Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
File:                     3fyp0DSUWlkkEWE31ih38M5Svxs.mft (raw, json)
Hash identifier:          FBgoLsN9blBmJ8gOfg7oaLhmqI+0rIBuNIq7q//PjQw=
Subject key identifier:   64:50:2A:D8:3D:92:47:87:82:2E:A6:FE:0F:7F:2A:97:B1:B7:25:8A
Authority key identifier: DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B
Certificate issuer:       /CN=A916CDAC/serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
Manifest number:          63
Signing time:             Tue 03 Mar 2026 07:46:02 +0000
Manifest this update:     Tue 03 Mar 2026 07:46:02 +0000
Manifest next update:     Tue 10 Mar 2026 07:46:02 +0000
Files and hashes:         1: 3fyp0DSUWlkkEWE31ih38M5Svxs.crl (hash: oFAhrcvz12xjN9hIFgd/D7DK2ThbnNz2rzOH4+ISdX4=)
                          2: 7AA2F5228F4411F0830D0B1EC4F9AE02.roa (hash: y8QNuwkCsWJ/L5tVc94Iq9/DycvmCAsPaVTmrrHE5H0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B
        Validity
            Not Before: Mar  3 07:46:02 2026 GMT
            Not After : Mar 10 07:46:02 2026 GMT
        Subject: CN=69a691ba-fac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ae:be:f6:95:83:dc:a5:5b:aa:88:d8:f7:ba:
                    f2:8c:35:e0:19:dc:e8:f9:39:c4:cd:ba:74:58:ef:
                    07:11:bf:36:ba:3c:ba:57:a7:75:9a:11:5e:01:9b:
                    77:20:80:6c:e5:45:db:35:3c:00:98:e7:0d:81:b4:
                    4d:0f:d6:89:38:83:cb:0e:81:7f:89:7b:ff:f4:81:
                    83:8b:2c:2e:f4:48:49:fd:11:1f:47:3d:db:41:4c:
                    cc:bb:52:fe:f7:38:11:ab:24:0d:f3:a3:14:16:f9:
                    25:1a:25:70:ff:46:40:1a:64:33:49:3f:d4:b6:67:
                    2b:4d:c5:43:1a:e7:0a:f5:7d:f3:46:2f:4e:eb:f3:
                    6c:a7:5b:1b:e8:05:9c:61:7f:b1:52:dd:3c:c0:63:
                    fb:1f:a1:1d:9c:5d:65:c3:4a:59:ff:41:4f:9c:49:
                    c9:43:23:81:2f:c1:4b:81:5d:04:b3:22:83:c2:8d:
                    13:8f:15:31:87:7d:97:59:03:58:2b:bb:da:d3:4c:
                    71:37:8a:3a:85:10:f1:da:09:87:d1:00:58:eb:82:
                    bd:a5:3e:7f:12:66:b8:f4:83:c9:59:4d:09:43:ff:
                    06:22:87:f2:da:60:47:36:bf:f9:60:6b:a3:e2:4d:
                    bb:51:1e:3f:9c:fd:8d:b9:7f:42:75:62:12:65:a8:
                    c5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:50:2A:D8:3D:92:47:87:82:2E:A6:FE:0F:7F:2A:97:B1:B7:25:8A
            X509v3 Authority Key Identifier:
                keyid:DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:59:4f:af:d1:06:07:b7:7a:22:c4:50:b8:46:1e:9d:54:74:
         b3:3c:2d:28:3d:2f:d0:28:e2:e3:86:aa:6b:66:64:34:e0:de:
         2d:44:f6:ba:52:f1:68:38:40:f2:64:ea:fc:31:11:77:70:4a:
         87:7f:88:5e:1b:7b:86:d3:a8:25:2f:88:ce:15:3c:75:ce:3b:
         27:f6:6b:ff:f3:a7:15:1b:40:50:bf:8b:47:cd:69:0d:d3:75:
         9d:0c:b5:3c:3b:2c:68:3d:62:15:82:77:19:81:02:91:1a:f4:
         85:8b:60:50:d5:5b:6f:53:08:07:33:12:dd:af:e7:58:85:5c:
         31:fa:a0:5b:1d:9b:ef:aa:d6:23:ec:c6:d3:01:97:13:07:17:
         30:8a:99:f1:ad:f7:43:08:41:6e:23:5e:c0:09:91:b1:ef:37:
         07:57:23:f9:d1:c4:d0:15:98:86:a9:61:c9:f5:42:13:3f:00:
         b4:7b:5a:d3:cf:d0:e3:51:fd:67:73:24:53:72:59:9b:72:1e:
         a1:5c:ac:0f:6f:38:a6:05:2c:59:d2:8d:89:29:72:ae:70:ae:
         0c:0e:a3:b2:95:d9:7b:ba:01:09:fa:a5:2c:b3:72:f8:20:07:
         1f:dc:24:31:be:eb:61:b5:d6:00:4e:be:20:7d:c5:75:e6:dc:
         40:9d:e7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:39:59 2026 by rpki-client