Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
File:                     T8X9jSdo5Al3QhkY-xOcM12_g4A.mft (raw, json)
Hash identifier:          FaP5HllCc9gJmSCvQNqEw3DmBMwy1TsYVIT2Ne7f7ww=
Subject key identifier:   1D:F6:26:81:E4:4D:A7:8F:72:EF:4F:84:2F:E9:E1:ED:AA:6A:D2:8B
Authority key identifier: 4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80
Certificate issuer:       /CN=A91B539C/serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
Manifest number:          3A
Signing time:             Mon 05 Oct 2026 09:02:11 +0000
Manifest this update:     Mon 05 Oct 2026 09:02:10 +0000
Manifest next update:     Mon 12 Oct 2026 09:02:10 +0000
Files and hashes:         1: T8X9jSdo5Al3QhkY-xOcM12_g4A.crl (hash: pr8dl8sT8k/54n6PHRqX6CAbYMXU0vnJNF4gcMXpZrg=)
                          2: DB14F0D8688611F19B84FAD56C47A888.roa (hash: 74bk58//l9arlYq1z7u+T+hfveHOzEv+5Ygge/tEw9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl
                          rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B539C, serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380
        Validity
            Not Before: Oct  5 09:02:10 2026 GMT
            Not After : Oct 12 09:02:10 2026 GMT
        Subject: CN=6ac36793-d9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f4:05:19:8a:c7:da:7e:75:6f:2c:7a:b1:f7:
                    1a:c3:36:95:f9:4e:7f:39:ac:ab:58:d3:0c:b5:f7:
                    b1:b4:24:ed:82:09:9e:69:55:74:31:41:27:56:b3:
                    5f:a8:7c:43:d2:86:66:de:aa:9e:25:36:de:6f:08:
                    29:5f:8d:7c:02:1e:12:a7:81:f3:f1:f4:9d:37:07:
                    4a:a0:16:50:9a:12:66:fb:02:bf:9c:6d:a8:30:6e:
                    50:b8:a9:8b:ea:14:3a:d5:23:be:0d:13:da:65:27:
                    fb:45:16:e7:31:20:57:02:2f:88:ac:a0:2d:b0:9f:
                    e7:d2:29:2f:53:eb:db:db:ed:8b:66:78:f8:0c:81:
                    a0:ac:1f:31:a7:ef:66:0a:0d:53:fa:57:ad:16:aa:
                    3e:b6:09:2a:de:22:ae:1c:3b:28:a6:e5:67:8c:71:
                    6c:98:1b:58:bf:f3:22:62:89:2b:41:61:30:dd:e5:
                    6c:54:8a:03:a7:b7:7f:aa:99:54:84:cf:f2:6b:03:
                    45:d7:99:d7:48:06:3b:a0:59:e1:68:db:c4:0b:a1:
                    3a:16:7f:e6:6b:bd:cc:17:da:96:e7:d9:70:42:34:
                    f7:5a:22:70:6e:df:cc:2d:72:f3:dc:89:78:e1:12:
                    0d:9e:f8:96:48:72:6f:cc:24:61:70:e4:9b:d7:c9:
                    06:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F6:26:81:E4:4D:A7:8F:72:EF:4F:84:2F:E9:E1:ED:AA:6A:D2:8B
            X509v3 Authority Key Identifier:
                keyid:4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:88:ea:3e:69:87:e9:46:19:0a:89:8e:ae:c5:3e:bf:84:b5:
         f3:b9:69:9b:51:1c:8c:25:d2:fe:53:b4:9f:0b:2f:50:d5:02:
         1e:97:43:00:7f:52:93:46:c5:25:4e:5a:43:43:3f:62:45:f2:
         e9:86:62:99:1e:ef:6f:a5:5c:13:cc:c5:44:b7:cd:94:cc:64:
         43:d6:a7:b5:f9:84:90:fa:73:24:19:5f:96:4f:b3:95:bd:53:
         a6:f8:0a:c4:7c:0a:7c:85:37:55:c8:b0:1c:64:8d:40:23:8f:
         81:70:54:b4:bc:29:b1:5f:96:6e:de:e7:a5:fd:16:78:f5:4f:
         c4:0a:94:8e:b3:09:5d:9e:eb:a8:5c:38:73:d0:4f:6f:65:45:
         8a:5a:bf:86:8c:bd:81:92:ec:b5:8c:be:8f:2c:ee:a6:b6:68:
         5d:c6:32:e6:4e:b5:67:ad:46:b3:1f:00:fc:7a:90:e0:e8:e0:
         4b:ae:fa:a0:b8:48:20:e9:3a:60:c6:04:ec:11:07:3e:6d:70:
         98:af:64:04:3b:70:fc:be:2b:5e:24:85:cb:b7:bd:71:33:0c:
         da:fe:3c:e4:0b:13:b2:82:1c:94:39:cd:a4:52:08:22:de:4a:
         59:23:48:d9:16:ab:5c:69:8b:70:28:68:4a:4b:f5:64:c3:18:
         b3:58:5a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:03:00 2026 by rpki-client