Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
File:                     T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft (raw, json)
Hash identifier:          msuH9r/1mzOQPdR9rGs2qOxeFHa4SgaMlfitk8ytsQ8=
Subject key identifier:   69:80:A6:95:0C:B7:89:5B:B0:34:AC:DC:25:BD:C8:C8:D1:B2:C5:91
Authority key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Certificate issuer:       /CN=A918924D/serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
Manifest number:          0B
Signing time:             Sun 05 Apr 2026 08:30:49 +0000
Manifest this update:     Sun 05 Apr 2026 08:30:48 +0000
Manifest next update:     Sun 12 Apr 2026 08:30:48 +0000
Files and hashes:         1: T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl (hash: phkOoC3pzgiOC9CSRRP0hoOB2Vxg71JvfnfzMe+B5xE=)
                          2: 0F7A780C278211F19C45DF9DCA833773.roa (hash: Nj46aMQlSHXr0PtozGObb5+1Bq9Ubs8JUSseSuuPGA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
                          rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
        Validity
            Not Before: Apr  5 08:30:48 2026 GMT
            Not After : Apr 12 08:30:48 2026 GMT
        Subject: CN=69d21db9-90c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:f1:79:3e:40:c0:6e:fb:8d:f2:64:cb:9a:
                    49:90:8b:b3:80:11:99:b8:79:87:b6:fd:14:57:5f:
                    cc:18:a1:73:f1:c7:7c:d1:be:42:5d:fc:88:32:1e:
                    f7:f5:51:be:63:90:b3:cb:c9:1d:d2:b0:ad:85:b6:
                    ee:35:45:5a:08:76:e4:8d:91:40:7e:f9:46:c3:5f:
                    f1:27:f7:fc:44:18:bf:b7:9c:e1:8a:17:e8:24:fb:
                    2a:1e:8a:51:00:70:c7:c1:34:84:4e:25:42:b5:e6:
                    14:76:3c:9d:3f:b7:39:08:d8:c9:4c:20:3e:cb:fc:
                    f6:b5:c4:43:21:d8:b8:23:69:08:be:5d:12:0a:f4:
                    3f:a0:e9:93:f9:07:53:4b:e7:c6:0b:71:f4:80:e6:
                    0b:0a:1e:6c:e8:16:58:2c:9a:5d:28:f2:49:03:1b:
                    72:ea:3b:80:a1:53:3e:07:2c:1f:63:7a:df:e0:cd:
                    34:ea:b3:d7:78:5b:b5:d7:1e:9d:0b:74:fe:17:d4:
                    ac:04:4a:57:ee:2b:2f:1d:ea:87:01:72:0d:2a:f6:
                    39:cf:b3:01:ac:86:cb:6e:f4:04:1a:7b:ca:0d:27:
                    ab:09:57:7f:68:bd:49:8f:47:4c:b6:f7:cf:c9:ae:
                    64:47:27:bc:59:d1:c3:ad:b1:6c:c6:46:75:96:4f:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:80:A6:95:0C:B7:89:5B:B0:34:AC:DC:25:BD:C8:C8:D1:B2:C5:91
            X509v3 Authority Key Identifier:
                keyid:4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:51:bf:d0:d0:c4:99:15:cf:46:43:ec:4c:99:be:64:4c:cd:
         ce:d8:36:00:bc:3a:0d:27:45:00:61:7e:24:58:d4:d3:19:6e:
         91:8a:ff:02:c7:26:47:23:8f:01:a8:10:c3:28:26:c7:02:ee:
         46:01:95:ac:f6:66:6d:19:03:a0:a6:30:3f:d1:95:b0:c2:e0:
         0d:dc:93:20:3e:55:4b:f5:41:06:b8:b9:41:44:04:1a:07:d5:
         19:a5:29:d1:48:b7:c4:0b:9f:be:eb:e2:95:05:37:d0:ac:51:
         62:f8:66:d7:6f:5b:ba:07:bc:e5:fd:2d:f3:bf:db:d1:2f:70:
         0d:76:0b:3e:15:f8:c8:0b:0e:a8:ad:93:56:76:84:9d:4b:a9:
         2f:48:6f:bf:59:95:a8:23:cf:af:8c:4f:73:e4:8d:a0:83:06:
         f6:aa:0b:b7:da:81:19:ee:cc:63:bc:bd:48:99:ab:19:e2:6c:
         cb:80:4a:79:64:a9:2d:b5:a4:49:2d:07:7d:6d:db:6a:87:bb:
         52:03:67:ab:bd:7f:19:bd:0a:91:a6:19:ef:b2:35:d6:db:f0:
         95:3f:4e:25:5c:ec:88:9e:52:08:2c:b7:00:d8:0f:da:d5:a7:
         fc:20:99:6e:4a:ff:5d:d3:69:30:a4:e0:04:8a:99:a6:d4:cb:
         13:6e:c7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:35 2026 by rpki-client