Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
File:                     3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json)
Hash identifier:          TIamYPS9aqaPIkgDkw91Pq7NRDg/I6Q/f0yvIRAYncY=
Subject key identifier:   48:D2:8F:74:68:D0:BA:22:63:25:64:68:2B:BA:3E:EA:51:21:D8:1C
Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E
Certificate issuer:       /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
Manifest number:          A6
Signing time:             Fri 27 Mar 2026 06:53:41 +0000
Manifest this update:     Fri 27 Mar 2026 06:53:41 +0000
Manifest next update:     Fri 03 Apr 2026 06:53:41 +0000
Files and hashes:         1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: wsoabbEOi12YXAqAekrVpgq/Q3UV0Nul6SWO62F3REE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl
                          rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:53:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
        Validity
            Not Before: Mar 27 06:53:41 2026 GMT
            Not After : Apr  3 06:53:41 2026 GMT
        Subject: CN=69c62975-9dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:73:0a:43:8b:08:12:27:10:12:3e:08:5f:5e:
                    e8:6c:72:c7:c9:46:05:1a:fe:24:94:1f:c6:24:80:
                    6f:36:fa:9f:a3:1e:a5:53:df:45:06:80:b6:4c:dd:
                    88:bb:b5:ec:11:51:9b:c9:20:b4:9a:9d:14:66:e0:
                    36:3b:31:47:af:09:ec:25:a8:5c:3b:6f:85:f8:81:
                    4e:c7:4d:9b:d1:98:46:68:22:52:ce:f3:a0:55:f9:
                    c1:14:fb:b2:6d:75:c0:6a:f6:b4:93:52:e9:c7:6f:
                    b7:88:a7:1f:a1:bf:e7:94:eb:17:8a:d1:c2:6f:b5:
                    c2:05:be:20:c2:bb:c5:13:22:10:97:7c:e0:43:d3:
                    7c:a6:40:d3:e8:1a:4a:dd:62:a7:18:44:bf:f5:df:
                    2a:ec:c5:bf:2f:79:30:19:49:49:b4:24:c4:11:3f:
                    dd:27:01:3d:a6:a2:d1:ea:da:0d:78:68:d4:cd:1a:
                    71:6a:7c:7b:77:f5:20:24:b1:6f:a3:c0:86:bd:ae:
                    6a:92:4a:ad:5b:49:77:70:eb:16:d5:e8:97:e5:4d:
                    1d:63:a2:2a:b9:cb:93:d8:41:e2:dd:2f:29:e6:84:
                    39:62:cd:79:ff:56:52:99:c7:a1:1e:38:9e:da:0b:
                    65:9e:79:96:03:eb:c8:ea:c0:b9:1f:8c:54:17:ef:
                    4f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D2:8F:74:68:D0:BA:22:63:25:64:68:2B:BA:3E:EA:51:21:D8:1C
            X509v3 Authority Key Identifier:
                keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:85:9d:e9:bd:ac:53:bf:a3:90:d7:ba:49:48:50:10:f9:fe:
         11:3d:6a:45:0d:27:10:a3:bb:8b:7f:e3:78:bb:0e:ea:b2:eb:
         f4:f5:41:aa:d4:21:0a:74:b7:b7:f2:92:e2:9e:17:2e:6b:0c:
         c0:40:3c:89:3c:c7:5c:83:b1:e3:fc:cd:74:cc:60:43:8a:3f:
         49:c6:7e:22:e3:86:4d:39:18:0a:83:64:1d:e7:2b:e6:0c:6b:
         7c:1d:eb:1b:71:49:7a:25:c8:9e:28:7a:6a:b0:dd:91:1c:c6:
         9d:3b:2b:a4:82:46:2b:f1:19:79:25:9b:e9:4e:8b:6c:56:dc:
         87:65:e6:8b:b0:0c:fb:8e:f2:2d:28:9e:1c:74:16:11:fe:d5:
         4b:ac:05:82:d6:2c:20:21:5e:86:4a:53:34:cd:f5:22:98:25:
         af:ca:00:1a:b2:bc:d5:a8:7d:02:ff:8c:b0:ca:b5:f8:5e:df:
         f3:67:b4:70:7b:04:c2:37:ac:88:30:7f:4f:41:98:d4:c2:2b:
         3e:0d:5d:78:0b:d8:97:62:7a:78:d7:0c:29:42:ec:2f:2a:ff:
         c6:40:bf:d4:73:f4:41:1a:91:bb:6d:e0:fb:5e:14:04:48:4f:
         d0:2a:29:a7:7d:28:c8:c1:c1:82:19:e7:2f:2e:d8:23:c7:73:
         f1:e4:d4:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE4MkQxMTAvBgNVBAUTKERDQ0I0NkVBQUREQ0Q3M0Y1QUFGQUUwQjNGMDAyRUQ5
MjBDMEU4N0UwHhcNMjYwMzI3MDY1MzQxWhcNMjYwNDAzMDY1MzQxWjAYMRYwFAYD
VQQDEw02OWM2Mjk3NS05ZGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA63MKQ4sIEicQEj4IX17obHLHyUYFGv4klB/GJIBvNvqfox6lU99FBoC2TN2I
u7XsEVGbySC0mp0UZuA2OzFHrwnsJahcO2+F+IFOx02b0ZhGaCJSzvOgVfnBFPuy
bXXAava0k1Lpx2+3iKcfob/nlOsXitHCb7XCBb4gwrvFEyIQl3zgQ9N8pkDT6BpK
3WKnGES/9d8q7MW/L3kwGUlJtCTEET/dJwE9pqLR6toNeGjUzRpxanx7d/UgJLFv
o8CGva5qkkqtW0l3cOsW1eiX5U0dY6IqucuT2EHi3S8p5oQ5Ys15/1ZSmcehHjie
2gtlnnmWA+vI6sC5H4xUF+9PbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEjSj3Ro
0LoiYyVkaCu6PupRIdgcMB8GA1UdIwQYMBaAFNzLRuqt3Nc/Wq+uCz8ALtkgwOh+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTgyRC80MDc0NDhCQTNC
ODQxMUYwOTBDMzk1NjVDNEY5QUUwMi8zTXRHNnEzYzF6OWFyNjRMUHdBdTJTREE2
SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNNdEc2cTNjMXo5YXI2NExQd0F1MlNEQTZINC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTgyRC80MDc0NDhCQTNCODQxMUYwOTBDMzk1NjVDNEY5QUUwMi8zTXRHNnEzYzF6
OWFyNjRMUHdBdTJTREE2SDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPIWd6b2sU7+jkNe6SUhQEPn+ET1qRQ0nEKO7i3/jeLsO6rLr9PVBqtQhCnS3
t/KS4p4XLmsMwEA8iTzHXIOx4/zNdMxgQ4o/ScZ+IuOGTTkYCoNkHecr5gxrfB3r
G3FJeiXInih6arDdkRzGnTsrpIJGK/EZeSWb6U6LbFbch2Xmi7AM+47yLSieHHQW
Ef7VS6wFgtYsICFehkpTNM31Ipglr8oAGrK81ah9Av+MsMq1+F7f82e0cHsEwjes
iDB/T0GY1MIrPg1deAvYl2J6eNcMKULsLyr/xkC/1HP0QRqRu23g+14UBEhP0Cop
p30oyMHBghnnLy7YI8dz8eTU/g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:35:15 2026 by rpki-client