Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
File:                     38UozwAG40FK-3_obR_er2SLXJ0.mft (raw, json)
Hash identifier:          YUNP3IgP6N1HTHibIFmva9U8tAKWZrKWMUw1JgzmbrI=
Subject key identifier:   64:81:C5:97:80:DB:B3:81:91:CF:A4:A0:70:65:82:22:99:C9:8F:83
Authority key identifier: DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D
Certificate issuer:       /CN=A91B1A3B/serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
Manifest number:          0113
Signing time:             Sun 05 Apr 2026 05:19:23 +0000
Manifest this update:     Sun 05 Apr 2026 05:19:22 +0000
Manifest next update:     Sun 12 Apr 2026 05:19:22 +0000
Files and hashes:         1: 38UozwAG40FK-3_obR_er2SLXJ0.crl (hash: i2pvPkAc57qR8m/CdQO3mdzl0q/df3GRQ/7nU0QL67E=)
                          2: 6CF3FF44901111EF922BFC29C4F9AE02.roa (hash: hvfFWUPLyFvJCXfs1g4giSnFKRGrDpasDj01CVoVhxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1A3B, serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
        Validity
            Not Before: Apr  5 05:19:22 2026 GMT
            Not After : Apr 12 05:19:22 2026 GMT
        Subject: CN=69d1f0db-8f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cb:f4:b2:3b:d9:c9:32:ea:de:46:7a:84:2e:
                    33:50:71:87:cc:00:60:a3:73:40:14:61:be:1c:49:
                    64:25:76:dd:ea:6d:88:ee:2c:c0:f5:91:73:ba:c7:
                    f1:5a:52:8f:61:a5:ff:b9:9c:a4:82:d5:5b:e5:67:
                    c7:5b:ac:18:7b:4c:6c:13:fe:41:c8:18:6c:8e:b6:
                    9d:64:99:5b:f4:58:4b:83:a0:40:32:fe:4e:3b:ae:
                    05:99:07:e4:70:65:ac:83:14:3d:19:32:07:9d:53:
                    17:2f:86:8e:f0:84:e1:f4:03:9f:4d:bd:7c:e9:78:
                    ee:f7:15:63:e0:92:c5:8e:4e:91:79:71:03:47:6b:
                    69:4f:3e:e0:5d:a4:0c:b5:11:74:35:97:ff:50:7f:
                    33:dc:12:60:46:51:74:c3:96:2b:07:cc:d1:ea:22:
                    bd:f3:90:24:23:f3:af:03:47:8d:2e:4a:bd:d6:09:
                    14:aa:a1:de:8a:88:29:cc:0c:41:03:79:16:bc:a3:
                    d2:72:6e:f0:59:db:14:94:cd:65:d2:95:8b:f5:85:
                    d5:6c:e6:32:da:fe:a2:82:b9:fa:05:77:99:fa:a5:
                    62:f3:2c:cf:a4:54:c2:ea:02:e6:13:71:42:be:89:
                    cc:a7:42:10:5a:68:78:da:81:8d:05:be:79:63:40:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:81:C5:97:80:DB:B3:81:91:CF:A4:A0:70:65:82:22:99:C9:8F:83
            X509v3 Authority Key Identifier:
                keyid:DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c7:1f:d0:a0:5d:69:22:48:8a:58:e8:1c:f1:63:75:63:f8:
         1a:74:8e:08:d1:da:f2:2b:f6:b1:2f:87:e9:9b:62:96:17:7a:
         ec:66:2b:18:d4:12:5f:94:10:60:86:5c:32:a8:1d:84:1a:bb:
         6e:eb:b4:4c:0f:5f:a2:f9:f2:3a:96:a2:24:bb:a6:e0:7b:4b:
         14:d2:c6:fe:d6:7f:c0:2f:cf:6f:ee:e4:83:37:25:67:d9:e5:
         e8:2b:00:e5:6a:be:28:4b:fa:da:b6:50:2d:ec:5a:c3:f8:ad:
         ab:46:cf:fe:47:c3:6c:82:81:40:2e:55:8d:dd:a0:b1:e2:bf:
         74:1d:ad:0e:10:7e:b4:bb:11:33:94:83:d5:f0:5a:2e:1b:46:
         88:05:f7:c3:38:42:1f:65:2d:c7:a8:e8:4d:1a:c6:10:73:bc:
         f0:77:d7:78:32:e9:f2:b9:21:40:df:b7:24:1d:72:fb:2e:5b:
         82:07:98:86:69:91:a8:88:2a:f0:86:af:2b:e6:dc:0c:ec:9d:
         3c:ff:fa:4d:4d:5e:57:b9:2c:2e:4a:e3:48:83:4e:bf:fb:16:
         1c:56:5e:e5:ba:bd:70:d1:91:8c:9a:34:cc:c6:b3:a3:dc:0d:
         bc:5d:f6:7b:86:8e:b1:1b:fc:12:e2:9e:fe:f1:44:0a:28:0c:
         1f:c9:57:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:51:07 2026 by rpki-client