Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
File:                     3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json)
Hash identifier:          KQPG5A1yPgxb8F154Z4n0rGYwNq4zafbSrp42FxduoY=
Subject key identifier:   B5:BA:22:17:37:B7:E4:6E:51:DD:CF:08:68:75:72:76:03:9D:47:3A
Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6
Certificate issuer:       /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
Certificate serial:       026C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
Manifest number:          0262
Signing time:             Wed 23 Sep 2026 02:04:47 +0000
Manifest this update:     Wed 23 Sep 2026 02:04:47 +0000
Manifest next update:     Wed 30 Sep 2026 02:04:47 +0000
Files and hashes:         1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: SoZ7K6NzNsG+VZIn/xJSliFKXqV9Pqq7jjAugl5XtkU=)
                          2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: NXDoT4OlUYq2pn7T1c4gGP0I8F4wFZ9IHq9xnpLAKD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
        Validity
            Not Before: Sep 23 02:04:47 2026 GMT
            Not After : Sep 30 02:04:47 2026 GMT
        Subject: CN=6ab333bf-ff22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ae:4a:d4:ae:a0:c7:c3:c3:5d:ea:ba:91:e6:
                    a8:2a:ec:0f:aa:77:1d:32:3d:08:67:1a:0d:91:ad:
                    98:e8:df:fc:3e:58:18:80:79:a1:54:23:83:bc:bc:
                    a0:74:07:a7:89:48:f9:4a:5e:12:a3:b7:32:f8:d5:
                    19:f7:d2:fa:58:95:09:ec:ed:d4:50:5a:a6:67:ca:
                    ff:e3:c2:1e:bd:ee:81:06:8c:2b:8f:e9:da:9d:f3:
                    ff:b9:5e:cb:60:8e:61:8a:87:45:67:ee:1a:f7:65:
                    30:7a:8e:3a:34:65:2e:13:8e:f2:5c:a2:fc:c1:44:
                    6f:b2:cf:0e:89:11:9e:c4:8e:b2:e8:a3:17:63:12:
                    4c:04:2d:c7:10:92:50:01:29:79:20:2a:ca:ff:ae:
                    76:18:51:bc:65:60:10:8c:f3:2f:39:72:9f:c9:a9:
                    a9:61:65:33:0c:95:d0:80:2b:19:0f:c9:64:b8:66:
                    22:8f:d6:80:24:d4:40:79:27:00:4b:a7:62:28:b8:
                    a3:d3:ed:a1:0d:d9:7b:c4:b1:e9:d5:69:11:eb:1d:
                    38:5c:1f:41:ee:68:36:3b:cf:eb:ef:99:f1:a2:03:
                    56:53:17:59:f4:b4:c6:60:8f:e3:c1:42:bd:d5:62:
                    af:bc:e3:b4:c1:7b:37:1d:2e:51:f6:a3:f6:b6:22:
                    01:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BA:22:17:37:B7:E4:6E:51:DD:CF:08:68:75:72:76:03:9D:47:3A
            X509v3 Authority Key Identifier:
                keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3c:36:6f:0e:ba:47:d0:29:1f:8f:45:09:30:73:d2:4b:72:
         b3:14:9a:3f:1c:73:b5:91:55:77:69:dd:d9:33:e3:6d:b6:1f:
         93:84:7c:83:9f:1a:c1:20:51:dc:77:5c:66:2a:3d:a1:36:ee:
         98:65:b9:a4:2e:b7:c3:f6:bd:16:70:f0:ad:9a:f3:8b:46:7f:
         74:95:7d:3a:d1:5a:ef:ec:7b:2d:e0:89:fd:bf:e5:8b:47:cd:
         bc:10:63:6c:30:93:24:dc:1e:4e:f8:32:c7:8a:33:4c:33:d5:
         7e:ef:3e:42:e4:19:b8:f1:82:a1:fc:22:4a:71:94:6f:fe:a3:
         f8:67:9a:61:0e:14:b9:df:5e:99:ad:2d:12:c0:1c:aa:66:06:
         de:82:14:f6:3e:61:75:c5:24:04:2a:11:54:eb:4f:af:ca:2a:
         89:61:d5:be:9f:32:d5:ef:76:f5:6d:89:0b:13:21:26:78:c7:
         7e:1c:61:2b:2e:34:93:e8:0c:12:4d:2a:78:23:fe:c8:8e:e9:
         16:d9:af:96:6a:e8:ee:6f:a5:7e:57:d8:c9:92:72:4e:7a:9e:
         f8:4e:61:79:0b:95:ee:cb:2e:cd:14:21:37:69:3a:fb:e2:11:
         ce:64:2b:27:dc:5a:d7:46:aa:2a:37:c3:7f:02:b4:d2:86:4c:
         a8:7b:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:53:08 2026 by rpki-client