Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
File:                     31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json)
Hash identifier:          jBBdh0m/30RfJdnjGCzq7HYepr+gpAJGQN72TZm55bM=
Subject key identifier:   6D:BF:C1:98:F1:B8:01:E6:C6:9B:83:15:FE:74:02:B1:4B:33:22:8D
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Certificate issuer:       /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
Manifest number:          016A
Signing time:             Wed 23 Sep 2026 04:54:06 +0000
Manifest this update:     Wed 23 Sep 2026 04:54:05 +0000
Manifest next update:     Wed 30 Sep 2026 04:54:05 +0000
Files and hashes:         1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: opYNRCAaNQdz/GVErNxtozwCS4EUOgarA9FGmZP+XlE=)
                          2: 934C7D46FBAF11F08EB01E575F6F56BC.roa (hash: T7EaNfKZqoPd4uuGaZYXGqpfHmxAJUJXEQfDEFPp/W4=)
                          3: 1E388DB49A2511F1832A4CB45711F970.roa (hash: TiT9lGln0Eh4KjjUpQfi3tArVwegKeJ1yIafSY4m8LM=)
                          4: E8E690809A2811F1AC58E4345911F970.roa (hash: m9m0P1oed7W/3ZAbI8jvAxoQb72mghkUJhemhrbvgNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
        Validity
            Not Before: Sep 23 04:54:05 2026 GMT
            Not After : Sep 30 04:54:05 2026 GMT
        Subject: CN=6ab35b6e-3379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:ac:d7:bc:4b:69:c3:a4:e8:a3:c3:37:5a:
                    10:8e:ef:13:bc:60:44:c9:07:21:64:34:7c:69:a2:
                    89:fe:09:21:d7:da:b4:d7:05:bf:44:78:94:c8:34:
                    9b:05:cb:c4:0a:e1:56:d6:1b:6c:6f:1c:58:62:83:
                    f5:63:74:f7:49:99:42:5b:92:9c:fc:50:b2:7d:f5:
                    d7:73:bd:94:3f:d4:25:df:38:1e:e0:ac:cf:9f:bd:
                    e7:f7:47:8c:ad:2e:cd:c0:f0:8d:dd:1f:90:47:1e:
                    77:d1:e7:09:49:72:6e:9b:a4:bc:6b:08:4a:0b:e7:
                    9a:3c:69:38:be:f2:4d:ff:1e:23:9a:e4:6c:ed:2c:
                    43:e6:50:57:27:f8:4c:5d:79:56:41:fc:ff:44:4d:
                    bf:df:ef:a2:c0:3b:8e:a5:33:a7:ac:5a:05:87:1e:
                    90:df:ec:27:3c:7e:d4:63:9d:92:09:f6:f0:2a:92:
                    4d:2f:f1:c4:71:09:c3:f6:c1:49:b9:2a:e5:75:b4:
                    b6:c7:9f:76:52:47:86:bc:8f:ef:23:27:e3:4a:f8:
                    59:c2:77:89:7b:d7:aa:93:60:f1:97:b0:cf:4c:a5:
                    d6:e8:df:d7:4b:ee:d9:6d:01:cc:fd:50:eb:cd:2d:
                    57:98:56:9e:ee:ae:a3:52:5a:3f:3a:ea:ed:79:23:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BF:C1:98:F1:B8:01:E6:C6:9B:83:15:FE:74:02:B1:4B:33:22:8D
            X509v3 Authority Key Identifier:
                keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:02:5d:e3:15:48:0b:1a:62:7e:92:94:da:48:b2:cd:d3:15:
         52:45:dd:8f:0f:5b:1e:8a:8f:09:fb:06:fd:02:25:00:28:44:
         2f:51:b5:71:38:f7:7d:eb:12:68:4c:8e:67:81:6c:ab:1d:98:
         d0:41:19:66:35:b8:3f:32:ed:9c:0c:e5:eb:9c:f1:3f:fa:60:
         29:6e:f9:4b:4e:3d:a7:f6:c0:7c:48:6b:79:03:78:0a:b3:26:
         b0:c8:40:d9:bb:b5:5f:46:93:4f:43:22:e3:9e:d7:75:3c:1d:
         4e:17:ee:2f:6c:a5:e7:43:a1:69:3a:15:5e:ef:85:bb:2d:31:
         3d:9a:72:6f:8c:6f:38:a8:f9:94:a4:0f:7a:2f:52:14:34:cc:
         da:e3:28:2b:33:6b:b3:b5:49:ab:de:80:36:42:ad:aa:62:45:
         b7:e0:64:2e:ea:88:5c:cf:24:7a:88:fc:9d:90:4b:bd:ec:41:
         5b:3b:75:1f:f8:86:b3:f7:92:aa:c3:81:d1:90:03:4f:18:e8:
         71:d3:ed:8d:af:41:aa:ae:df:96:3a:ba:5c:90:ae:ca:d7:a3:
         fb:5a:d2:93:81:b9:04:4f:47:12:a0:1a:20:9c:ac:da:de:87:
         63:fb:9c:62:c0:0c:3c:fe:01:80:e6:8b:b7:6f:e5:59:06:e4:
         2a:04:02:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:54:30 2026 by rpki-client