Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
File:                     MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json)
Hash identifier:          uv+Nat0jAJKyCeHoD7T6kzuyXD8dxuOW1A7hhp6hpGc=
Subject key identifier:   F7:2A:DE:8A:47:98:25:71:F6:1B:4F:3F:1D:C6:DE:02:02:B1:8B:CC
Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0
Certificate issuer:       /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
Manifest number:          3E
Signing time:             Thu 19 Mar 2026 07:26:30 +0000
Manifest this update:     Thu 19 Mar 2026 07:26:29 +0000
Manifest next update:     Thu 26 Mar 2026 07:26:29 +0000
Files and hashes:         1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: G3YqOKRhvUg4+pi77yX/gxB1G+oC4wBMl3ANaxw16qk=)
                          2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: S989I0Dh1VM/GqYxyKd3cTzapisk/BuvItcPdUyWkEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl
                          rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 07:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0
        Validity
            Not Before: Mar 19 07:26:29 2026 GMT
            Not After : Mar 26 07:26:29 2026 GMT
        Subject: CN=69bba526-c2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:90:17:4a:38:dd:78:28:51:f9:6f:23:ad:
                    64:55:08:42:38:ec:8d:06:1c:70:1d:84:25:70:e8:
                    fc:93:74:f9:f1:b2:11:1a:13:ae:5f:7d:69:b8:21:
                    99:ad:c6:0f:4c:07:7e:13:56:34:38:25:c8:22:ec:
                    45:af:af:c3:54:d2:33:66:d9:35:b5:22:e3:9d:8a:
                    d7:7d:ea:09:f4:38:da:07:75:35:2b:8a:f0:13:2e:
                    58:2d:bc:f3:66:e7:ca:62:ab:e5:90:cd:77:8c:a8:
                    0b:c1:ad:76:9f:2d:53:e6:f6:ad:0f:44:4f:b9:fc:
                    76:86:90:d6:48:e1:28:e8:c9:d8:f7:c9:a9:6e:3c:
                    93:b3:0e:f7:f8:a4:47:7d:55:51:df:6e:20:fe:eb:
                    be:88:c4:15:b6:3d:48:a9:5b:a5:8d:7b:bc:aa:51:
                    34:22:bc:77:9a:c1:dc:5b:3c:c4:a9:9e:ba:b0:24:
                    16:6c:58:c8:1f:c6:87:b5:5b:64:c5:03:b0:9a:0a:
                    29:17:7f:ea:e9:82:05:92:82:44:0e:d4:1f:00:71:
                    b6:1b:93:27:cd:3e:af:a3:d6:cb:86:2e:98:ff:e0:
                    e2:f6:8d:19:9f:5c:0d:1d:eb:09:7b:d7:1e:03:a0:
                    40:15:ff:cc:be:03:1b:f8:25:db:04:71:4a:27:e9:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2A:DE:8A:47:98:25:71:F6:1B:4F:3F:1D:C6:DE:02:02:B1:8B:CC
            X509v3 Authority Key Identifier:
                keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3b:69:85:9f:53:59:3a:75:e7:0e:1c:92:bc:ae:be:f6:47:
         14:94:bd:f7:7d:e6:75:a6:3a:51:8e:8a:ad:ec:3f:d2:15:c5:
         fd:81:4a:c1:a9:47:a7:ab:9c:9f:49:1c:09:d9:75:ee:6c:3e:
         9f:5e:3d:0f:43:76:07:04:f4:db:7f:47:f7:66:e7:0f:ff:25:
         22:7f:24:1e:7a:e9:c1:88:8b:da:30:44:9d:2f:62:8d:a1:13:
         a6:7f:9c:2f:08:85:6f:33:ed:49:41:a8:51:82:21:f4:76:90:
         b9:67:b5:79:48:13:c6:e9:00:c8:04:49:56:78:40:b7:f0:a7:
         96:7d:b4:3e:a4:c7:23:77:d6:c0:30:28:cc:72:28:5e:91:61:
         b1:a3:c5:b5:8b:98:28:5e:78:26:6d:b0:18:d3:2a:eb:db:1d:
         6e:ae:24:60:58:d6:f6:ce:dd:2a:74:ed:8c:eb:65:04:95:89:
         fe:0c:be:47:27:b8:54:41:60:21:ce:e9:79:84:6a:9d:ad:14:
         60:df:46:ca:07:05:4c:89:08:55:82:0f:67:ea:3c:ea:c9:8b:
         89:dd:c5:3f:dd:4c:69:24:ad:af:ae:7f:02:ed:9f:11:55:a9:
         53:f2:bb:55:d7:20:cc:bb:43:77:69:b3:57:94:2a:37:ef:98:
         6e:47:df:4f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2
ODM5OTJFMDAeFw0yNjAzMTkwNzI2MjlaFw0yNjAzMjYwNzI2MjlaMBgxFjAUBgNV
BAMTDTY5YmJhNTI2LWMyZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCr/ZAXSjjdeChR+W8jrWRVCEI47I0GHHAdhCVw6PyTdPnxshEaE65ffWm4IZmt
xg9MB34TVjQ4Jcgi7EWvr8NU0jNm2TW1IuOditd96gn0ONoHdTUrivATLlgtvPNm
58piq+WQzXeMqAvBrXafLVPm9q0PRE+5/HaGkNZI4Sjoydj3yaluPJOzDvf4pEd9
VVHfbiD+676IxBW2PUipW6WNe7yqUTQivHeawdxbPMSpnrqwJBZsWMgfxoe1W2TF
A7CaCikXf+rpggWSgkQO1B8AcbYbkyfNPq+j1suGLpj/4OL2jRmfXA0d6wl71x4D
oEAV/8y+Axv4JdsEcUon6SkPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9yreikeY
JXH2G08/HcbeAgKxi8wwHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF
ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4
ODZGL0YxRjU2N0QwQzhFODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6
NmJtTTl1MHlwVFdnNWt1QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQADO2mFn1NZOnXnDhySvK6+9kcUlL33feZ1pjpRjoqt7D/SFcX9gUrBqUenq5yf
SRwJ2XXubD6fXj0PQ3YHBPTbf0f3ZucP/yUifyQeeunBiIvaMESdL2KNoROmf5wv
CIVvM+1JQahRgiH0dpC5Z7V5SBPG6QDIBElWeEC38KeWfbQ+pMcjd9bAMCjMcihe
kWGxo8W1i5goXngmbbAY0yrr2x1uriRgWNb2zt0qdO2M62UElYn+DL5HJ7hUQWAh
zul5hGqdrRRg30bKBwVMiQhVgg9n6jzqyYuJ3cU/3UxpJK2vrn8C7Z8RValT8rtV
1yDMu0N3abNXlCo375huR99P
-----END CERTIFICATE-----
Generated at Thu Mar 19 16:07:15 2026 by rpki-client