Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
File:                     3dU_UiXtL42o0J56rZgsgLbOrag.mft (raw, json)
Hash identifier:          RNEQakQYtqcpUT/2RpEQpFMiLIca2zROrvuhk9/qWaI=
Subject key identifier:   D6:61:68:AA:CD:16:90:E3:00:A9:8D:64:81:94:F3:02:0D:01:1E:F7
Authority key identifier: DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8
Certificate issuer:       /CN=A91658EF/serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
Certificate serial:       08A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
Manifest number:          2E90
Signing time:             Fri 02 Oct 2026 16:51:19 +0000
Manifest this update:     Fri 02 Oct 2026 16:51:19 +0000
Manifest next update:     Fri 09 Oct 2026 16:51:19 +0000
Files and hashes:         1: 3dU_UiXtL42o0J56rZgsgLbOrag.crl (hash: QchGFX+SB7rl2pEHJQZ5GakK3R3hx83iY6vpKBzkwVE=)
                          2: CD0ACC3AD9CE11EFA393BC6AC4F9AE02.roa (hash: yofMdWFa6G+5IWdYK6Mk2y69/fwGAZwVAxMNAxb1xeg=)
                          3: 10C418C4D40011F083CDC127C4F9AE02.roa (hash: trEW3l3BfddlaJ5NOXeTcUWfTHS4ZdqJFRp+g2C/O5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl
                          rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 16:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2214 (0x8a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91658EF, serialNumber=DDD53F5225ED2F8DA8D09E7AAD982C80B6CEADA8
        Validity
            Not Before: Oct  2 16:51:19 2026 GMT
            Not After : Oct  9 16:51:19 2026 GMT
        Subject: CN=6abfe107-5a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:c9:db:1a:d0:5e:d0:16:71:3c:7e:f5:3c:
                    2a:fe:1d:ee:79:4e:c9:09:92:44:c9:ba:49:ea:22:
                    7d:4e:78:fe:a6:8e:c6:4e:67:d4:be:26:78:74:cf:
                    cb:7e:8d:3d:24:ad:8c:fc:a5:61:92:3a:e7:8e:0f:
                    9a:89:8d:05:50:83:a4:be:09:a3:3e:17:94:51:e5:
                    73:b3:37:ce:75:7f:6a:47:c2:31:23:be:a4:fd:fa:
                    f5:9a:31:c4:84:86:aa:05:02:31:46:42:52:16:51:
                    cb:6f:da:81:d2:87:08:ea:73:4a:e6:b1:cb:be:7b:
                    15:42:8e:73:45:ce:e6:00:c9:4d:9d:f5:84:7a:fe:
                    3b:6b:a0:95:2e:9d:84:ad:b0:59:92:8b:14:5a:a7:
                    d0:ec:30:4e:5b:a0:b1:24:43:93:6c:d0:e1:f1:24:
                    e1:20:13:9f:3f:29:b0:14:d5:6f:a2:e8:d2:f1:c0:
                    8f:b2:3a:b7:96:6f:c3:b0:58:bc:fb:97:dd:e7:01:
                    a9:63:52:b5:61:f9:61:a5:35:93:7a:1d:84:3a:a7:
                    75:59:d7:86:d3:dd:dd:b0:76:c2:40:10:c9:36:82:
                    01:88:dc:3f:1b:fb:6a:5d:18:31:1e:20:e4:ef:30:
                    de:d6:17:f4:11:36:fe:cd:88:02:5f:8e:82:4c:e9:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:61:68:AA:CD:16:90:E3:00:A9:8D:64:81:94:F3:02:0D:01:1E:F7
            X509v3 Authority Key Identifier:
                keyid:DD:D5:3F:52:25:ED:2F:8D:A8:D0:9E:7A:AD:98:2C:80:B6:CE:AD:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dU_UiXtL42o0J56rZgsgLbOrag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/3dU_UiXtL42o0J56rZgsgLbOrag.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9d:35:81:e7:ce:94:d4:04:e5:c3:6f:0e:9c:e1:52:12:fc:
         8a:67:5b:55:27:ab:b7:c1:1f:0f:d2:04:93:33:c0:a7:2b:c3:
         7f:0c:24:03:03:cd:a6:19:7b:c3:1e:ae:89:77:bf:d7:08:bf:
         45:59:71:0c:79:eb:51:5a:bc:e5:05:34:52:de:40:f2:02:3f:
         94:2b:52:55:24:18:fd:f1:88:f7:36:07:e1:11:14:3a:07:37:
         ae:c5:2e:7e:09:c6:4d:03:69:2f:27:e8:2e:41:02:3a:2d:d0:
         01:42:59:97:66:23:96:24:59:82:f2:a1:27:7b:5b:9b:92:be:
         8a:29:9f:3d:e9:85:cd:3e:f2:f3:da:37:3b:39:e5:db:fa:53:
         b1:f3:c7:27:28:16:2b:8e:55:17:9e:8b:33:72:b2:11:70:bb:
         ab:78:1f:38:36:34:95:72:10:bf:7b:89:6c:70:5e:02:1b:5e:
         38:b0:e4:9a:62:e0:48:e2:5c:ec:88:62:b2:f4:08:3d:f2:dc:
         04:2b:94:b3:6d:d9:36:e1:e3:fa:68:52:0e:32:5f:35:a3:4f:
         b6:8e:7c:15:be:5c:23:cc:2a:63:3a:96:35:eb:27:db:22:eb:
         81:51:48:b4:27:46:cb:b1:3d:64:10:3d:35:6b:a0:a6:80:4b:
         ff:e9:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:14:30 2026 by rpki-client