Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
File:                     3oPHbNtE9PeURxkgK-OvqIPTSU0.mft (raw, json)
Hash identifier:          UgCh9wHqgA7/9ainPhLhNanWHmRFSDvbVJGqi9F6w0Y=
Subject key identifier:   B9:FA:6D:48:1F:74:29:7F:48:5F:CF:2C:36:29:16:6D:1F:61:D6:28
Authority key identifier: DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D
Certificate issuer:       /CN=A91EAE28/serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
Manifest number:          96
Signing time:             Mon 21 Sep 2026 07:31:11 +0000
Manifest this update:     Mon 21 Sep 2026 07:31:11 +0000
Manifest next update:     Mon 28 Sep 2026 07:31:11 +0000
Files and hashes:         1: 3oPHbNtE9PeURxkgK-OvqIPTSU0.crl (hash: ZcTkdly9DiroNhFNllPCHpIL8E2tygrWG6fyByR+vqQ=)
                          2: E9CC4952DBB711F09A595FAD4E641951.roa (hash: wYT2EQO9tWff1SLhMXGfdomgltEhqCKkHfWiewZBsdE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE28, serialNumber=DE83C76CDB44F4F7944719202BE3AFA883D3494D
        Validity
            Not Before: Sep 21 07:31:11 2026 GMT
            Not After : Sep 28 07:31:11 2026 GMT
        Subject: CN=6ab0dd3f-c490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:b1:89:a4:d5:22:cf:0c:3c:9b:91:c7:61:
                    cf:5a:96:b1:57:d9:60:ab:93:fc:03:09:01:11:0d:
                    04:4d:e8:9a:de:32:3f:98:f2:0d:4b:38:02:55:13:
                    ab:33:44:25:7a:91:07:01:a0:d7:6e:1f:a4:67:07:
                    55:09:84:40:c7:05:20:cf:83:4f:ca:52:40:4f:1b:
                    be:f5:c1:a5:87:49:47:3e:1e:5b:69:d7:ba:7b:6f:
                    35:ac:8a:fe:34:69:fb:30:be:23:8a:df:97:1a:ac:
                    26:dd:4b:a9:75:10:b5:56:ee:f1:ce:b6:32:d0:a5:
                    f6:85:18:25:37:9d:02:03:87:77:7c:f2:0a:bd:c5:
                    70:25:f8:e5:bb:3a:83:74:b9:45:82:4d:9b:5e:80:
                    0b:93:0d:cf:29:73:32:bf:9d:00:e3:64:a6:46:87:
                    13:61:ee:7b:e5:83:0e:4c:e9:cb:77:fc:b9:e0:5e:
                    9d:7e:76:e5:59:51:cb:32:a7:c8:3a:04:69:5a:43:
                    04:03:c6:fe:b6:41:9d:ae:12:ee:55:2d:2a:d8:1c:
                    5d:06:da:47:86:a7:ff:35:03:74:68:ed:a4:c1:aa:
                    15:e3:97:63:45:1d:db:34:df:ef:6f:26:bd:8b:aa:
                    aa:18:b9:c9:78:77:e8:46:4d:51:51:53:b8:23:65:
                    64:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FA:6D:48:1F:74:29:7F:48:5F:CF:2C:36:29:16:6D:1F:61:D6:28
            X509v3 Authority Key Identifier:
                keyid:DE:83:C7:6C:DB:44:F4:F7:94:47:19:20:2B:E3:AF:A8:83:D3:49:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oPHbNtE9PeURxkgK-OvqIPTSU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE28/47606EB4DBB711F0A0DF90F04D641951/3oPHbNtE9PeURxkgK-OvqIPTSU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f1:d4:53:74:d9:ab:b5:92:d9:65:e4:0f:f3:16:5a:79:15:
         0d:43:af:76:f0:91:87:44:10:99:49:46:fc:29:a9:80:92:21:
         00:2d:d7:88:be:9b:a1:3f:53:c2:c9:47:16:84:4b:89:10:f6:
         fa:f9:e4:61:a4:c2:3f:31:71:6b:a1:78:77:b3:4f:7a:ad:ac:
         48:a4:8a:b9:55:ee:ed:90:c7:60:3f:30:43:85:3b:a5:94:19:
         97:41:49:46:a5:e2:b5:b3:61:82:5e:78:23:20:cb:d0:d7:35:
         ef:7b:58:1b:ca:84:cb:5e:23:93:4e:5d:21:ab:63:d5:34:8a:
         d3:32:6e:ef:1c:a1:92:c9:40:cd:77:69:76:5e:3d:eb:03:98:
         52:ce:f5:dc:3e:08:d4:36:44:26:4c:3b:ef:5d:49:51:72:86:
         14:1f:4b:18:c4:26:22:3e:0c:d8:d1:0d:df:e8:75:a3:36:92:
         cb:4f:ea:1b:9b:92:1e:28:9f:66:4b:5d:21:47:ad:32:9e:d4:
         5a:f3:d1:2a:38:7d:78:54:fe:71:3f:31:e9:4f:ee:10:02:ed:
         59:6b:51:19:9c:87:65:3b:d6:b8:54:82:c2:d6:d4:75:51:a0:
         f5:68:f3:c5:01:8e:67:06:fb:d9:50:26:7f:38:74:a7:f9:c5:
         1e:f8:aa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:57:11 2026 by rpki-client