Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
File:                     31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json)
Hash identifier:          GOq/RRvRAjxPqYXKBruMxbhtHdfrZUWkd/NQIq201/k=
Subject key identifier:   ED:A0:72:D2:F7:4D:15:18:E5:1B:5F:49:97:B0:F0:2E:2A:EA:86:E3
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Certificate issuer:       /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
Manifest number:          0110
Signing time:             Sun 05 Apr 2026 05:29:20 +0000
Manifest this update:     Sun 05 Apr 2026 05:29:20 +0000
Manifest next update:     Sun 12 Apr 2026 05:29:20 +0000
Files and hashes:         1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: fNoF53iRcl81zlITDqiz8sydsxGXEcCPfW1JnMQmRIw=)
                          2: 934C7D46FBAF11F08EB01E575F6F56BC.roa (hash: T7EaNfKZqoPd4uuGaZYXGqpfHmxAJUJXEQfDEFPp/W4=)
                          3: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: yYz8vPsSQcwgOuF6A+VEinnO0ZhPnyp/BhHCVoBW8aw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
        Validity
            Not Before: Apr  5 05:29:20 2026 GMT
            Not After : Apr 12 05:29:20 2026 GMT
        Subject: CN=69d1f330-2624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:27:44:23:ef:a8:16:d2:4e:bf:19:ae:32:
                    81:5f:bf:d6:31:20:e1:d2:43:95:0f:79:f9:65:47:
                    26:53:e7:22:da:ec:ad:b6:91:08:9f:dd:b6:3c:be:
                    ba:9b:da:4d:6c:39:3a:e5:5f:d2:c7:4a:a9:01:cd:
                    17:16:fe:fa:3d:40:b1:a7:8b:5f:cb:68:31:69:46:
                    a9:fa:85:30:09:33:cc:fc:4c:85:b0:1e:24:1a:e2:
                    18:f9:d7:8c:a7:8a:f5:44:e8:6e:61:12:c6:8a:46:
                    54:53:d2:9a:ad:c8:32:f5:ce:90:36:1f:d1:c3:4e:
                    cf:90:a7:3a:c7:ab:e5:21:e3:7d:a9:2d:e8:fc:97:
                    1f:a9:cc:79:9e:c5:0f:f5:cc:85:78:96:a9:2a:45:
                    6e:84:2a:83:79:39:91:ce:93:da:49:88:b2:b6:0d:
                    cb:35:82:1e:ad:16:7a:37:eb:f6:8d:d1:6e:e9:79:
                    68:7c:a5:2f:d3:61:42:01:43:23:00:ef:cd:70:a7:
                    dd:99:9c:e7:1b:59:1e:c9:36:ad:16:b2:2e:29:7f:
                    ba:68:28:72:b2:1c:3d:f4:76:22:2d:b5:3c:42:d2:
                    a8:26:24:37:70:34:2b:3a:df:f7:36:9b:34:f3:7c:
                    3e:1b:98:9f:4b:7f:1d:1a:25:16:2a:75:3a:bd:d3:
                    b3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A0:72:D2:F7:4D:15:18:E5:1B:5F:49:97:B0:F0:2E:2A:EA:86:E3
            X509v3 Authority Key Identifier:
                keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c0:a5:27:5b:ea:45:b5:4c:90:9d:59:c5:72:be:66:a2:b6:
         2a:0b:1e:65:3a:7c:98:dc:15:25:29:4d:6f:24:85:19:ce:ce:
         12:e7:3a:50:6d:05:58:69:52:c2:85:0a:77:5d:ad:7e:4d:03:
         b7:58:b6:a0:1e:63:81:21:8e:5a:a6:99:28:db:53:29:fe:5c:
         5c:bf:c9:ec:25:6a:df:2f:f2:e3:94:a1:8c:ab:43:f7:4e:85:
         83:8e:91:57:ab:4a:58:f8:0d:f5:6a:72:0d:c4:05:80:34:7a:
         4f:94:cb:c5:21:9c:a5:3f:d9:ce:78:de:4a:73:66:79:5b:87:
         d9:ea:e2:b5:7c:97:f2:0a:ff:b4:0e:fa:42:87:79:98:75:b0:
         e3:d3:96:ee:cc:75:08:14:a0:88:1e:26:c8:c2:fa:0e:9f:72:
         63:05:f1:9c:78:db:8d:64:52:5c:b1:9b:3d:b3:20:14:76:b7:
         65:b2:06:bf:1c:df:cd:e1:78:83:cb:25:1d:16:86:77:fc:a9:
         ca:3f:95:2d:82:e1:de:8a:8a:86:cb:36:5b:fd:85:1d:e8:17:
         b5:3b:34:9c:67:28:ad:f1:ba:93:9e:23:dc:d6:42:19:70:fe:
         a4:21:ee:dd:19:00:94:ac:11:12:70:7d:86:0a:0d:14:28:4e:
         29:12:52:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:11:49 2026 by rpki-client