Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft
File:                     x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json)
Hash identifier:          zPaPHBSZgF+I1gpiavhUJvz8LonplcYsP0qGmHsSMbw=
Subject key identifier:   AE:93:1C:D1:B0:F0:2E:4E:C3:40:C1:36:E6:00:A2:1C:9B:A7:0A:A5
Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B
Certificate issuer:       /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B
Certificate serial:       064D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft
Manifest number:          0646
Signing time:             Thu 24 Sep 2026 22:33:48 +0000
Manifest this update:     Thu 24 Sep 2026 22:33:48 +0000
Manifest next update:     Thu 01 Oct 2026 22:33:48 +0000
Files and hashes:         1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: a0Dp5EcZvRkEKbixHX9ky/DdG/rDidjhdX1vfC6aAac=)
                          2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: MxvR1rcmc4G61O3M2p+Nubwh7XGQrabkCeb791C2Gt0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl
                          rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613 (0x64d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3377, serialNumber=C77C1309F4A1530EA395414528815F9C767C515B
        Validity
            Not Before: Sep 24 22:33:48 2026 GMT
            Not After : Oct  1 22:33:48 2026 GMT
        Subject: CN=6ab5a54c-5071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:9b:8e:31:f8:30:6d:8f:89:6b:01:44:30:
                    7c:97:48:7c:a3:fc:82:0c:de:5b:0c:fe:01:6c:b4:
                    be:2e:8f:6d:31:9d:fb:a8:64:00:06:1d:e2:1b:16:
                    b3:42:e6:4c:18:0b:f4:5e:8a:36:97:4f:0f:06:5e:
                    d9:2e:81:64:59:7d:cd:ff:32:5e:e3:d1:90:0f:ee:
                    34:90:e5:42:df:db:0c:3e:07:74:2e:ee:d0:4e:d5:
                    14:f8:d6:4c:76:6d:6c:27:3a:4e:4c:bc:fd:41:8b:
                    9e:17:aa:d7:ae:62:23:e9:20:06:92:1e:1e:2c:2a:
                    4d:ce:c4:9c:6d:fc:28:7d:04:07:9e:e2:c7:95:a4:
                    cb:d0:53:fd:c7:da:fb:fe:58:f2:09:a4:f0:df:60:
                    49:70:11:47:57:2a:86:cf:8b:0f:1d:e1:29:59:82:
                    15:58:c0:a0:c4:4a:3a:bd:bd:3d:d9:7f:fa:fe:e7:
                    f0:ee:28:90:74:c5:08:59:c2:18:18:1e:f3:71:7f:
                    42:d8:e5:3a:e1:12:e2:a3:93:5b:33:64:f3:05:13:
                    da:53:59:e8:9f:4c:03:67:03:7a:ca:97:5a:62:a0:
                    d0:af:57:da:d9:55:aa:c4:ba:f8:1d:9b:78:09:73:
                    fd:38:cd:cf:ee:13:27:1a:06:e2:91:b2:93:cf:d0:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:93:1C:D1:B0:F0:2E:4E:C3:40:C1:36:E6:00:A2:1C:9B:A7:0A:A5
            X509v3 Authority Key Identifier:
                keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ce:0b:12:17:0b:8b:24:9a:06:fd:9c:9c:fa:d9:62:a6:95:
         6e:59:43:79:76:3a:45:d4:9c:2b:44:73:10:ef:93:ec:e8:05:
         fb:77:1e:24:c8:91:66:44:10:d6:cd:7a:d3:ce:05:28:1e:50:
         cd:80:bf:8f:7d:b4:fa:af:28:08:77:45:1c:d0:d3:08:f4:e5:
         9d:2a:07:fd:8c:34:f7:7f:2a:a7:3c:3d:27:92:cb:29:a4:ed:
         08:08:57:5b:1d:3d:7c:ef:94:dd:b9:b2:b7:3e:ca:6b:87:d0:
         e6:04:8c:2e:66:8f:46:87:8a:28:ae:ac:77:36:3d:56:9c:05:
         53:62:c8:f0:7a:53:e0:e9:91:bb:b4:62:36:4c:36:2e:cd:9b:
         74:dc:8c:78:7a:f5:ed:06:7a:6f:ce:39:e3:b1:af:aa:a0:1e:
         e8:29:c5:e2:44:0c:05:3e:0e:31:60:3d:1c:9a:e7:e6:f3:48:
         10:d4:7d:bd:1e:14:b8:ec:1f:8b:7d:42:e0:7c:27:3d:d0:07:
         8c:a3:fd:b9:6a:a4:1e:8b:cc:33:0f:7b:56:8a:6b:4f:fa:0f:
         55:48:66:73:a6:d3:78:0d:42:a6:1d:e7:5e:bc:bc:c4:38:54:
         7c:49:67:69:1e:50:58:23:e6:a3:49:a9:fa:8c:4f:66:f2:32:
         89:b1:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:05:51 2026 by rpki-client