Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
File:                     kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json)
Hash identifier:          18IpXwVjPsBNfUOJF0clt3ZCCrJB0Xei6pmwjcSLVns=
Subject key identifier:   96:4E:40:9A:C3:47:A5:BC:F0:B5:1F:08:A4:28:FA:C6:12:D0:FB:4B
Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62
Certificate issuer:       /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
Certificate serial:       027B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
Manifest number:          043E
Signing time:             Tue 29 Sep 2026 02:21:10 +0000
Manifest this update:     Tue 29 Sep 2026 02:21:09 +0000
Manifest next update:     Tue 06 Oct 2026 02:21:09 +0000
Files and hashes:         1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: r1TJKkZffj4gzii5a6Fdrz/4HO2iZ4y97LyGpc8ZQgc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl
                          rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 02:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
        Validity
            Not Before: Sep 29 02:21:09 2026 GMT
            Not After : Oct  6 02:21:09 2026 GMT
        Subject: CN=6abb2096-4d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:7e:5c:13:89:f3:c2:c5:3b:bd:e4:1f:07:
                    46:45:0f:8a:42:d3:c4:25:4e:6f:ed:91:b3:41:d6:
                    b5:a4:8c:09:47:25:5b:b7:41:9a:fb:e1:12:84:34:
                    af:a7:67:17:21:fa:49:32:fa:cd:c8:3a:6a:7c:f7:
                    46:23:a2:7b:fd:33:6f:1c:fa:27:1f:5b:33:fd:e9:
                    7a:a8:80:4c:d8:36:9b:7d:a0:91:44:80:5d:38:bb:
                    73:d5:34:3c:d1:cd:23:00:3f:82:59:14:55:62:93:
                    85:dc:a8:24:2a:84:cc:6d:2b:75:77:16:a3:5f:99:
                    04:8c:af:3e:48:57:53:d6:0c:37:48:d4:ce:89:81:
                    84:69:77:7b:28:b6:6c:c7:cc:64:87:e2:2f:b2:af:
                    88:53:b0:0a:a5:a5:ae:4a:34:9b:1e:e3:39:66:02:
                    46:eb:fe:4d:7e:25:96:46:01:1d:4e:de:3d:5c:21:
                    46:36:64:c1:b0:6e:81:53:7e:31:ec:85:2d:b6:96:
                    57:21:24:5f:a1:46:d8:c1:40:99:a7:9b:14:b9:45:
                    41:5d:34:9a:18:fa:d1:40:39:a0:de:90:32:cb:da:
                    c0:c7:82:88:8c:7a:2b:66:8b:e0:c7:41:de:c7:aa:
                    77:73:d9:98:f1:9b:07:bd:52:23:12:b1:6b:ac:22:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4E:40:9A:C3:47:A5:BC:F0:B5:1F:08:A4:28:FA:C6:12:D0:FB:4B
            X509v3 Authority Key Identifier:
                keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8a:f5:54:b7:32:2f:4e:7c:1e:98:ed:2a:cc:1d:2d:7d:86:
         e1:6d:08:cb:33:2f:ef:d0:e4:ed:59:f4:d6:58:52:18:5c:83:
         81:46:5c:5b:d1:e3:62:d9:db:96:b2:ee:6a:08:cc:20:b7:ab:
         c7:b8:f4:96:8a:8a:c9:e0:75:ea:31:ee:be:04:ca:68:7e:ef:
         bd:5b:3c:48:44:bb:4f:62:f0:8a:a0:8b:bb:e2:09:d6:5a:09:
         f8:33:d8:a4:fd:ee:48:37:72:f8:25:21:20:d8:2b:4e:66:fb:
         c0:e2:35:ef:67:da:57:63:d6:bc:9e:23:57:d8:9e:8a:db:b0:
         d6:b8:a5:3e:56:b6:6e:9e:7c:97:e1:f3:8e:22:98:0e:ba:65:
         7e:75:a9:94:35:e0:ae:aa:85:59:2d:32:8c:1a:e3:ae:15:2f:
         b2:fa:5e:a2:93:ea:c2:aa:ec:0c:4d:69:bf:07:4c:9a:4b:ff:
         9c:ac:19:c8:98:b2:2f:ea:cf:fb:fe:38:33:a9:1e:16:27:38:
         f7:e6:1c:b1:0d:dd:d9:4c:be:cf:2e:52:5e:58:01:9e:d9:27:
         25:44:f6:a5:68:2d:f3:03:5f:00:c2:94:c0:6a:4d:ae:ce:1a:
         a4:09:1a:8a:34:4e:fa:1f:65:22:6e:2b:81:cc:1d:be:09:4a:
         c2:30:0c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:13:27 2026 by rpki-client