Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
File:                     3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json)
Hash identifier:          Zuwf6hptPb6r3FdfFpJyR1ZMtGURsNs0ShcDh1cOsOU=
Subject key identifier:   3C:CC:52:48:EC:35:DD:C6:21:92:B1:C5:57:B0:BF:0C:18:A5:FF:07
Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA
Certificate issuer:       /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
Certificate serial:       0304
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
Manifest number:          02F3
Signing time:             Tue 29 Sep 2026 01:19:27 +0000
Manifest this update:     Tue 29 Sep 2026 01:19:26 +0000
Manifest next update:     Tue 06 Oct 2026 01:19:26 +0000
Files and hashes:         1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: GDNyjHND+Zh0XIRcbi4EREqF/s6eqj1eatxviVtTqRk=)
                          2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: BAOBkKZtpbq/G6PoYc426BCsunY7XqqvxMwNsb4LUyU=)
                          3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: VOHh+ssncP1FDRjkZmMf0XUMa05f8S3klU4wKyghAMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl
                          rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 01:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772 (0x304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
        Validity
            Not Before: Sep 29 01:19:26 2026 GMT
            Not After : Oct  6 01:19:26 2026 GMT
        Subject: CN=6abb121f-beab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:a2:ee:cb:ca:61:4c:3d:cd:ec:97:26:7d:
                    e0:94:13:96:ce:b6:25:e2:94:3d:90:20:de:15:9a:
                    cb:36:68:7e:20:8e:30:27:73:67:46:a3:75:00:d8:
                    42:74:e9:82:6d:a2:c7:c4:4e:c7:3b:56:da:b4:d3:
                    82:5a:f3:2d:0d:be:ec:38:d2:d8:75:27:8e:f9:74:
                    37:11:6f:de:8e:64:54:ee:34:87:40:bc:f0:23:d4:
                    b9:9e:b6:2b:9e:36:ed:a1:5c:0b:a1:9e:76:be:9d:
                    28:e7:49:dc:82:1c:4c:a2:78:b6:42:bb:0b:7f:4d:
                    5d:e9:04:13:27:79:70:fa:bd:ac:e8:52:7d:5d:83:
                    7b:65:0e:6a:be:54:66:f6:bf:b2:2d:c4:80:aa:bc:
                    8a:be:5f:ff:06:96:59:30:e6:9a:ef:42:e0:ba:47:
                    53:b0:5f:e2:56:74:80:2c:dc:66:da:12:e6:d4:b2:
                    be:18:ec:48:83:2c:19:c8:d8:0a:bd:7e:fd:69:6d:
                    0c:f9:56:c8:d9:08:9a:18:c5:04:59:01:ca:2c:72:
                    08:2f:a5:cd:e6:19:ff:34:b8:23:2f:33:88:f0:03:
                    5c:1b:e3:46:a5:ce:5a:e8:c8:44:29:6d:4b:e5:27:
                    7f:47:b6:9d:4b:fd:d5:32:27:ab:e8:6a:3d:9f:7f:
                    ff:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CC:52:48:EC:35:DD:C6:21:92:B1:C5:57:B0:BF:0C:18:A5:FF:07
            X509v3 Authority Key Identifier:
                keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:e8:be:1d:4a:10:8b:67:e6:88:80:79:cc:87:51:9d:97:
         3d:01:6b:9a:85:a4:34:64:11:6e:b6:c2:74:ad:52:ac:77:13:
         6f:3a:9d:13:4d:31:74:2c:62:4e:cc:e1:1a:08:75:d0:fc:1a:
         62:61:e1:0f:c8:30:0a:47:d7:c0:fd:70:3b:0c:b4:af:08:fb:
         94:a2:94:09:db:66:86:0e:ab:a1:84:15:78:5e:be:e4:a4:c4:
         1c:d9:b8:bc:9b:ca:67:f1:2d:d7:4b:1e:3f:50:ae:2f:93:c7:
         f5:df:49:43:f8:35:78:83:e7:19:73:47:90:74:ce:2e:a5:48:
         e4:fe:46:11:f1:4b:44:28:f4:be:b6:72:dc:7b:26:0f:9d:27:
         12:dc:02:67:8b:71:81:c3:81:22:ce:b9:c9:cd:04:75:2d:7d:
         16:e3:67:90:b3:da:6f:e7:75:b4:b9:85:04:82:c0:ef:5d:64:
         0f:52:10:39:63:69:47:30:29:58:24:87:b7:86:00:09:32:e1:
         16:b7:13:50:d6:7f:ec:7b:bb:2e:25:59:66:89:94:a8:d5:2c:
         9d:64:1e:06:b5:5a:fd:35:2f:cb:21:a9:13:ac:01:aa:00:b9:
         79:eb:20:ce:8f:75:bb:0c:f8:20:d2:b3:88:e7:5a:73:49:d5:
         3a:3c:93:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:08:21 2026 by rpki-client