Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File:                     UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier:          tcXfJIlaX4GrY1dDlSqtmh5Qr/8cb7TXT9sfDQDfi4M=
Subject key identifier:   98:19:2A:00:64:68:27:1D:A7:07:03:1F:24:9D:1E:1B:8B:F2:8E:80
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer:       /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial:       1077
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number:          106D
Signing time:             Mon 02 Mar 2026 15:47:21 +0000
Manifest this update:     Mon 02 Mar 2026 15:47:21 +0000
Manifest next update:     Mon 09 Mar 2026 15:47:21 +0000
Files and hashes:         1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: eGKmbhR86w3zgvW+Lit7lqs4R2GV5obB9D/02wQFvw4=)
                          2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: mHPPM3GX+02Dm30uq1wseLE1/5qkA4HH/6sTSHF4ag8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4215 (0x1077)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
        Validity
            Not Before: Mar  2 15:47:21 2026 GMT
            Not After : Mar  9 15:47:21 2026 GMT
        Subject: CN=69a5b109-ca3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:49:c9:df:01:3c:ae:7a:b3:83:18:4c:fc:
                    d5:84:f6:c8:54:36:13:64:b5:be:2c:d5:68:f4:5e:
                    50:17:76:3e:4a:e2:b7:07:16:e1:24:76:83:aa:ea:
                    20:93:00:61:ed:65:ea:d6:bf:b9:fa:92:6e:e5:07:
                    24:a4:cb:e5:4f:04:d0:8c:a4:12:5e:6a:5f:f8:0f:
                    d9:94:a1:63:ba:6a:e4:6c:b9:82:56:61:ae:3d:ac:
                    fb:e0:a7:a5:23:31:b3:85:68:1e:c5:2b:85:e8:cd:
                    51:3a:3d:51:10:e4:50:51:64:dd:49:d0:97:d6:1b:
                    6b:1c:1b:bf:2e:4c:b4:24:e8:cd:55:f9:d3:6d:74:
                    5b:dc:6a:a7:b6:ef:23:bc:49:6e:71:a4:cb:57:11:
                    0c:bb:03:dc:b4:cd:09:19:39:0c:1c:80:0e:7b:98:
                    5d:c4:84:e0:21:1e:3d:f3:ee:20:75:88:2b:24:4c:
                    bf:69:27:55:ba:1a:b4:eb:72:8d:36:8d:68:75:6e:
                    5c:96:1e:fd:78:9a:0e:15:75:10:df:ad:66:4f:6a:
                    c1:27:1b:b3:7e:88:8c:05:0d:24:53:b0:6e:b5:20:
                    70:dd:99:a7:48:59:0c:db:4e:8d:7e:44:d5:a9:49:
                    d5:0e:8e:57:b5:c5:f2:ca:8e:37:ca:63:46:40:3d:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:19:2A:00:64:68:27:1D:A7:07:03:1F:24:9D:1E:1B:8B:F2:8E:80
            X509v3 Authority Key Identifier:
                keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:37:81:45:c8:e0:21:74:ca:3f:37:dd:0d:f3:e7:f0:44:32:
         c0:e8:2f:b2:77:61:c9:60:fa:8a:d3:55:2d:62:c5:54:93:31:
         71:8c:b9:08:81:8c:7e:d7:bf:7b:3d:41:50:ad:26:d5:c2:be:
         60:57:8c:18:9d:f1:cc:a2:32:9a:1b:71:b9:1f:8a:44:b1:3b:
         5b:6d:da:ad:78:56:af:a5:c8:57:aa:af:ad:93:cc:63:53:fa:
         81:ac:fd:17:d9:0e:8c:1f:4b:f2:13:41:ee:80:e3:b7:9a:96:
         be:95:bb:59:63:fb:8a:0e:1a:d5:c5:29:21:29:49:ff:07:3b:
         ea:21:8e:96:dc:55:09:c6:12:c9:e7:50:b6:49:06:c1:16:f3:
         a4:2c:9e:a9:52:47:b9:c6:df:70:25:15:b5:29:9b:01:1a:3a:
         03:cb:24:32:aa:12:c0:2e:91:74:75:af:78:69:68:f0:2e:f0:
         fd:8f:f7:eb:9b:4d:0b:88:79:67:9b:a0:43:60:fd:a1:3c:b2:
         35:87:ff:ed:86:7e:13:c3:ff:5c:8f:75:f9:66:8b:79:69:65:
         9f:eb:21:d3:bb:b3:c8:4b:f6:01:81:96:dc:be:9a:06:4a:11:
         9f:fb:81:cb:dd:a6:a5:dc:c1:16:97:4a:7d:17:c5:90:bb:a3:
         9a:d0:b5:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgxMTkxMTAvBgNVBAUTKDUxM0REMzA4Q0Q3NTE0MjI3QUY1MUQ4MDVFNTU0MEE2
QTlGNUQzMzkwHhcNMjYwMzAyMTU0NzIxWhcNMjYwMzA5MTU0NzIxWjAYMRYwFAYD
VQQDEw02OWE1YjEwOS1jYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvMJJyd8BPK56s4MYTPzVhPbIVDYTZLW+LNVo9F5QF3Y+SuK3BxbhJHaDquog
kwBh7WXq1r+5+pJu5QckpMvlTwTQjKQSXmpf+A/ZlKFjumrkbLmCVmGuPaz74Kel
IzGzhWgexSuF6M1ROj1REORQUWTdSdCX1htrHBu/Lky0JOjNVfnTbXRb3Gqntu8j
vElucaTLVxEMuwPctM0JGTkMHIAOe5hdxITgIR498+4gdYgrJEy/aSdVuhq063KN
No1odW5clh79eJoOFXUQ361mT2rBJxuzfoiMBQ0kU7ButSBw3ZmnSFkM206NfkTV
qUnVDo5XtcXyyo43ymNGQD2jpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJgZKgBk
aCcdpwcDHySdHhuL8o6AMB8GA1UdIwQYMBaAFFE90wjNdRQievUdgF5VQKap9dM5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS80RTJEN0EzODUx
NDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZDSjY5UjJBWGxWQXBxbjEw
emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VUM1RDTTExRkNKNjlSMkFYbFZBcHFuMTB6ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODExOS80RTJEN0EzODUxNDAxMUU5OEQ5ODNCNjFDNEY5QUUwMi9VVDNUQ00xMUZD
SjY5UjJBWGxWQXBxbjEwemsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmTeBRcjgIXTKPzfdDfPn8EQywOgvsndhyWD6itNVLWLFVJMxcYy5CIGMfte/
ez1BUK0m1cK+YFeMGJ3xzKIymhtxuR+KRLE7W23arXhWr6XIV6qvrZPMY1P6gaz9
F9kOjB9L8hNB7oDjt5qWvpW7WWP7ig4a1cUpISlJ/wc76iGOltxVCcYSyedQtkkG
wRbzpCyeqVJHucbfcCUVtSmbARo6A8skMqoSwC6RdHWveGlo8C7w/Y/365tNC4h5
Z5ugQ2D9oTyyNYf/7YZ+E8P/XI91+WaLeWlln+sh07uzyEv2AYGW3L6aBkoRn/uB
y92mpdzBFpdKfRfFkLujmtC1Dg==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:37:25 2026 by rpki-client