Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
File:                     3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json)
Hash identifier:          2MGfq3EM6RroyK67mL6z6U0z5sbEKqYH52nvphB0Enc=
Subject key identifier:   AC:79:E4:62:CF:FE:90:BE:85:80:36:9A:54:E7:FF:4B:A1:96:45:62
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Certificate issuer:       /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
Manifest number:          0158
Signing time:             Wed 23 Sep 2026 05:17:48 +0000
Manifest this update:     Wed 23 Sep 2026 05:17:47 +0000
Manifest next update:     Wed 30 Sep 2026 05:17:47 +0000
Files and hashes:         1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: 3NTilC9lgt7i1cGyRAcv19smawXSOoFWtYF0jpxycBU=)
                          2: 6DDF503008E611F1A622C6722C3D8C67.roa (hash: rDAKA9Yax4eCoXJX6ldW5NMo2xVyobP0qNrUYPYQF3s=)
                          3: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (hash: 2okYUQLpXLjFASnkLnBoJ7EV0CsOknY2IZxTrGpUiiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
                          rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
        Validity
            Not Before: Sep 23 05:17:47 2026 GMT
            Not After : Sep 30 05:17:47 2026 GMT
        Subject: CN=6ab360fc-3b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:18:33:f9:98:79:d4:70:82:a5:b8:8b:35:
                    d2:1a:c5:23:76:d0:06:c4:f5:6d:b5:ca:d8:d5:fd:
                    f8:b5:11:47:f8:eb:9c:1c:6b:a4:df:17:f1:f3:b9:
                    50:8b:97:ae:b6:c7:9d:38:4a:8b:b1:c3:34:29:ec:
                    d2:be:67:1c:28:c0:cf:6e:a3:48:bf:b1:c8:64:36:
                    47:22:73:14:dc:54:f3:e8:9e:15:7e:69:ab:07:d1:
                    b9:fa:38:05:7b:d7:6c:e2:29:2d:36:41:0d:e1:f0:
                    5d:36:8b:d0:fc:8f:b0:86:9f:6e:d1:11:1c:69:3c:
                    ab:4c:33:0d:5c:95:cb:98:de:1d:21:da:dd:0d:a8:
                    cd:fc:1a:45:7c:e0:d7:ce:13:a7:81:5c:bb:e4:e2:
                    31:03:c3:e3:4b:d7:ab:19:0e:be:b9:fa:86:d8:7b:
                    63:cb:df:28:dc:3d:eb:0d:a4:a7:21:c3:ec:02:21:
                    6e:e1:c3:92:b7:9e:1e:62:85:66:45:1f:97:cf:98:
                    a4:e4:5a:5f:b7:d2:13:64:fe:f4:c3:69:37:da:5a:
                    66:08:aa:c8:af:cd:4e:0b:0d:38:20:b8:ef:ac:ed:
                    ef:00:cc:c3:8d:59:ae:85:d8:cd:65:f9:e3:c3:eb:
                    15:ac:be:6e:3e:c3:f6:2a:2f:35:0d:c9:49:dd:73:
                    68:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:79:E4:62:CF:FE:90:BE:85:80:36:9A:54:E7:FF:4B:A1:96:45:62
            X509v3 Authority Key Identifier:
                keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:28:34:7d:fb:6c:96:7e:19:4b:75:9a:71:a3:93:e6:97:1f:
         80:4f:49:b1:b5:63:9a:36:f3:8d:f9:b2:03:17:9a:56:77:27:
         26:81:b5:4e:51:63:64:9e:d6:3b:68:5c:8a:e9:d5:cf:e9:dc:
         b0:ef:77:8e:28:9a:d0:51:e5:48:83:5a:09:67:7a:77:93:a9:
         47:14:1c:51:67:99:6a:e5:a4:21:7e:07:bd:df:a3:63:27:8f:
         61:78:ce:94:ef:57:b4:b5:4a:ca:90:88:04:f6:a0:c8:1a:75:
         b5:aa:58:fa:9b:1a:b1:d8:4b:07:aa:a9:8d:94:84:a1:1b:c5:
         67:8f:12:dc:b1:27:03:6e:50:32:c9:00:08:8d:46:54:8d:4f:
         d0:f3:19:9e:e9:86:f8:3e:c9:ad:95:42:0a:08:9c:5d:0a:1f:
         85:84:cd:1e:79:88:49:85:0a:36:75:8a:a5:7d:af:1c:c3:3e:
         e6:79:10:53:ee:ad:dd:4e:aa:55:93:5c:ce:84:5d:e5:eb:4f:
         9a:ab:56:0d:9f:5f:af:2a:22:7e:af:aa:f4:ac:cf:29:d4:c7:
         99:a7:19:26:eb:46:1e:34:d1:ef:e9:62:21:34:25:25:34:6d:
         d9:f6:3d:ad:9c:aa:b2:e5:5b:55:29:37:76:ef:5e:48:20:dd:
         7c:6a:b8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:49:39 2026 by rpki-client