Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File:                     B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier:          EiGxqHTsa5zmNssHewlhAX5Zg2r7NDhQSOv2jQwr+eI=
Subject key identifier:   19:18:8D:B4:4E:B8:35:F9:CD:79:2D:14:D1:1C:2D:88:4F:EE:4A:4F
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer:       /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number:          9E
Signing time:             Sun 29 Mar 2026 07:01:59 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:59 +0000
Manifest next update:     Sun 05 Apr 2026 07:01:59 +0000
Files and hashes:         1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: kfrE/G8NF4coA2bzSLIiDaEUNQQ4QkCgcHohypOf1P8=)
                          2: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: uhQqMpiNXl9wZzktHIlfZ4N3ckT6gZ7yXsNLkz5TVAs=)
                          3: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: Vx9bjwI4dHIiRJ2+GamwQlhazgaJYjGaTfAlSelDl0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 07:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
        Validity
            Not Before: Mar 29 07:01:59 2026 GMT
            Not After : Apr  5 07:01:59 2026 GMT
        Subject: CN=69c8ce67-ea7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:91:26:5a:42:68:4c:b9:31:a2:cc:3e:89:76:
                    9e:ed:c9:71:67:9e:a1:1b:da:56:66:33:a0:e9:8e:
                    7d:85:ef:16:74:dc:7a:2e:ab:e5:7f:0d:51:8e:4c:
                    9a:d1:53:14:bd:eb:03:ba:74:9b:79:8e:77:25:c2:
                    c0:17:bd:1c:03:71:0d:80:fa:26:cf:75:bb:8e:09:
                    4c:8d:83:ff:a5:1d:d1:eb:99:eb:e4:00:4f:68:3c:
                    37:d7:1c:c7:4e:29:ea:2d:5c:a8:60:aa:de:2c:6e:
                    f8:60:3c:05:fa:7b:c1:ed:12:19:ae:70:8b:e1:ad:
                    fc:09:39:d0:4a:3d:3a:3f:c4:41:db:be:f1:90:7d:
                    a3:4e:3b:b8:46:b0:fe:3d:18:b6:de:20:e2:29:6e:
                    6f:e6:09:16:dd:37:62:03:43:36:07:9f:77:3b:af:
                    6e:8b:82:ed:32:45:c5:55:0b:b3:a5:8b:93:c5:75:
                    f9:98:db:c9:34:0c:17:e6:3e:92:c3:53:cb:af:74:
                    6c:58:b5:56:a4:a2:ab:c5:af:62:35:52:d6:d7:c6:
                    ed:c9:ff:6b:5d:59:ef:38:93:7e:fc:37:f0:5d:87:
                    1b:8e:0d:6b:da:6f:24:13:bb:84:77:25:8b:a0:70:
                    a6:c4:64:95:e8:cd:38:5c:e6:83:e6:ab:a6:73:0b:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:18:8D:B4:4E:B8:35:F9:CD:79:2D:14:D1:1C:2D:88:4F:EE:4A:4F
            X509v3 Authority Key Identifier:
                keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e9:70:b4:69:1e:c8:d8:60:d2:a7:bb:b4:dc:59:f2:08:fa:
         cf:bd:68:67:4f:6d:94:2a:e0:63:c8:b4:79:03:46:a6:5c:18:
         f9:55:f5:77:1e:00:b7:ac:f2:71:02:87:c5:58:8e:20:b8:e3:
         cf:d2:e4:c8:b4:08:08:99:49:60:95:cd:f1:5e:f3:c9:c9:d7:
         7a:40:60:2e:97:a1:d1:c6:bd:a2:da:3c:4d:67:ff:2a:3e:0e:
         de:0f:e4:90:e3:1f:58:2e:ea:72:a6:f1:93:4a:83:cf:4d:9a:
         63:d6:ab:75:a6:1e:76:16:8c:00:e6:0e:b6:49:78:40:d8:eb:
         a6:3d:45:cf:ce:79:1e:0c:ce:10:81:f0:69:4c:41:9d:d3:5a:
         e3:52:41:22:d0:70:ea:59:0a:fc:00:8f:37:e2:94:fb:38:14:
         11:72:48:fd:6d:e4:05:4a:29:70:be:48:5c:87:5d:6d:33:db:
         77:cc:bd:26:52:b0:c4:60:53:82:57:69:86:4e:da:d7:a2:a5:
         53:6b:e1:19:a7:79:5c:57:6e:6d:66:49:15:4c:c7:e4:72:16:
         f8:15:62:f0:ad:3f:c7:ae:d0:4a:b6:28:28:a3:57:d3:e0:d9:
         e8:e9:41:60:bd:63:d8:d8:f9:7c:92:c5:46:8c:a4:da:5f:8b:
         36:eb:92:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 17:27:52 2026 by rpki-client