Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File:                     UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier:          qXWE/Lut6X3qEI2SzkrXASR+KpJDN8mR0M3t7rg6NNY=
Subject key identifier:   6A:EE:12:84:D1:A0:2B:76:2D:C8:DB:29:26:14:93:E9:34:56:53:3C
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer:       /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial:       1076
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number:          106C
Signing time:             Mon 02 Mar 2026 00:54:08 +0000
Manifest this update:     Mon 02 Mar 2026 00:54:07 +0000
Manifest next update:     Mon 09 Mar 2026 00:54:07 +0000
Files and hashes:         1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: CJTjco44OrZKdPQl++v48r3QpU0CiSilHrjxx1+L8n0=)
                          2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mHPPM3GX+02Dm30uq1wseLE1/5qkA4HH/6sTSHF4ag8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4214 (0x1076)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
        Validity
            Not Before: Mar  2 00:54:07 2026 GMT
            Not After : Mar  9 00:54:07 2026 GMT
        Subject: CN=69a4dfb0-1442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:26:e4:3d:26:5e:f0:cc:47:48:88:df:65:
                    c5:4b:59:d4:0c:ce:57:5b:55:c5:cc:ba:0b:fe:3b:
                    30:58:8d:01:fb:ef:4c:72:f9:6f:7c:eb:d6:38:e0:
                    15:b6:d6:ac:65:f5:da:67:0b:28:32:82:7e:bb:27:
                    1b:1c:69:4e:39:77:79:1b:94:f6:77:7e:cb:bb:6d:
                    6e:91:f5:6b:ef:bb:36:ec:ce:72:8b:1f:1b:5c:b2:
                    1f:65:91:16:2b:35:4e:2f:37:cc:c9:21:74:56:6a:
                    a9:aa:d4:46:66:3c:4f:0b:85:52:8c:f5:43:59:e8:
                    8f:7d:68:07:b5:6e:a7:e1:69:9d:79:8b:cc:4c:a2:
                    a7:9c:32:98:84:b8:a0:e0:d5:fa:e2:98:9d:1a:b5:
                    f6:bf:e7:71:a8:34:25:a8:ca:0d:a1:83:f2:b9:cc:
                    48:58:dc:74:ab:8a:e7:6b:af:e8:b3:10:1c:81:8d:
                    60:37:6f:7f:ab:9e:07:e8:cd:a3:ec:cd:8f:46:6d:
                    47:a4:4e:2d:c2:d0:56:0b:f2:9c:83:94:1e:8b:9d:
                    ca:76:00:2f:a3:89:88:37:41:eb:72:8c:96:49:d0:
                    7a:4a:28:f0:5e:14:90:49:65:3e:5f:53:b5:a8:a3:
                    01:42:01:65:f3:98:a1:b2:c1:71:9a:1c:c6:a5:40:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EE:12:84:D1:A0:2B:76:2D:C8:DB:29:26:14:93:E9:34:56:53:3C
            X509v3 Authority Key Identifier:
                keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d0:81:f7:88:78:71:af:cc:ec:24:4c:b3:85:e1:a3:87:e1:
         43:a2:64:8d:79:43:14:e5:0b:e4:4b:44:39:82:e1:44:3a:91:
         97:9a:2d:fa:34:2a:6d:3e:82:92:9f:f4:a5:52:f1:d7:76:ee:
         75:61:a1:0c:df:9e:ca:1d:de:0c:4f:ae:97:8d:a9:c1:87:e7:
         f5:1d:15:64:d9:e3:48:42:f1:07:da:e1:a5:22:e9:c6:36:7d:
         eb:cd:1a:fa:06:b1:c7:94:56:61:4f:b7:ac:93:33:3a:58:30:
         f9:aa:26:26:f9:d5:ba:da:91:66:fc:ff:9a:50:aa:4f:21:5e:
         c1:f2:28:b3:59:25:7c:f5:b4:d7:85:39:1f:64:d6:5f:72:86:
         10:30:dc:79:f3:4e:76:d8:8f:cc:6f:26:94:cf:a7:a1:f3:6f:
         de:5e:db:c3:02:d2:a5:16:d6:3d:2d:da:df:03:8d:3c:3a:fe:
         bd:81:ba:70:ff:4f:ca:df:48:45:77:e5:6a:52:44:19:82:7d:
         8c:9a:04:3f:33:6a:bc:51:27:55:8b:96:a8:b9:91:a3:40:f5:
         7d:76:5b:3e:e3:cd:ab:7b:34:be:69:f9:30:91:08:c4:ef:13:
         5a:d3:a9:cb:9f:90:a8:f4:a4:93:49:f4:ac:25:f1:15:03:77:
         ba:e1:06:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:17 2026 by rpki-client