Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft
File:                     3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft (raw, json)
Hash identifier:          hzXzrP2GB0+veza+UAfXh9MyBNj14carRBYxp6J7NDU=
Subject key identifier:   8D:B8:04:E6:79:15:21:A1:04:35:21:FB:48:2E:54:21:C9:DD:A7:CF
Authority key identifier: DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66
Certificate issuer:       /CN=A911C8B7/serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266
Certificate serial:       0CF5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft
Manifest number:          0CE6
Signing time:             Thu 24 Sep 2026 18:24:19 +0000
Manifest this update:     Thu 24 Sep 2026 18:24:18 +0000
Manifest next update:     Thu 01 Oct 2026 18:24:18 +0000
Files and hashes:         1: 3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl (hash: zO7YqWSKEVERXM2FzdAGOC1XBpxc+HNEI8wL0NizeUw=)
                          2: F66D3E4C175911EA9D8EF44FC4F9AE02.roa (hash: jtNA4DSxailzGixhCLBv/XtkHLhwf6qcSCB3BjEuN/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl
                          rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3317 (0xcf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C8B7, serialNumber=DC032C5DD042ED3E8DE2A710FB26818A95734266
        Validity
            Not Before: Sep 24 18:24:18 2026 GMT
            Not After : Oct  1 18:24:18 2026 GMT
        Subject: CN=6ab56ad3-6726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:a7:c0:57:4f:d7:40:d2:fb:65:d1:26:8d:
                    b4:55:5b:7c:2d:51:d6:d3:68:a6:1a:ad:a7:c5:0e:
                    69:d4:5b:23:96:2f:e9:d8:0b:76:84:4a:0d:8c:a5:
                    09:86:18:81:9d:d0:dc:8a:f0:07:59:82:ce:cb:0b:
                    5a:9f:84:6a:19:9e:ab:e4:4b:f3:c6:79:a2:9b:bf:
                    03:c6:74:41:b8:b5:1e:a7:5b:63:75:76:e7:88:3c:
                    2c:66:e5:0b:e9:f8:b2:6b:cb:59:33:7e:0f:ea:0b:
                    45:ca:c9:a6:64:8f:58:bb:cd:83:35:a9:c7:46:ed:
                    24:b6:a2:74:24:39:3b:49:e2:3f:88:b7:61:e9:fc:
                    fe:c8:d4:e7:81:1d:d0:95:b3:c5:88:4e:0d:44:46:
                    36:b7:46:29:f8:c9:bf:bd:f9:7a:8a:50:02:02:27:
                    f9:e2:a3:06:32:b7:68:67:d5:4d:35:06:2d:f6:f7:
                    ed:51:b7:4e:1d:79:e1:21:af:f7:7b:ba:f8:d4:5c:
                    0a:ff:c7:74:80:36:cc:64:3a:4c:e5:99:da:1a:e2:
                    ab:5f:91:aa:af:e8:44:01:cb:6a:d4:57:12:e5:c8:
                    fa:97:df:a8:a3:f0:68:59:26:98:e2:4d:d2:45:8a:
                    98:cc:fd:b9:03:e0:f1:a8:bc:6d:06:d9:de:38:10:
                    50:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B8:04:E6:79:15:21:A1:04:35:21:FB:48:2E:54:21:C9:DD:A7:CF
            X509v3 Authority Key Identifier:
                keyid:DC:03:2C:5D:D0:42:ED:3E:8D:E2:A7:10:FB:26:81:8A:95:73:42:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3AMsXdBC7T6N4qcQ-yaBipVzQmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C8B7/669B4552175911EA8B4A804FC4F9AE02/3AMsXdBC7T6N4qcQ-yaBipVzQmY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:44:b3:cf:7f:cd:e4:9a:e9:29:5d:88:b9:67:56:89:1e:a4:
         01:b2:29:f4:90:ab:71:fb:10:70:88:7f:b1:86:17:0f:a8:1a:
         18:fe:2e:7b:16:d7:99:5a:8b:71:0c:2d:b2:f4:96:bc:38:25:
         0b:2f:cd:c2:67:27:84:7e:42:6c:2c:be:6c:95:30:4e:9c:3f:
         e7:33:9d:00:31:45:3d:a6:7c:15:29:58:29:36:4f:35:54:94:
         6d:c1:72:8d:fa:41:35:f0:65:89:0a:52:5f:43:bf:9c:73:39:
         0b:34:6a:cc:a2:26:43:6c:ec:44:f3:a6:8b:27:5f:67:ef:f2:
         09:9d:a0:89:4c:21:88:ba:27:33:37:c1:06:84:57:9b:12:c2:
         87:4f:08:a5:05:3a:97:9a:b6:ac:66:40:40:3c:52:86:c0:f5:
         19:9a:3a:05:19:e7:1c:fa:ef:a1:7d:2c:1c:aa:7b:81:d6:7b:
         07:62:43:2e:99:f6:dc:63:13:b9:57:3a:6e:2a:65:cd:80:ce:
         75:21:ed:60:56:5c:ad:98:98:cb:2e:59:bd:72:ab:1b:53:b4:
         ff:8f:f2:d2:7a:2c:b3:79:11:2f:a7:9a:b1:9b:8c:17:de:d8:
         06:6c:35:1e:d9:b8:b1:87:60:52:09:45:48:a8:2f:1c:c9:73:
         a4:ae:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:01:39 2026 by rpki-client