Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
File:                     3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json)
Hash identifier:          6ii0LIlTJmR3sQMIwtWwVMxLHMFe2+2XdZZGZs9QffQ=
Subject key identifier:   9A:8C:12:29:C1:13:5A:C1:10:1C:33:2B:91:4F:67:3C:6C:0A:60:84
Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
Certificate issuer:       /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
Manifest number:          0171
Signing time:             Wed 23 Sep 2026 04:37:06 +0000
Manifest this update:     Wed 23 Sep 2026 04:37:05 +0000
Manifest next update:     Wed 30 Sep 2026 04:37:05 +0000
Files and hashes:         1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: OuXR7HaZL8zjuuUI3QLHP4zU+3gDpf+padhreX7RpgU=)
                          2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: QzecNRiadvNS3uXz4puDDg8aeFgkZFgzMCT4KbxjYQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
                          rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
        Validity
            Not Before: Sep 23 04:37:05 2026 GMT
            Not After : Sep 30 04:37:05 2026 GMT
        Subject: CN=6ab35771-7e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:48:4b:6f:cd:70:97:76:e8:7e:78:7b:7d:46:
                    7b:1d:51:4a:e2:ef:0d:a8:29:16:7b:9f:68:fe:20:
                    03:cd:f8:db:1b:c9:59:24:69:cf:58:41:ad:40:61:
                    97:04:d7:ef:87:d9:3c:7a:69:00:ca:b4:53:79:2a:
                    00:48:34:8c:c3:61:69:74:4b:0f:74:d0:db:67:23:
                    95:28:be:58:9f:ee:41:d7:08:b8:80:33:e4:8b:23:
                    0a:8f:09:c1:9b:e4:db:1c:03:30:a1:3a:4b:c4:c2:
                    49:0f:5f:86:4b:0e:61:d5:10:6d:dc:a1:30:84:e6:
                    c0:04:b8:a2:14:7c:66:7e:e6:5b:94:48:1e:76:09:
                    dd:15:83:3a:4b:96:0a:85:2a:1b:33:a2:30:ac:6b:
                    1e:3b:cd:ba:93:1f:8c:fb:61:7d:23:e1:e5:04:0a:
                    e8:fe:eb:fa:c3:ff:76:a5:f4:34:4d:f4:14:d2:93:
                    0e:1c:e3:ee:6e:20:09:43:84:44:3f:ac:db:06:fb:
                    38:79:f3:7e:db:f9:56:19:c1:d4:9a:43:b1:c9:2e:
                    57:e7:3f:ba:cd:a8:b7:87:62:0d:8c:18:d3:9c:50:
                    db:39:21:8c:49:27:45:c8:a3:19:22:39:4e:f2:b2:
                    07:c5:e5:a1:29:b7:e5:1f:51:6c:89:04:52:76:06:
                    6b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8C:12:29:C1:13:5A:C1:10:1C:33:2B:91:4F:67:3C:6C:0A:60:84
            X509v3 Authority Key Identifier:
                keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:5e:eb:78:17:b6:ba:82:b5:81:a9:f4:ba:14:02:48:a6:c9:
         0e:12:cb:3e:ce:38:d5:21:13:fe:2c:22:49:34:55:84:d2:d5:
         7d:6c:81:d8:8a:5f:2e:6e:67:b1:6b:59:ca:e4:1c:02:60:49:
         1c:34:a0:a1:37:e8:07:d0:30:b0:ff:e7:7d:ea:2c:89:d3:94:
         dc:4f:46:44:2d:52:61:dc:4a:eb:22:14:d5:a3:1a:af:07:7b:
         92:f5:6f:e8:3f:38:58:de:b3:1b:17:19:bd:4c:02:b2:3f:5a:
         a9:71:0e:26:9e:e8:5b:6d:d9:9a:cb:6f:5f:0c:de:b7:65:8d:
         cf:9f:63:b8:e2:8c:3c:67:6e:e4:85:f3:5f:22:49:e2:36:b2:
         15:4d:dd:de:7a:fe:dd:34:10:29:dc:55:59:1e:eb:36:2d:43:
         e2:ce:a2:c6:8f:4c:8c:11:3c:25:93:4d:8e:9e:5a:dc:e6:9f:
         4e:5d:63:03:2e:91:f3:fe:81:9e:af:a4:31:a6:fe:03:49:cd:
         b6:ec:fb:72:54:71:ef:94:ef:b5:14:af:11:ce:93:0d:b4:0e:
         38:15:81:b6:6a:25:29:2e:c6:23:93:9c:0a:6b:7a:04:5a:c6:
         6d:2e:72:bc:44:32:a5:51:e4:87:06:d0:eb:02:9a:f2:27:df:
         68:e9:0b:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY2REMxMTAvBgNVBAUTKERENTc0NjBGMEMxMkJFMDU0NjEzQTJGNDI5NjdCMDdE
QTU2ODdCRjAwHhcNMjYwOTIzMDQzNzA1WhcNMjYwOTMwMDQzNzA1WjAYMRYwFAYD
VQQDEw02YWIzNTc3MS03ZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApkhLb81wl3bofnh7fUZ7HVFK4u8NqCkWe59o/iADzfjbG8lZJGnPWEGtQGGX
BNfvh9k8emkAyrRTeSoASDSMw2FpdEsPdNDbZyOVKL5Yn+5B1wi4gDPkiyMKjwnB
m+TbHAMwoTpLxMJJD1+GSw5h1RBt3KEwhObABLiiFHxmfuZblEgedgndFYM6S5YK
hSobM6IwrGseO826kx+M+2F9I+HlBAro/uv6w/92pfQ0TfQU0pMOHOPubiAJQ4RE
P6zbBvs4efN+2/lWGcHUmkOxyS5X5z+6zai3h2INjBjTnFDbOSGMSSdFyKMZIjlO
8rIHxeWhKbflH1FsiQRSdgZrnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqMEinB
E1rBEBwzK5FPZzxsCmCEMB8GA1UdIwQYMBaAFN1XRg8MEr4FRhOi9ClnsH2laHvw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy81QTE4MkM3Qzg1
MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3ZnVkdFNkwwS1dld2ZhVm9l
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2VfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjZEQy81QTE4MkM3Qzg1MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3Zn
VkdFNkwwS1dld2ZhVm9lX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApF7reBe2uoK1gan0uhQCSKbJDhLLPs441SET/iwiSTRVhNLVfWyB2IpfLm5n
sWtZyuQcAmBJHDSgoTfoB9AwsP/nfeosidOU3E9GRC1SYdxK6yIU1aMarwd7kvVv
6D84WN6zGxcZvUwCsj9aqXEOJp7oW23ZmstvXwzet2WNz59juOKMPGdu5IXzXyJJ
4jayFU3d3nr+3TQQKdxVWR7rNi1D4s6ixo9MjBE8JZNNjp5a3OafTl1jAy6R8/6B
nq+kMab+A0nNtuz7clRx75TvtRSvEc6TDbQOOBWBtmolKS7GI5OcCmt6BFrGbS5y
vEQypVHkhwbQ6wKa8iffaOkLGQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:25:16 2026 by rpki-client