Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
File:                     3eQo-rsWskLR46Gm8A_V48OKpY8.mft (raw, json)
Hash identifier:          5agp+XZrQmZGW/FQqp0jMMJAMy4WMoKe71shrAMcuHQ=
Subject key identifier:   F9:A5:B4:35:36:D1:C9:C9:68:8E:50:C8:B7:2A:55:BF:C6:65:90:88
Authority key identifier: DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F
Certificate issuer:       /CN=A91B681A/serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
Manifest number:          74
Signing time:             Sun 27 Sep 2026 08:25:12 +0000
Manifest this update:     Sun 27 Sep 2026 08:25:11 +0000
Manifest next update:     Sun 04 Oct 2026 08:25:11 +0000
Files and hashes:         1: 3eQo-rsWskLR46Gm8A_V48OKpY8.crl (hash: 4Z4QtBJBwdhpQl2VoJg9BF2wC57XaQ15Jll7PtdXLKU=)
                          2: 50B86BE40BE411F1BD6D7437333D8C67.roa (hash: QFwXm5LgnQBWOl/6IqW37SOmW7TOlLZtTt8RxXnukJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl
                          rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B681A, serialNumber=DDE428FABB16B242D1E3A1A6F00FD5E3C38AA58F
        Validity
            Not Before: Sep 27 08:25:11 2026 GMT
            Not After : Oct  4 08:25:11 2026 GMT
        Subject: CN=6ab8d2e7-fb8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:74:5b:c5:da:63:3f:69:0a:27:4f:ae:5b:67:
                    81:14:3a:93:32:35:31:5b:2a:07:7a:c7:80:6e:5a:
                    7a:93:65:ae:35:fe:f9:40:6b:d3:e3:7f:99:8c:cf:
                    d0:9d:11:ac:31:71:2a:d6:51:28:bb:d3:4f:7c:6b:
                    98:7f:95:13:a5:88:13:51:fa:2d:39:46:ac:df:d1:
                    ff:92:08:3c:89:0e:f6:f2:51:9e:37:c6:3a:bc:d8:
                    7b:8d:7e:23:00:71:74:77:29:99:95:8e:c8:e7:87:
                    00:55:4c:1a:e6:92:cd:72:72:f3:da:20:8b:b4:56:
                    6d:3b:8e:2d:0d:ca:7f:68:4f:a8:8e:35:52:7e:1c:
                    7c:44:a9:c9:a2:4f:6d:38:ec:a3:ba:86:c0:ae:0c:
                    1a:95:11:ed:d0:5d:a8:67:41:69:42:55:d7:9c:cb:
                    2b:33:a2:b4:6a:b5:50:1e:92:6f:b5:b6:94:3e:e8:
                    ef:a9:d8:ad:63:80:e8:cc:75:25:fc:7d:ce:34:b6:
                    47:2f:94:53:dd:36:08:47:fa:76:02:e3:f4:9c:00:
                    42:fb:af:40:b0:47:00:b2:5b:33:bd:c1:c3:10:56:
                    6a:93:5b:67:7b:ef:03:a1:c2:bf:be:e3:df:ba:1e:
                    9c:d3:36:6b:07:42:b2:86:85:d0:47:4a:63:69:5e:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A5:B4:35:36:D1:C9:C9:68:8E:50:C8:B7:2A:55:BF:C6:65:90:88
            X509v3 Authority Key Identifier:
                keyid:DD:E4:28:FA:BB:16:B2:42:D1:E3:A1:A6:F0:0F:D5:E3:C3:8A:A5:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eQo-rsWskLR46Gm8A_V48OKpY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B681A/CC0319420BE011F19A1863A5313D8C67/3eQo-rsWskLR46Gm8A_V48OKpY8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f7:9d:a5:56:34:d0:be:1d:29:fd:f4:b5:2f:eb:09:e2:64:
         ee:7d:66:93:2e:33:5a:96:50:77:f7:af:e5:2a:cf:d2:35:ab:
         8d:c8:8f:78:62:79:53:aa:08:c3:d8:65:c7:8e:69:b6:2d:f2:
         29:0e:79:4a:28:26:a6:4b:8a:68:d1:21:da:a3:5a:38:ea:ed:
         19:a5:70:69:c6:2a:f8:c3:39:5c:d7:fb:60:eb:db:df:fb:9f:
         57:71:4c:c5:36:39:6c:c6:bc:f5:1e:3f:93:0b:a3:ad:24:cf:
         27:69:09:fa:10:e1:3e:fe:3f:5a:97:c0:04:cb:3d:f0:52:be:
         92:20:6f:41:8a:a6:4f:1f:96:4e:cc:a5:d4:1c:11:a8:6b:2d:
         b2:ff:87:5e:52:81:6d:6f:d7:4c:f0:c3:1c:cb:64:f8:1c:f9:
         f0:db:7b:ec:2d:96:76:e8:b6:54:e8:3b:24:6b:fc:cf:ad:fc:
         41:05:0a:0e:58:ec:ce:8d:0e:87:65:76:ba:7b:00:84:e4:1f:
         3a:04:58:dc:69:47:a9:cd:00:a5:aa:53:85:2b:d9:79:f7:f1:
         96:0c:97:f5:61:e4:94:69:9d:27:a3:3a:94:c0:3a:45:7f:2c:
         18:dd:3f:6b:11:c1:55:ea:41:5b:a9:e2:a8:b5:d6:aa:38:d0:
         68:63:17:85
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NjgxQTExMC8GA1UEBRMoRERFNDI4RkFCQjE2QjI0MkQxRTNBMUE2RjAwRkQ1RTND
MzhBQTU4RjAeFw0yNjA5MjcwODI1MTFaFw0yNjEwMDQwODI1MTFaMBgxFjAUBgNV
BAMTDTZhYjhkMmU3LWZiOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOdFvF2mM/aQonT65bZ4EUOpMyNTFbKgd6x4BuWnqTZa41/vlAa9Pjf5mMz9Cd
EawxcSrWUSi70098a5h/lROliBNR+i05Rqzf0f+SCDyJDvbyUZ43xjq82HuNfiMA
cXR3KZmVjsjnhwBVTBrmks1ycvPaIIu0Vm07ji0Nyn9oT6iONVJ+HHxEqcmiT204
7KO6hsCuDBqVEe3QXahnQWlCVdecyyszorRqtVAekm+1tpQ+6O+p2K1jgOjMdSX8
fc40tkcvlFPdNghH+nYC4/ScAEL7r0CwRwCyWzO9wcMQVmqTW2d77wOhwr++49+6
HpzTNmsHQrKGhdBHSmNpXtJ7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+aW0NTbR
yclojlDItypVv8ZlkIgwHwYDVR0jBBgwFoAU3eQo+rsWskLR46Gm8A/V48OKpY8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2ODFBL0NDMDMxOTQyMEJF
MDExRjE5QTE4NjNBNTMxM0Q4QzY3LzNlUW8tcnNXc2tMUjQ2R204QV9WNDhPS3BZ
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM2VRby1yc1dza0xSNDZHbThBX1Y0OE9LcFk4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2
ODFBL0NDMDMxOTQyMEJFMDExRjE5QTE4NjNBNTMxM0Q4QzY3LzNlUW8tcnNXc2tM
UjQ2R204QV9WNDhPS3BZOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBh952lVjTQvh0p/fS1L+sJ4mTufWaTLjNallB396/lKs/SNauNyI94YnlTqgjD
2GXHjmm2LfIpDnlKKCamS4po0SHao1o46u0ZpXBpxir4wzlc1/tg69vf+59XcUzF
Njlsxrz1Hj+TC6OtJM8naQn6EOE+/j9al8AEyz3wUr6SIG9BiqZPH5ZOzKXUHBGo
ay2y/4deUoFtb9dM8MMcy2T4HPnw23vsLZZ26LZU6Dska/zPrfxBBQoOWOzOjQ6H
ZXa6ewCE5B86BFjcaUepzQClqlOFK9l59/GWDJf1YeSUaZ0nozqUwDpFfywY3T9r
EcFV6kFbqeKotdaqONBoYxeF
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:47:07 2026 by rpki-client