Nzc2RkNDNTUxMTA0
Q0FCMkI4MjMwHhcNMjYwMzAxMjM0MjM5WhcNMjYwMzA4MjM0MjM5WjAYMRYwFAYD
VQQDEw02OWE0Y2VmMS1jZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAktepU5nWepjgEnDXfYVrwkiYeknShug280jhyF32V157bmKoagRdqITwjnkK
oc5DoMBgcs6sNZPYWzkFFe6XS8G5KOu0p9KP2mhyrDpevQXgMkoXgHRoNTUHPUgs
l+abWzV3dO8GBSfn3olLs+08SWMj78scLWrEFsXLmgI+vRbuj2CdEyXgPf0Qhd0N
RT7CIT7STfjX5OhU2r2dAGcj7hLa6RDORBngCLpnsW0TsFnROE6yOmseGeF+6QJ8
K2GHU36WxK+LXIruBtWqSNHohwZJNAf6YjJKWLqa9YQHFEIjIBNIbxxDYUmr5jWd
jJwt/sS7tyAVXy9kwIQ3VN4DFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGpsc79f
6l4V8RbyxHnUPakh6cQzMB8GA1UdIwQYMBaAFN2NLIO7Sh6p4Td3b8xVEQTKsrgj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0VGQi83MzhEQkZGQUI0
MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hxbmhOM2R2ekZVUkJNcXl1
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNZMHNnN3RLSHFuaE4zZHZ6RlVSQk1xeXVDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
M0VGQi83MzhEQkZGQUI0MjQxMUVDOTY3MjgyMzVDNEY5QUUwMi8zWTBzZzd0S0hx
bmhOM2R2ekZVUkJNcXl1Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjLvUGyuAsKqX+dO8PNUPQ/1FwEjqFWju9vVYHtNohRniQO56ZEkK6+073EXl
wp8qew0OPjckqXDxTH3ddAw7k/86Mu9C22b8CRu9tD/+wyt4pQNUHyUhrkwKW6wV
1I0J+9St/UyJWATsjPXCbZqONyfoM+akwjAVL6hW3hexZWzsWXiO0qTn7YUyI6js
elYhjFyfm5yjjw/CrLx8PNlRjtsAxfODMejiv0Nn2v93GKeJwU3MPsARNDRWSb95
2lFWCuvylPMEzex2JGuWIQxSS6fdJADs0RFndg/CVkY/tYhgN2uoGOysfAnFmPWo
yu/EF5bn2ys+7U+C+GytYugzjA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:13 2026 by rpki-client