Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
File:                     M3WpYTTFczGvVN1xTtNj2rMba9A.mft (raw, json)
Hash identifier:          2Cq42QU95vJ1L4LEI/gC5K8/29rHP915Ggffe7q5jRs=
Subject key identifier:   0B:0E:02:5C:D5:20:AD:23:6E:1D:76:31:C2:23:43:8D:10:6B:7B:D1
Authority key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
Certificate issuer:       /CN=A9115620/serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Certificate serial:       018D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
Manifest number:          0185
Signing time:             Sat 03 Oct 2026 05:13:03 +0000
Manifest this update:     Sat 03 Oct 2026 05:13:02 +0000
Manifest next update:     Sat 10 Oct 2026 05:13:02 +0000
Files and hashes:         1: M3WpYTTFczGvVN1xTtNj2rMba9A.crl (hash: X03kqreZm5KQ+LSSzwqfK5W5bSTxvTJVu2j4SERpRRQ=)
                          2: 8334E4446BA911EFADEBED84C4F9AE02.roa (hash: SFRW6ZgLtC608yEa/dd47ZCBFLjksB/GM54AXvteWIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
                          rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
        Validity
            Not Before: Oct  3 05:13:02 2026 GMT
            Not After : Oct 10 05:13:02 2026 GMT
        Subject: CN=6ac08edf-8d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:82:89:a5:37:2c:ca:92:63:64:d4:09:61:98:
                    f7:de:3f:df:26:e9:9a:6d:33:72:42:69:f4:f1:d4:
                    b1:86:ec:96:50:e4:c6:65:b3:50:0f:4a:c5:90:0f:
                    ce:86:4d:36:73:d5:f8:d1:61:92:89:1e:ea:b8:27:
                    76:b1:75:8a:9d:7c:98:04:d8:ac:49:e9:20:fb:eb:
                    4c:df:07:ed:c8:e2:51:90:a0:9c:8d:f3:09:39:79:
                    44:1f:cb:ec:6b:d8:6d:6b:9a:d7:49:75:44:31:d9:
                    96:46:28:81:56:ec:74:0a:8a:59:47:de:11:fc:72:
                    f8:6b:89:03:f3:dc:77:54:15:21:76:25:52:a5:fe:
                    3a:8e:a8:7f:0e:b6:e8:5f:a7:bc:34:10:43:89:98:
                    cf:70:da:6f:99:d3:52:9d:96:98:85:a7:ea:d5:8d:
                    48:81:9b:b0:11:b0:b5:ab:30:c9:c4:d1:b4:80:2a:
                    1e:02:54:7d:0c:a9:90:44:df:d8:a3:51:e9:7b:da:
                    67:14:97:e7:ff:71:58:cc:86:43:96:57:75:0b:7d:
                    be:46:98:e3:3b:bc:e8:c6:cc:85:4f:1b:e2:eb:64:
                    a4:97:57:ce:9a:f8:e1:21:0a:65:9e:e5:8e:45:02:
                    1f:4e:0a:a3:e5:1f:d4:cb:a6:2a:31:9e:7d:76:d4:
                    08:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0E:02:5C:D5:20:AD:23:6E:1D:76:31:C2:23:43:8D:10:6B:7B:D1
            X509v3 Authority Key Identifier:
                keyid:33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:50:c0:e8:d0:3b:59:ed:97:2e:5f:58:07:2e:df:75:25:d6:
         21:69:ba:1e:56:da:1b:d8:b6:e6:57:34:4c:6b:c4:23:97:9b:
         bc:4d:b3:98:f5:fa:c5:98:60:17:74:2f:ae:11:90:fb:46:64:
         a4:28:21:26:7c:13:b7:e3:bf:96:51:d7:08:30:bd:ce:30:61:
         06:20:97:5d:79:15:35:dc:e3:fb:11:b0:52:fc:8d:3d:e9:95:
         0c:72:bd:d0:ce:7c:e7:b8:6c:2c:5f:ac:b9:6b:53:d2:7c:76:
         a2:f6:96:d3:59:bd:6b:0e:ce:f4:b6:6e:6b:24:2a:82:b3:63:
         33:30:59:2b:c1:90:20:c0:ae:2f:a8:9e:0f:07:51:12:d1:4f:
         2a:0a:8a:de:0f:d5:44:9e:b6:b8:fb:36:4f:94:7d:33:95:49:
         9c:16:57:df:78:89:d8:eb:f7:1c:62:64:bd:fc:06:7b:05:6a:
         79:19:c8:aa:b8:87:fa:e7:d2:a7:0c:7d:c0:d6:10:97:bc:a8:
         6b:2d:04:bf:ec:28:f9:a5:1e:18:82:48:87:63:8a:65:c9:b9:
         84:fb:3f:42:ab:70:f2:f7:81:ac:f0:f2:4f:ec:61:53:58:64:
         6d:70:74:be:ea:b2:c3:7d:47:c7:96:7d:84:31:14:35:c9:89:
         4b:50:29:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:27:33 2026 by rpki-client