Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
File:                     3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft (raw, json)
Hash identifier:          awjjXi9eXmpdqy8hashcul5l17l5WVsT79T20Q8jBIU=
Subject key identifier:   E3:DA:3B:67:B6:85:82:B8:BD:64:00:A9:B4:21:7B:6E:9B:5A:B7:AA
Authority key identifier: DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6
Certificate issuer:       /CN=A91CDFFB/serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
Certificate serial:       0931
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
Manifest number:          0923
Signing time:             Sun 04 Oct 2026 20:16:23 +0000
Manifest this update:     Sun 04 Oct 2026 20:16:22 +0000
Manifest next update:     Sun 11 Oct 2026 20:16:22 +0000
Files and hashes:         1: 3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl (hash: sfpKGcZsjQGn+/xf6lK89osd0tATksXhGLKAv8eMbs4=)
                          2: CA42E5689FA411EBBC1FFB40C4F9AE02.roa (hash: 4udzqiQRKh+z3+sZYM7W4JxOQlCcj9u8JQ3LT8BeXiE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl
                          rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2353 (0x931)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDFFB, serialNumber=DEB5639F5847C70DE0FC44BE78424118F8A206C6
        Validity
            Not Before: Oct  4 20:16:22 2026 GMT
            Not After : Oct 11 20:16:22 2026 GMT
        Subject: CN=6ac2b416-fa23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:8a:fd:2e:b7:f3:62:d4:70:ee:9c:d8:75:
                    aa:e3:37:c3:c3:39:29:8f:ec:3f:4d:b8:c4:05:8f:
                    5b:9a:c0:57:8a:33:0e:4a:ef:81:77:a0:48:66:92:
                    70:1f:76:a4:de:71:e5:d5:18:10:67:06:85:9e:f8:
                    cb:e2:ff:7e:90:7a:99:d2:8b:cd:35:ca:1b:63:8e:
                    33:a7:d9:43:4c:44:20:99:1d:ff:81:c8:b4:a0:d7:
                    f6:44:a7:bc:58:1b:52:5a:23:15:e1:7c:27:ab:8c:
                    b7:90:ab:50:4f:46:2f:1b:45:35:9f:d2:d7:a5:d6:
                    6d:8b:af:95:84:07:ca:f8:a9:2a:0a:7f:9c:b0:3f:
                    74:b2:80:56:68:03:40:d8:d3:60:99:2d:64:55:fe:
                    95:19:e2:19:a1:cb:e2:0d:0a:bc:07:2f:4e:c7:5e:
                    bf:9f:ca:32:79:1c:18:cd:c9:d8:c2:b2:d2:6e:c1:
                    0b:4a:b4:29:60:2f:b2:f1:06:f2:cf:57:4a:42:68:
                    be:82:cc:58:fb:df:98:2c:b0:62:58:c2:a0:6d:a3:
                    96:88:b5:07:d1:23:5d:7f:47:9d:bd:45:75:5b:05:
                    da:6e:8d:82:e1:4b:df:02:d9:da:9b:fe:80:7b:b4:
                    92:6b:07:cc:7b:7e:b6:dd:78:cb:4b:4f:01:95:91:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DA:3B:67:B6:85:82:B8:BD:64:00:A9:B4:21:7B:6E:9B:5A:B7:AA
            X509v3 Authority Key Identifier:
                keyid:DE:B5:63:9F:58:47:C7:0D:E0:FC:44:BE:78:42:41:18:F8:A2:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rVjn1hHxw3g_ES-eEJBGPiiBsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFFB/27E506E6D4EF11EA9A61724AC4F9AE02/3rVjn1hHxw3g_ES-eEJBGPiiBsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:49:2a:52:64:e7:66:fa:68:79:65:3a:1e:53:bb:71:09:0c:
         9b:d7:d1:d7:12:bf:78:2d:f6:85:43:9c:98:e3:28:42:8b:61:
         75:a8:ae:4a:05:da:e0:73:48:76:85:8e:41:80:6f:36:ab:2c:
         b9:13:40:e7:7f:b5:e2:87:04:35:ca:cd:4a:1b:ba:29:f3:4b:
         55:75:90:e1:11:98:0c:e2:34:6b:36:eb:2a:bf:98:46:30:e9:
         36:9f:8b:3d:a0:19:78:ba:a4:ef:43:97:e9:08:5d:bb:27:b3:
         fe:41:7e:91:94:77:2d:40:a5:44:ee:a9:1c:5e:33:cd:10:fa:
         32:07:b2:c3:7c:95:4d:47:5c:4b:3b:a3:14:2f:06:88:63:3f:
         97:9d:ab:bb:b6:df:91:f4:12:7b:98:77:eb:a4:2d:13:e7:c0:
         ce:e6:48:7a:7a:2f:72:5d:31:ec:15:b3:ed:5e:25:b3:fe:a4:
         6c:69:47:c3:cf:1e:2f:14:cb:f5:26:b4:64:ac:5f:24:81:30:
         29:0b:76:5b:d8:c7:c5:8e:ef:78:45:11:1e:cf:67:83:2e:c1:
         b2:79:38:c0:86:18:62:b3:52:43:85:79:eb:c4:99:50:2e:76:
         9b:9d:ee:e8:a1:42:2f:fb:da:44:1e:10:f0:b1:04:f5:6f:72:
         48:5f:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:01:11 2026 by rpki-client