Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File:                     UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier:          AyO9IlPaDSH6s+9BaMaPsLKsCCKLTk6sECnQKs8VRzA=
Subject key identifier:   FF:77:98:3D:F9:49:7A:86:05:B4:D4:BC:9B:53:89:81:B2:08:06:FE
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer:       /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial:       108E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number:          1084
Signing time:             Thu 16 Apr 2026 15:40:32 +0000
Manifest this update:     Thu 16 Apr 2026 15:40:32 +0000
Manifest next update:     Thu 23 Apr 2026 15:40:32 +0000
Files and hashes:         1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: Xx0tm0pJCtGntqE2/1Qju1PGOTTl1CWlui6S08C3PVU=)
                          2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mHPPM3GX+02Dm30uq1wseLE1/5qkA4HH/6sTSHF4ag8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4238 (0x108e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
        Validity
            Not Before: Apr 16 15:40:32 2026 GMT
            Not After : Apr 23 15:40:32 2026 GMT
        Subject: CN=69e102f0-d4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:9d:97:2c:2c:2f:17:d0:51:14:f8:7d:f0:
                    ed:16:65:62:6d:f4:e5:da:8c:3f:64:ed:ec:6c:72:
                    8d:24:a6:25:56:8f:0f:a6:93:e5:1a:41:6d:c6:9d:
                    bd:43:95:5d:65:73:ab:63:2c:b5:af:c5:59:de:c4:
                    bc:1a:44:fd:71:bb:37:87:f2:8a:93:24:ec:de:c7:
                    91:a2:49:de:65:22:59:b9:f7:45:cb:fe:dc:5c:ac:
                    8e:64:39:02:15:9a:57:38:c3:cc:78:4d:c4:b6:55:
                    41:50:de:47:8b:d7:ca:72:9b:d9:9c:86:09:c9:e5:
                    4f:91:9b:da:df:67:11:c5:2e:be:0d:7b:29:53:6b:
                    22:34:06:2f:be:76:47:0a:96:88:a2:52:eb:3b:c6:
                    a3:52:36:47:e6:49:64:fb:cc:d1:bd:af:fb:31:35:
                    e7:c3:38:0c:b1:69:ef:fe:28:6c:e5:39:c0:c0:c0:
                    6e:13:b8:cd:f6:30:21:8e:86:de:ce:cb:66:82:47:
                    c1:b0:2a:eb:8a:70:b5:0f:36:a8:e6:f5:87:cc:ef:
                    46:fd:a3:c1:dc:b7:b4:dc:27:a8:c1:1c:6c:a1:fa:
                    80:2b:38:e8:95:c8:d6:94:83:9c:8c:4a:f6:a2:a6:
                    50:fe:1d:fe:6f:2a:9d:75:ed:56:b8:e7:c5:13:c4:
                    6a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:77:98:3D:F9:49:7A:86:05:B4:D4:BC:9B:53:89:81:B2:08:06:FE
            X509v3 Authority Key Identifier:
                keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:bc:13:cd:cc:81:d4:46:6d:e8:ab:68:bd:69:85:83:68:27:
         02:c4:b2:e3:3a:5a:68:3a:3c:60:4e:84:ba:63:9c:03:b7:63:
         9a:c2:26:16:2e:a7:82:c2:1f:d4:21:55:4d:39:28:53:21:05:
         73:5f:68:de:c8:f0:78:de:45:3e:90:2d:97:34:e9:68:52:3d:
         53:b0:ba:01:c2:6b:9e:18:9a:35:f2:a5:3f:81:6d:28:86:e3:
         e1:3c:9a:c3:0f:a6:02:66:da:92:e7:c3:9f:bb:13:a2:7b:91:
         a4:33:fd:0a:4f:66:a0:5e:91:a1:68:e0:a3:7a:79:b0:58:de:
         b2:d0:96:23:9d:6a:83:6f:02:dd:bc:8c:13:f4:34:03:40:69:
         12:c5:5c:91:05:55:45:e6:20:f8:d1:09:1a:f5:b8:43:3a:96:
         98:b3:39:ff:6d:5d:92:0a:bc:d5:3e:ce:87:4b:3c:51:1e:e9:
         55:82:bc:95:b8:1b:1e:1e:aa:1d:23:a5:74:6f:0c:d7:17:a1:
         99:12:52:e8:55:b6:ad:1c:72:99:e5:89:26:66:92:69:cf:86:
         ef:c6:f8:1e:22:e0:f3:f7:33:17:7c:7c:40:62:00:17:32:0f:
         9f:c1:32:2f:31:b0:f1:3c:03:77:4c:5a:af:d7:79:c3:94:96:
         69:5e:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:28 2026 by rpki-client