Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
File:                     a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft (raw, json)
Hash identifier:          4XOq8B+H1BxW4jpC4ydKw/iCitKn3zvMzMiSvWfAiYw=
Subject key identifier:   60:2D:2B:A3:E1:35:B1:7B:12:23:FF:34:62:43:76:76:A7:5F:DA:77
Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55
Certificate issuer:       /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55
Certificate serial:       0A48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
Manifest number:          0A3F
Signing time:             Thu 24 Sep 2026 19:39:05 +0000
Manifest this update:     Thu 24 Sep 2026 19:39:05 +0000
Manifest next update:     Thu 01 Oct 2026 19:39:05 +0000
Files and hashes:         1: a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl (hash: KcDvCxnBFpPUzyA0Nfuh++/cohlLgrsj5qagzt0SLeA=)
                          2: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (hash: FGKFmIxlRTKcHWAwWVQZRDo1BFONYcqJI1h8vC0VRSA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl
                          rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2632 (0xa48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DA4A, serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55
        Validity
            Not Before: Sep 24 19:39:05 2026 GMT
            Not After : Oct  1 19:39:05 2026 GMT
        Subject: CN=6ab57c59-c09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:df:73:c6:3b:c8:7c:83:b5:f8:76:74:37:
                    89:b1:be:00:e2:81:20:db:4a:2e:7d:63:43:7b:be:
                    b4:4e:fc:a7:aa:29:19:58:f8:71:fb:66:a7:65:1b:
                    ef:b4:d0:a2:6a:a5:25:71:89:1a:b9:cc:2e:6e:de:
                    5d:fe:c3:96:dc:bc:50:42:15:03:c1:c1:5c:d7:c7:
                    91:b5:58:24:ee:f5:1a:fc:bc:15:17:17:b0:b7:7e:
                    77:eb:a6:f9:66:61:14:bd:a7:fc:9a:d4:26:87:6c:
                    b6:d3:a4:13:f5:18:3e:a0:5f:cb:cc:62:4d:27:4e:
                    49:4a:a9:a8:b7:ad:d3:a5:cb:83:e5:8b:6a:a3:0c:
                    00:89:52:31:ae:02:04:96:ae:1b:ac:9a:ea:a3:4c:
                    ca:e4:54:08:50:5b:be:9a:b4:1f:be:14:a7:e6:9f:
                    a9:08:68:b7:3f:97:18:48:c7:f9:a1:27:3e:41:6e:
                    a8:6a:b6:11:98:a5:f0:7a:07:f6:dd:b7:32:2e:9e:
                    a7:31:48:04:30:33:a8:d9:18:dd:8d:a3:1c:67:48:
                    6f:75:34:8e:3d:ee:95:d6:39:ea:66:ba:c9:0d:cf:
                    81:d5:50:09:84:b0:f9:07:27:3b:6f:d5:d2:97:68:
                    bc:4c:0a:ab:af:f4:16:ef:47:41:a0:1f:2b:07:20:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2D:2B:A3:E1:35:B1:7B:12:23:FF:34:62:43:76:76:A7:5F:DA:77
            X509v3 Authority Key Identifier:
                keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:df:13:13:69:56:57:c4:88:2f:22:63:c8:9e:ed:60:9e:7e:
         cd:19:a0:b1:1b:ff:82:ef:ad:1b:fb:60:7f:8f:c0:42:65:23:
         ef:e5:6d:1b:e0:5e:ca:43:bb:6d:6d:03:3f:b5:a1:ac:96:f6:
         a7:e0:b8:67:29:6a:05:37:85:a2:be:1c:41:85:59:12:48:e7:
         80:fd:dd:38:b8:ee:bb:d4:f4:4e:74:ae:a8:05:20:57:9f:10:
         69:2b:e2:64:1e:f7:ef:e7:14:38:0a:5d:4a:37:d1:34:8d:d2:
         6f:a0:bb:6d:6d:3b:fb:b2:1c:54:01:f5:2b:4b:6a:0d:83:c7:
         3f:dd:f0:d6:fd:7d:d5:4a:8d:dd:eb:f7:0f:1d:38:a5:b5:ec:
         a5:26:e7:ed:7f:60:b3:d0:3f:ac:00:ad:a3:89:90:ad:94:c7:
         67:6c:5e:f2:61:f4:f8:b8:c4:9d:64:61:87:de:8f:7f:e3:60:
         30:9a:af:ae:29:de:cb:af:78:6e:73:dd:5a:3b:c9:59:ac:7f:
         de:5f:93:36:b9:97:7c:48:a4:1b:84:88:df:ce:52:79:3f:e2:
         0f:2a:1f:8c:1e:22:2c:c2:a7:d2:0a:3b:08:1a:73:7c:96:d6:
         ec:d8:35:c6:68:45:91:d1:9b:35:c1:92:34:9b:bd:ec:7d:dc:
         8e:83:29:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RBNEExMTAvBgNVBAUTKDZCNzMyREYwODg0QUFENjZBNUQ1QTFFRkU5QTYwRENE
RTNCOUJFNTUwHhcNMjYwOTI0MTkzOTA1WhcNMjYxMDAxMTkzOTA1WjAYMRYwFAYD
VQQDEw02YWI1N2M1OS1jMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3FHfc8Y7yHyDtfh2dDeJsb4A4oEg20oufWNDe760TvynqikZWPhx+2anZRvv
tNCiaqUlcYkaucwubt5d/sOW3LxQQhUDwcFc18eRtVgk7vUa/LwVFxewt35366b5
ZmEUvaf8mtQmh2y206QT9Rg+oF/LzGJNJ05JSqmot63TpcuD5YtqowwAiVIxrgIE
lq4brJrqo0zK5FQIUFu+mrQfvhSn5p+pCGi3P5cYSMf5oSc+QW6oarYRmKXwegf2
3bcyLp6nMUgEMDOo2RjdjaMcZ0hvdTSOPe6V1jnqZrrJDc+B1VAJhLD5Byc7b9XS
l2i8TAqrr/QW70dBoB8rByDfKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGAtK6Ph
NbF7EiP/NGJDdnanX9p3MB8GA1UdIwQYMBaAFGtzLfCISq1mpdWh7+mmDc3jub5V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE0QS8xQkE0QTZGMjlB
ODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JXYWwxYUh2NmFZTnplTzV2
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EzTXQ4SWhLcldhbDFhSHY2YVlOemVPNXZsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REE0QS8xQkE0QTZGMjlBODkxMUVBOEVDNTQyNjRDNEY5QUUwMi9hM010OEloS3JX
YWwxYUh2NmFZTnplTzV2bFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbN8TE2lWV8SILyJjyJ7tYJ5+zRmgsRv/gu+tG/tgf4/AQmUj7+VtG+BeykO7
bW0DP7WhrJb2p+C4ZylqBTeFor4cQYVZEkjngP3dOLjuu9T0TnSuqAUgV58QaSvi
ZB737+cUOApdSjfRNI3Sb6C7bW07+7IcVAH1K0tqDYPHP93w1v191UqN3ev3Dx04
pbXspSbn7X9gs9A/rACto4mQrZTHZ2xe8mH0+LjEnWRhh96Pf+NgMJqvriney694
bnPdWjvJWax/3l+TNrmXfEikG4SI385SeT/iDyofjB4iLMKn0go7CBpzfJbW7Ng1
xmhFkdGbNcGSNJu97H3cjoMpiQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:55:56 2026 by rpki-client