Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
File:                     3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json)
Hash identifier:          O2i+FOdEDXseRBPAnAMlmXNBoTXBXQpocm5EoOBfalA=
Subject key identifier:   56:62:35:68:14:41:C4:76:B1:8F:27:4C:A0:B8:05:C0:46:38:36:37
Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E
Certificate issuer:       /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
Manifest number:          0102
Signing time:             Wed 23 Sep 2026 06:03:15 +0000
Manifest this update:     Wed 23 Sep 2026 06:03:14 +0000
Manifest next update:     Wed 30 Sep 2026 06:03:14 +0000
Files and hashes:         1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: nwjwdimvs+fcfsXOWhycv+1KyTSlH6hxZzCKlr45vNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl
                          rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
        Validity
            Not Before: Sep 23 06:03:14 2026 GMT
            Not After : Sep 30 06:03:14 2026 GMT
        Subject: CN=6ab36ba3-37e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:c1:63:dd:d5:2d:b2:96:22:ef:1b:cc:88:
                    f7:dd:6d:9f:e8:a5:f3:a4:97:0c:49:98:9d:47:24:
                    9f:b3:a0:4e:3b:e8:0f:a1:b4:e8:0c:f9:f2:84:fe:
                    7e:8e:4b:54:c2:89:d7:fc:ac:aa:8a:03:1a:2f:d4:
                    c4:1b:0b:dc:90:e8:1f:fd:11:c1:32:31:9e:e3:b6:
                    b9:07:9b:ab:4a:fb:51:ea:76:01:11:1d:e2:c4:42:
                    8e:00:29:5a:5c:11:2f:42:e1:bb:31:05:eb:cf:81:
                    9d:ed:ae:a4:51:f2:26:3e:f7:3a:02:ec:28:c1:ec:
                    26:03:e7:9a:6c:f4:3d:be:cc:5c:fe:1b:c8:d9:f6:
                    95:8c:db:26:93:6c:66:9c:42:93:d1:16:ad:c8:77:
                    16:ff:3e:bb:98:0d:7c:92:c6:a5:48:3a:7b:8b:ee:
                    44:c6:09:cc:e5:3c:9b:19:d1:15:54:8a:66:9a:e1:
                    f3:4e:b8:3d:fa:d4:9c:ae:15:e0:28:92:15:5a:ab:
                    29:12:b0:39:95:6b:65:a8:b9:09:54:17:84:3c:c8:
                    33:8f:c6:a2:72:f1:b0:c2:4a:97:5b:6c:13:5d:32:
                    5d:8a:49:91:85:6f:94:80:31:90:7f:e9:b4:a6:91:
                    e9:8e:a2:db:be:97:3c:9c:e3:38:21:08:fe:49:5a:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:62:35:68:14:41:C4:76:B1:8F:27:4C:A0:B8:05:C0:46:38:36:37
            X509v3 Authority Key Identifier:
                keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:45:d6:c7:81:9d:7a:54:57:1c:30:af:18:2e:12:d2:0d:98:
         c2:58:5d:ca:75:33:83:05:61:6f:01:5b:14:1e:02:12:9c:08:
         61:0e:98:11:12:c1:53:94:2d:bc:4a:5b:64:0f:c8:b5:a8:f1:
         d4:e8:c6:9a:19:6f:82:f5:51:12:b7:5c:1d:92:cc:35:02:c7:
         34:78:fb:93:0b:b8:2f:c4:f9:64:10:19:86:e2:62:b2:96:88:
         31:43:1b:da:b2:6a:3b:2a:b3:e6:f2:42:fe:55:f4:de:46:b8:
         2e:a1:a1:a3:35:8e:3c:a0:a2:0c:bc:dd:21:2c:d1:31:4e:31:
         b7:c2:c5:40:b4:e9:55:b7:1c:e5:6d:7d:e7:c3:f5:82:98:61:
         04:b7:88:99:f3:86:5e:b2:38:e1:64:8d:72:c9:c9:0e:23:f8:
         14:67:33:60:d3:85:33:2e:73:2d:07:8a:2f:67:82:ef:41:82:
         fa:5d:3c:3a:43:e0:5a:d2:c2:a2:99:d0:ac:85:54:9b:ac:04:
         75:e1:53:8c:ab:d1:29:45:e9:ff:3a:61:77:24:12:c7:bc:31:
         8a:5e:1b:70:0d:7f:c8:f0:44:ac:0f:74:c3:58:89:52:c4:4a:
         83:b6:49:40:ee:2d:1c:bd:89:21:cf:1f:c1:a9:18:ca:6d:50:
         0d:0e:47:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:41:20 2026 by rpki-client