Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
File:                     3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft (raw, json)
Hash identifier:          JpplEydnpizIpoTG83/rjdmEOyhny9tPY1larYfaeJM=
Subject key identifier:   3E:B7:AB:AB:76:A0:6E:48:84:0D:1E:76:EB:9E:AE:90:C5:46:4D:D2
Authority key identifier: DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39
Certificate issuer:       /CN=A91D2A10/serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
Manifest number:          61
Signing time:             Wed 23 Sep 2026 07:49:42 +0000
Manifest this update:     Wed 23 Sep 2026 07:49:42 +0000
Manifest next update:     Wed 30 Sep 2026 07:49:42 +0000
Files and hashes:         1: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl (hash: ccLvJgWzOYkLXYp+kVPOVCpU0ZDPxVfaGOEnP61Be2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl
                          rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2A10, serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039
        Validity
            Not Before: Sep 23 07:49:42 2026 GMT
            Not After : Sep 30 07:49:42 2026 GMT
        Subject: CN=6ab38496-e1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:14:b7:7f:f6:e2:33:17:11:61:e1:40:90:
                    5a:5a:80:96:7a:74:b1:1e:8d:2a:b0:08:ee:d9:e4:
                    21:e7:09:af:92:61:03:19:81:1d:ed:84:9d:97:3c:
                    36:06:b4:cd:58:03:77:60:6a:00:39:2e:f0:c8:47:
                    bf:21:45:ca:fd:d3:76:15:2e:d2:37:bb:7d:d5:a7:
                    cf:2b:e9:99:a1:28:0d:90:96:76:1e:7a:f5:1b:1c:
                    29:a0:02:5c:33:68:e8:4f:0e:66:40:1f:d3:bb:2d:
                    ef:95:1f:2f:a0:8a:cd:4e:3d:06:37:c5:b8:3c:94:
                    28:e5:b8:07:d1:28:88:75:f6:be:59:15:7a:06:be:
                    b3:7a:1c:d2:56:9d:b5:ff:10:ab:36:38:55:26:37:
                    cb:93:ae:68:ee:68:51:0e:f1:f3:83:ad:f3:13:4b:
                    38:46:09:80:e1:b7:81:1a:5a:9f:2b:6c:e5:ed:03:
                    94:3a:cd:d5:ad:7b:55:5f:13:7f:09:72:65:db:5b:
                    72:52:40:a7:12:2e:a5:e8:f3:50:27:19:15:61:38:
                    24:5c:a4:a9:d4:70:ae:d8:ec:1f:60:c7:e2:9f:10:
                    d7:1e:f5:c1:4f:88:6c:a3:5e:a8:42:81:b3:e4:9a:
                    24:14:33:36:c7:37:86:b0:50:cd:e1:5b:b6:98:95:
                    53:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B7:AB:AB:76:A0:6E:48:84:0D:1E:76:EB:9E:AE:90:C5:46:4D:D2
            X509v3 Authority Key Identifier:
                keyid:DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:bb:10:c9:bf:29:f4:db:ff:48:95:de:1f:94:2e:9e:f8:ea:
         f0:2d:23:0b:f9:8a:1b:0f:85:8f:fc:4f:c5:cb:3c:8f:28:97:
         18:a5:6f:13:9f:50:80:1d:09:48:4a:69:c1:c6:b0:dd:93:1e:
         4d:25:63:b0:ee:5a:f8:6a:0f:d9:07:d0:03:75:7b:76:41:94:
         fe:e1:17:f2:4b:cf:80:9d:44:6b:43:32:76:29:14:f0:be:30:
         49:e0:07:8b:fb:97:97:69:5f:62:b3:42:8d:12:77:c4:cb:df:
         6e:5d:00:e2:19:36:56:04:22:a8:6c:e9:40:88:08:a1:45:a5:
         e2:00:5d:4b:60:f8:3c:8c:97:ec:7b:b9:ea:b9:c6:e0:dd:a3:
         e5:57:96:d1:3f:d6:df:5f:b2:e1:75:6f:01:e7:81:83:30:7f:
         33:49:b9:52:5f:1a:a8:cb:6a:07:e4:21:93:ba:4a:a1:db:e8:
         7d:aa:01:8c:ea:d0:f1:3c:ca:85:16:53:f6:eb:a0:49:fe:b7:
         6d:54:e6:39:59:09:15:06:22:69:e9:9b:35:0c:af:9b:0b:be:
         28:17:13:8c:60:7b:fe:94:82:1b:15:3b:2a:0e:71:88:64:03:
         bc:bc:85:03:c1:06:2c:05:d9:76:45:f1:30:8c:ee:62:c6:2b:
         c8:ed:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:25:02 2026 by rpki-client