Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
File:                     3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json)
Hash identifier:          b7nKkaI4l8uSdUiPepMfuSdoYvPUNv5RcPWARqd1tV4=
Subject key identifier:   3A:C8:6A:BD:DB:A4:9B:26:30:B8:D6:D6:38:9F:30:7E:8B:E0:F0:FD
Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
Certificate issuer:       /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Certificate serial:       16C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
Manifest number:          16B9
Signing time:             Tue 22 Sep 2026 16:36:35 +0000
Manifest this update:     Tue 22 Sep 2026 16:36:34 +0000
Manifest next update:     Tue 29 Sep 2026 16:36:34 +0000
Files and hashes:         1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: iy/7tfrOckfrmODe+D1jEac7e389D64onJCucMSiAEc=)
                          2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: VHKrRamBzI5Z2a2wNY14oKOBu6LJFzzc8akNzDVPDyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
                          rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5828 (0x16c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
        Validity
            Not Before: Sep 22 16:36:34 2026 GMT
            Not After : Sep 29 16:36:34 2026 GMT
        Subject: CN=6ab2ae93-70c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:62:72:a7:d5:51:0d:a7:87:1b:e0:3d:3f:
                    7b:63:bb:15:9b:e0:92:d7:3b:f6:a6:02:85:b7:38:
                    e9:f8:1b:24:95:2b:be:cf:a7:82:36:15:9a:e6:e7:
                    99:0d:b7:ad:04:75:ba:43:d3:b7:7b:3b:cf:74:84:
                    4f:bc:e7:e8:5e:a8:3d:16:cd:9a:7b:e7:3e:34:4f:
                    a3:6a:a7:87:38:13:f9:20:b3:7d:4a:4a:27:69:ac:
                    83:28:0c:52:8d:54:90:42:b1:80:dc:57:f7:a3:e5:
                    40:e1:d7:e4:64:f7:b1:1e:f2:6f:84:9d:72:60:cb:
                    06:99:34:0a:b6:ef:b2:36:a9:91:21:ba:37:60:35:
                    82:d9:f1:2d:ae:20:59:46:d6:f8:99:c9:36:16:57:
                    69:08:49:46:67:39:64:ea:47:39:65:11:5c:58:ce:
                    fe:d4:7f:a1:7e:88:c2:1c:69:e0:4b:72:82:fd:a3:
                    3e:d7:04:cd:99:ca:78:f6:38:12:a4:66:45:48:31:
                    ee:bf:9b:fc:8a:48:a2:66:69:87:1c:2a:ab:55:23:
                    ed:0e:d4:07:0e:1e:a6:12:58:42:f9:cf:f0:f8:37:
                    e1:13:ab:84:f7:22:78:67:43:d6:57:c4:89:61:ae:
                    ad:49:6f:a3:a0:65:21:69:d0:76:28:72:cf:d4:76:
                    7b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C8:6A:BD:DB:A4:9B:26:30:B8:D6:D6:38:9F:30:7E:8B:E0:F0:FD
            X509v3 Authority Key Identifier:
                keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:27:2e:83:ae:4d:4d:83:7e:10:01:5d:44:e0:2c:1c:08:8a:
         fd:13:fc:d1:eb:3e:4f:a0:11:8c:7f:d8:97:1e:ce:98:ab:2b:
         4c:90:59:bc:3e:e3:84:55:70:06:b8:3a:84:9a:e3:f2:2e:2e:
         80:71:09:05:4f:1a:44:85:f5:46:34:9c:4d:0b:3c:18:48:4a:
         bf:68:96:de:2d:08:80:8b:16:83:71:88:31:32:51:4e:4f:c7:
         ac:e2:ca:df:1e:e9:3e:dc:0d:64:b6:53:97:98:2b:84:56:2b:
         e9:ec:f9:57:58:bc:5f:b2:e4:d1:d0:c3:35:ad:15:e5:78:36:
         06:69:8f:f8:51:b6:ef:c4:81:1c:0d:49:95:55:15:20:45:e2:
         e4:01:8b:70:76:74:df:df:28:08:c6:8c:65:f6:b8:6c:2c:07:
         e1:12:41:3e:59:f2:90:2a:90:69:95:84:58:8f:cc:c3:9c:be:
         83:2b:ff:ed:48:7d:45:88:13:dd:a0:ff:d5:b8:13:5b:bc:d4:
         80:52:7c:29:11:d9:54:b8:9a:9b:11:63:37:1c:38:4c:5c:38:
         de:f3:d0:e7:fa:44:cd:08:13:39:d6:29:c7:3e:ea:2c:dc:75:
         02:5d:b2:89:f7:15:c2:3e:cf:93:93:19:30:97:9e:f7:57:e6:
         58:a5:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:45:42 2026 by rpki-client