Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
File:                     3n3GT5n2JAYkuhPSFUlETEJLVG8.mft (raw, json)
Hash identifier:          jBy0ZszDm64N5WhtKvy6g1yeoSfAlms9Y8WwHTJ1YZc=
Subject key identifier:   D7:D5:FD:4C:54:62:1D:BB:0E:38:29:C7:B9:84:44:8E:93:2E:86:F7
Authority key identifier: DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F
Certificate issuer:       /CN=A91567EF/serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
Manifest number:          7E
Signing time:             Sat 03 Oct 2026 08:34:39 +0000
Manifest this update:     Sat 03 Oct 2026 08:34:39 +0000
Manifest next update:     Sat 10 Oct 2026 08:34:39 +0000
Files and hashes:         1: 3n3GT5n2JAYkuhPSFUlETEJLVG8.crl (hash: BYbM8R5ggXt4hCA+XHOwHLzeegiHjiFBgnBQDsgIg1k=)
                          2: 616D1BAC6B9C11F1A5AE9DAA6D47A888.roa (hash: Q8pRs/zL4LH+ArnuogEwPHVYr3czyBo1S7DW7cvjosM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl
                          rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91567EF, serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F
        Validity
            Not Before: Oct  3 08:34:39 2026 GMT
            Not After : Oct 10 08:34:39 2026 GMT
        Subject: CN=6ac0be1f-391c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:0b:cc:8e:48:2b:3e:04:06:fa:c6:09:59:
                    9e:e9:b1:e7:7f:88:22:55:fd:a0:0f:69:66:e8:d7:
                    56:59:95:67:03:bf:db:a0:39:84:b1:c5:49:c3:bd:
                    5e:92:32:e9:9d:31:82:a8:dd:3f:c4:69:07:6a:b0:
                    56:d7:d6:93:05:79:8d:f6:62:95:7c:9c:5e:fa:cd:
                    21:70:5a:e3:48:51:e3:48:46:a4:ef:c0:c8:52:e8:
                    c1:d0:f2:f1:52:30:de:77:01:c5:38:8f:e6:52:66:
                    52:cb:1a:d8:6a:37:27:4f:26:21:3f:3b:c9:6e:5c:
                    fc:24:a7:4a:7c:06:21:cc:51:27:2f:e7:d2:7f:9d:
                    b0:1d:7b:41:72:18:76:2a:55:2a:23:af:2a:0e:fb:
                    81:e8:1e:a3:60:1d:6d:76:91:8e:be:c6:81:2a:5a:
                    25:5b:b1:e7:61:c0:5b:da:7a:5f:4d:08:d6:d5:12:
                    da:f6:ae:85:9c:3b:ae:52:8b:27:db:9b:a1:b9:02:
                    87:d2:6a:c5:fe:28:c7:6f:30:0c:57:95:57:17:0d:
                    3c:e2:76:74:18:34:65:38:ac:5f:8b:53:41:3e:37:
                    12:1a:cc:6f:0a:69:a2:56:a5:6e:f2:6c:83:a8:35:
                    a9:e2:62:3b:a0:78:59:f0:cc:49:d9:c0:56:52:82:
                    08:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D5:FD:4C:54:62:1D:BB:0E:38:29:C7:B9:84:44:8E:93:2E:86:F7
            X509v3 Authority Key Identifier:
                keyid:DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1a:75:5f:ba:f2:24:66:72:30:0a:d1:bc:a5:05:45:c6:42:
         08:72:51:dc:a6:2c:79:9f:8f:e5:07:bc:e6:5f:38:76:4c:b2:
         79:b4:af:5e:6f:a5:b9:ca:74:34:f7:f0:8a:eb:64:0b:d8:62:
         d8:e4:c7:2f:62:f4:14:b8:32:78:96:d3:41:68:2f:2a:e1:4c:
         a7:18:1f:95:42:fc:57:b5:eb:c4:8d:57:5e:86:5a:3e:d3:f4:
         82:d6:52:01:6e:95:e1:eb:6b:c6:77:7b:6e:dd:e0:36:02:7e:
         96:1c:ba:48:ed:bc:f1:d8:41:d6:ef:83:3e:95:10:74:33:98:
         4b:ca:2d:1f:24:2d:f8:3f:0e:65:9c:84:0e:f5:12:ce:2b:23:
         aa:0a:25:c3:54:04:6b:77:8e:8c:a8:09:10:10:2b:b8:1c:54:
         d2:0a:8a:f5:6e:35:ec:51:5f:46:bb:72:06:4f:14:78:4b:3f:
         93:24:58:f7:17:b5:e3:26:f1:bc:db:c9:b1:a3:d8:68:da:bb:
         49:91:d2:7f:d3:50:9c:e3:d5:69:3d:32:ff:8c:e7:3a:1d:e0:
         7a:5e:58:83:a5:c7:d8:73:5a:85:71:1f:10:07:13:66:d9:c2:
         87:67:bd:a2:63:fb:0c:84:cb:b0:9a:03:2c:1b:ad:ba:cb:b4:
         1d:79:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:06:23 2026 by rpki-client