Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
File:                     31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json)
Hash identifier:          PqLWJQin99r7pLeei0cyPw0RVxNK2Cxs4nYMAL5ozzw=
Subject key identifier:   62:8C:BE:A0:EE:6D:45:38:A9:81:BE:6D:C7:50:69:7B:08:B9:F8:CF
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Certificate issuer:       /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
Manifest number:          0115
Signing time:             Wed 15 Apr 2026 05:36:37 +0000
Manifest this update:     Wed 15 Apr 2026 05:36:36 +0000
Manifest next update:     Wed 22 Apr 2026 05:36:36 +0000
Files and hashes:         1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: 7I0s7GvXJYvdqhFduY8oPOsFop+EZARE6ogkjeTDTDE=)
                          2: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: yYz8vPsSQcwgOuF6A+VEinnO0ZhPnyp/BhHCVoBW8aw=)
                          3: 934C7D46FBAF11F08EB01E575F6F56BC.roa (hash: T7EaNfKZqoPd4uuGaZYXGqpfHmxAJUJXEQfDEFPp/W4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 05:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
        Validity
            Not Before: Apr 15 05:36:36 2026 GMT
            Not After : Apr 22 05:36:36 2026 GMT
        Subject: CN=69df23e5-be68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:e3:24:06:bc:cd:74:b8:73:c1:f6:2b:97:
                    63:f2:fa:f6:78:b3:9e:81:be:59:e9:79:ec:ab:40:
                    45:5d:32:12:2a:f6:fd:64:b6:b2:33:c1:6b:fc:37:
                    66:ab:97:59:b1:41:a9:bb:38:fa:c5:7f:64:69:c1:
                    cf:5f:8b:f5:41:da:0d:b8:0c:af:12:81:db:5d:de:
                    0c:49:7c:97:f3:15:68:00:01:fb:4f:3a:70:7f:e8:
                    38:d5:89:30:c4:3b:c3:fd:b0:ee:d0:16:e9:a2:b4:
                    5d:a5:26:e8:14:a7:b5:4e:18:22:eb:f0:71:d7:be:
                    d4:a4:55:38:35:16:24:06:d2:d5:8e:87:59:82:0e:
                    92:2d:7d:76:1a:b6:14:d2:b4:d0:3d:ac:be:0a:41:
                    b3:fa:70:01:3f:b4:b6:7b:80:43:e7:8e:3d:1f:69:
                    76:0e:56:44:21:ef:23:72:dc:d4:4f:9a:5a:3f:cf:
                    30:1f:ce:3a:92:a2:91:5e:95:01:85:9b:92:7b:67:
                    12:69:fc:c5:ea:7c:3d:3d:b8:ce:79:34:17:25:de:
                    6e:d8:63:72:59:84:26:54:4e:4d:4d:f2:f8:f2:0e:
                    d5:04:08:0b:7d:eb:41:a0:28:74:48:a2:05:d4:ab:
                    8c:96:c3:12:03:2f:08:60:ec:8a:b4:f3:be:b1:51:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8C:BE:A0:EE:6D:45:38:A9:81:BE:6D:C7:50:69:7B:08:B9:F8:CF
            X509v3 Authority Key Identifier:
                keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e3:d3:0f:86:e7:67:59:5c:00:ce:b6:26:08:ec:00:9b:55:
         03:08:a1:f1:1b:ab:78:10:a6:50:c0:9c:56:9a:3b:b9:ff:1c:
         1e:7b:8a:45:80:02:58:a7:f7:30:bf:82:a2:ed:b8:ca:b2:e8:
         63:9c:da:94:82:f8:03:40:4a:4d:84:6e:0e:d4:87:20:62:3f:
         9f:88:7b:7a:ff:43:b6:9c:31:a9:12:39:2a:b2:60:5c:a5:a9:
         55:cc:d1:f5:aa:4c:9a:bc:3b:93:2c:5f:12:64:00:9f:8f:89:
         de:a0:12:43:2d:08:25:35:14:27:7a:1b:c2:1d:2f:9c:9e:73:
         f2:20:c1:3c:75:95:7c:a3:76:1e:b5:80:74:1b:3b:4a:93:d1:
         18:50:11:f4:3d:9a:ff:ca:74:e3:16:41:62:c2:0b:c0:0f:12:
         c1:31:5a:f3:d5:37:26:de:f5:85:ce:6a:05:92:99:8c:e0:e4:
         a0:39:0a:16:40:41:7e:73:6d:5f:0c:95:c6:35:c9:9a:e3:2a:
         b9:0a:2b:8f:f4:48:3f:7e:be:0d:ae:d4:5b:86:bc:d2:ce:30:
         5a:b2:24:2d:00:0f:2c:18:50:d6:15:82:67:ef:b4:3e:49:03:
         a4:cc:78:ea:d9:89:3c:0a:e1:9e:b5:a6:4e:e7:9b:19:48:9f:
         ac:a7:b7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:40 2026 by rpki-client