Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
File:                     3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json)
Hash identifier:          LqudW63HwrpjbkEx8lnNZcnm3lrYH4Jl0/QemTurhbg=
Subject key identifier:   22:31:17:30:CC:68:6D:45:73:3F:7C:12:AC:A1:47:29:E9:DE:3B:44
Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E
Certificate issuer:       /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
Manifest number:          99
Signing time:             Sun 01 Mar 2026 08:48:46 +0000
Manifest this update:     Sun 01 Mar 2026 08:48:46 +0000
Manifest next update:     Sun 08 Mar 2026 08:48:46 +0000
Files and hashes:         1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: JKk3fLzzYGrleGIS4ATNydHI0TIImPQ+VLRyuQ7O0e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl
                          rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
        Validity
            Not Before: Mar  1 08:48:46 2026 GMT
            Not After : Mar  8 08:48:46 2026 GMT
        Subject: CN=69a3fd6e-1dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:c5:52:b8:1b:6b:7a:c0:3c:c8:41:40:d6:
                    5b:cb:b1:5d:98:21:19:bf:b1:30:ba:c5:c6:3f:b7:
                    d1:e3:5d:94:38:ad:a5:7c:a6:d9:c7:93:e2:35:5f:
                    0a:7f:72:b5:10:57:85:d9:c2:7e:c3:46:39:52:46:
                    34:85:a9:5e:38:08:84:a1:cc:19:36:47:41:94:44:
                    8c:b0:94:7f:43:9c:9a:61:bb:1e:a7:ed:51:f6:30:
                    39:1d:89:18:0d:f9:9f:37:50:4f:cb:3f:f8:42:72:
                    d6:f7:54:fd:cb:d1:c6:1f:47:5d:1c:5d:37:3c:cf:
                    db:8a:6c:da:26:74:b5:27:b2:41:8d:ec:87:d1:4c:
                    78:29:0e:11:c3:5e:2c:c0:f7:38:1d:42:cc:eb:7e:
                    07:88:4b:f3:a8:de:02:23:9d:a8:5a:9e:cb:3f:3d:
                    6a:44:aa:a3:8b:6c:84:cd:89:ca:85:f3:d6:7a:f6:
                    bc:15:b6:c2:e1:bf:2c:d2:dc:53:05:a4:92:70:57:
                    a3:0e:62:97:92:dd:b7:72:bb:cc:3b:6d:d8:d5:44:
                    c6:28:34:8e:a0:6c:4c:0d:65:e5:42:f3:d3:4e:60:
                    df:56:36:25:8d:37:99:6a:81:4b:26:da:45:d2:ef:
                    33:7b:a6:95:e9:3b:46:e8:d2:ad:09:19:db:b4:b6:
                    38:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:31:17:30:CC:68:6D:45:73:3F:7C:12:AC:A1:47:29:E9:DE:3B:44
            X509v3 Authority Key Identifier:
                keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ba:60:dc:9b:38:cd:ab:ba:26:0a:35:24:3e:a2:4f:e8:ed:
         3c:61:2b:95:d6:c2:f0:32:a0:df:38:a9:a0:41:48:13:97:ad:
         74:04:88:1e:b7:07:3d:e6:3d:50:f7:c4:98:9e:48:ab:e9:50:
         f8:c3:fe:97:82:a4:02:94:0b:37:0f:27:9c:91:45:08:3d:7d:
         aa:dd:c7:0c:9b:c7:4d:00:ea:67:1e:f8:36:04:9c:91:68:7a:
         43:21:df:6e:b4:48:e6:ce:db:10:25:e1:17:09:ea:7d:26:18:
         ec:22:37:81:ec:99:42:1d:69:49:46:b4:a8:77:1e:c5:ad:37:
         0b:5c:eb:3a:28:eb:01:f7:98:9b:52:cf:50:64:fd:1c:03:1f:
         06:08:69:79:26:4b:c8:cf:d6:a0:82:fc:bb:9f:2c:eb:77:99:
         7b:12:22:cb:cd:9a:f7:11:73:c6:59:dc:1b:91:6d:70:a9:25:
         6d:f2:ee:1c:43:bf:38:1b:3b:8c:98:44:b9:40:51:3f:dc:ed:
         16:18:c5:4b:60:77:c5:55:99:f7:58:e2:3d:a9:a0:7b:72:81:
         dd:3e:7d:93:44:89:f2:c8:2d:c7:b3:14:1d:8a:f1:35:85:3e:
         00:73:19:fb:b6:ae:94:b3:94:b4:f9:5e:ea:0d:9e:ab:f4:ce:
         17:7b:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:27:06 2026 by rpki-client