Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
File:                     3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json)
Hash identifier:          k0j3waiL54VxaGiiw2++Y4Kq75etOgVzJJgQcZ7uPao=
Subject key identifier:   19:F9:7B:5F:29:C3:D9:3D:0A:11:88:F5:60:C2:6B:95:CF:D0:19:CD
Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11
Certificate issuer:       /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
Certificate serial:       0AD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
Manifest number:          0AC8
Signing time:             Mon 02 Mar 2026 00:59:44 +0000
Manifest this update:     Mon 02 Mar 2026 00:59:43 +0000
Manifest next update:     Mon 09 Mar 2026 00:59:43 +0000
Files and hashes:         1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: 93nv5SibHWFIaTPEATXphzCzTk3RzIQ5ZGbFsgyxAJM=)
                          2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: gthIzMyilnDr9O/SMY6/sn4SwcV0DCBMCWSIc0OaLZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl
                          rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2774 (0xad6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
        Validity
            Not Before: Mar  2 00:59:43 2026 GMT
            Not After : Mar  9 00:59:43 2026 GMT
        Subject: CN=69a4e100-28f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4b:d5:e6:ac:3e:ae:1a:8d:4a:7a:c1:9f:ec:
                    80:a1:dc:5e:d0:27:be:5f:24:1c:29:e1:1c:17:ab:
                    73:b1:d8:41:16:d3:72:d5:a7:84:1d:da:d5:a0:fb:
                    80:85:12:a6:dd:ce:1c:66:26:af:92:7a:0c:f7:b2:
                    13:33:4c:a9:1b:25:4f:21:9d:3d:b6:d2:5c:38:8c:
                    33:16:c2:4c:ee:da:4e:b8:e1:c0:56:3e:cf:25:d4:
                    ba:17:71:c5:15:00:6c:3f:14:3f:4b:77:f6:1d:c0:
                    da:9e:b8:78:09:74:6a:58:0a:f5:81:57:f0:bb:eb:
                    57:05:69:8b:25:2c:57:db:c1:d2:7f:9e:7b:06:17:
                    5f:7e:31:7a:cf:9a:6e:37:57:49:f6:e4:7f:d6:4d:
                    61:47:c7:d5:6c:fa:ab:0e:5e:5d:43:20:3b:d8:4a:
                    16:6c:75:19:c1:4e:d2:5d:34:4f:6a:30:81:ff:93:
                    4a:f2:c7:5d:fd:8e:8d:48:fc:4e:c3:9b:bc:78:88:
                    28:60:48:92:4f:66:0f:12:2f:38:bc:45:1e:1b:29:
                    14:4f:4b:c8:b8:f7:62:ce:42:7f:e6:cf:70:e9:b3:
                    de:74:c6:76:98:79:12:db:f7:2f:be:4a:c7:d7:fc:
                    64:82:4c:59:4c:c0:54:b7:e5:bc:be:2c:fe:a4:88:
                    c6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F9:7B:5F:29:C3:D9:3D:0A:11:88:F5:60:C2:6B:95:CF:D0:19:CD
            X509v3 Authority Key Identifier:
                keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3b:02:90:4e:16:01:89:d0:a2:7f:c3:3e:ed:fa:67:86:12:
         af:6c:34:ee:9a:af:7a:46:dc:21:ab:fd:0d:e4:a1:60:77:42:
         c4:e0:3a:14:43:03:40:de:40:cc:80:c6:2b:b6:6e:9c:c5:e6:
         39:b7:a9:d3:2f:13:b1:23:72:6c:34:37:74:28:0d:e9:ed:e5:
         d7:dd:74:ab:a7:4a:26:86:a3:77:a6:63:fb:91:e8:57:75:42:
         a0:d6:41:90:52:26:e6:66:16:51:a4:36:22:7d:90:0e:03:18:
         3d:e9:14:ce:b6:f7:9f:a8:68:b4:04:fe:ed:0f:50:fb:b0:74:
         78:c0:1c:06:03:7f:8f:d7:02:aa:22:6f:66:f1:91:71:e1:6c:
         62:50:89:66:05:0d:38:44:5f:eb:4b:d5:d0:f0:7e:4c:c2:03:
         e7:5a:d6:07:b2:06:eb:4e:21:df:36:4e:53:ce:3d:bd:c8:c5:
         f0:c5:a6:0e:8a:c8:0c:6d:e3:1b:0d:2f:48:d3:dd:fd:72:27:
         8f:a0:8d:fb:04:08:62:93:13:71:10:fe:9b:00:b9:c6:3d:4a:
         b1:f0:f2:18:d9:70:16:f7:a9:c5:2f:a0:d1:42:b7:b2:7d:97:
         85:19:87:43:ab:d0:f2:c0:df:00:42:f1:ec:e6:7b:ab:92:e2:
         05:55:e9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:13 2026 by rpki-client