Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
File:                     3MvMmJOAkJntArcXgYQ2VBazHhw.mft (raw, json)
Hash identifier:          m3S0GZVh5o4UDiHmVEUf1fc/YLDHKhkLz1iL9UQhHAA=
Subject key identifier:   01:70:66:F0:24:7E:C8:C2:D1:90:7E:BE:3F:A9:27:BA:99:67:F5:14
Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C
Certificate issuer:       /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C
Certificate serial:       0486
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
Manifest number:          047F
Signing time:             Tue 22 Sep 2026 23:41:56 +0000
Manifest this update:     Tue 22 Sep 2026 23:41:56 +0000
Manifest next update:     Tue 29 Sep 2026 23:41:56 +0000
Files and hashes:         1: 3MvMmJOAkJntArcXgYQ2VBazHhw.crl (hash: n90mo9qOT0BIuN1e/hGOFA42z9x5RnZ1RBTKasBceoE=)
                          2: 23F9CE72A41911ECBDBED829C4F9AE02.roa (hash: mNylGvkvHK0PFFdEi5swk1LjlZSlTZkOi0ISkB3icIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl
                          rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1158 (0x486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C
        Validity
            Not Before: Sep 22 23:41:56 2026 GMT
            Not After : Sep 29 23:41:56 2026 GMT
        Subject: CN=6ab31244-72de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:a2:4d:ef:0b:20:33:84:9b:fb:a1:c5:e6:
                    76:22:f6:45:0c:58:24:9d:c5:27:42:85:a3:a0:bc:
                    1e:77:d7:88:3a:6f:0f:19:1e:f3:fa:c1:6f:2a:67:
                    39:ce:63:b3:3a:fd:c4:99:f0:62:b9:fd:a4:4d:b1:
                    f8:86:c9:55:a6:22:eb:fe:71:72:ba:69:e8:17:99:
                    b4:c1:12:cb:1b:3e:c1:68:32:75:b8:ff:d9:4d:51:
                    c7:8f:e1:eb:f0:b6:26:7a:65:21:e0:46:5f:6b:f3:
                    67:34:a2:79:30:bf:df:08:0b:1a:0b:95:4d:fd:ae:
                    4a:af:b5:7f:1e:2f:b1:63:6e:f8:37:b5:e4:ff:b9:
                    3f:3f:a6:69:74:b8:38:9d:73:9c:4e:45:bc:87:8a:
                    d4:82:df:49:86:d9:4f:a2:b1:21:74:67:4d:37:02:
                    5a:ce:8a:a3:50:68:b9:95:52:a6:bf:20:3a:4d:0f:
                    f3:f9:49:b4:5a:89:05:db:7d:f5:c8:42:6e:69:6e:
                    82:42:44:13:fb:3b:a9:66:4c:16:1c:be:26:c3:79:
                    a1:c1:67:8c:2d:1d:87:cc:f3:f8:8d:78:4b:48:5b:
                    b3:1d:fe:81:bc:47:73:ed:6e:11:a5:f8:d6:7c:15:
                    ba:e2:34:9c:40:c0:56:2f:73:d5:f3:96:52:d1:10:
                    ec:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:70:66:F0:24:7E:C8:C2:D1:90:7E:BE:3F:A9:27:BA:99:67:F5:14
            X509v3 Authority Key Identifier:
                keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:18:46:4a:b9:f9:ca:18:dc:9d:bd:a8:29:06:93:49:3c:d9:
         64:e3:f2:99:57:10:ba:ed:ef:59:4a:ad:3f:fa:dc:3c:8d:a6:
         c8:21:98:52:56:08:c8:e5:de:27:a5:1b:74:1c:c8:7b:0d:ad:
         4c:2b:58:e1:31:e9:55:39:41:00:d5:74:40:61:f6:3d:9d:27:
         a9:16:39:71:45:c4:d1:30:e1:26:e9:4f:b6:cf:22:4c:96:f4:
         37:95:31:1f:e0:43:f7:1d:91:14:92:e8:e3:0c:0e:4b:43:b6:
         b1:e3:91:a1:d4:f0:9f:10:8c:c6:34:df:3a:a2:37:80:7d:1d:
         c7:ab:a6:63:8e:6a:7a:b0:1b:66:c2:c5:e7:7f:57:05:69:fc:
         a4:ff:5d:8f:45:fd:ed:29:f6:63:75:c4:bc:bf:2f:f4:00:91:
         4b:61:67:3c:4a:25:e3:61:84:39:22:73:e8:95:a9:f8:ac:c3:
         44:a4:8a:76:9f:6e:a7:00:60:ab:bf:0b:89:89:ca:ed:79:f4:
         e7:f8:37:17:92:74:0c:96:77:82:9a:24:80:5e:87:51:b9:37:
         4c:da:d3:fc:8e:99:8a:ba:fe:c7:3a:44:82:0b:e4:ae:c9:48:
         27:7d:88:d4:c1:50:f4:4f:77:57:66:fb:02:52:de:4c:de:9b:
         91:76:74:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:37:47 2026 by rpki-client