Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
File:                     3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json)
Hash identifier:          u63GvIruzAuJ4LxZ2BuawAq9srxaQffeAFU4nhapN3c=
Subject key identifier:   B1:B5:56:21:0E:05:E6:16:34:F0:DE:51:5C:C8:5F:3B:61:08:E8:CA
Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E
Certificate issuer:       /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
Certificate serial:       0B41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
Manifest number:          0B34
Signing time:             Mon 02 Nov 2026 19:24:34 +0000
Manifest this update:     Mon 02 Nov 2026 19:24:33 +0000
Manifest next update:     Mon 09 Nov 2026 19:24:33 +0000
Files and hashes:         1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: FqF3raDxTjlxhANoSJopBxQxIs7bQ6JF8BhFp91oLtA=)
                          2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: P/kcrXkZBOpELFUVRD4sym1i0y2tovzreFKC78AoiZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl
                          rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 19:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2881 (0xb41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
        Validity
            Not Before: Nov  2 19:24:33 2026 GMT
            Not After : Nov  9 19:24:33 2026 GMT
        Subject: CN=6ae8e371-3952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:34:ca:6e:47:00:6d:f7:c2:1c:5e:a6:56:
                    20:fc:83:95:fe:6c:a0:e8:8a:6a:49:c9:4d:1d:30:
                    3d:3f:be:fa:da:3f:d1:ee:bb:7f:85:9a:34:6b:fe:
                    03:50:db:45:81:76:1a:6d:30:d5:69:64:91:4a:f3:
                    aa:88:70:da:b0:e7:2e:41:1c:bf:92:d6:ec:5b:73:
                    f1:6a:38:26:7a:30:28:86:76:21:a3:7c:d8:86:52:
                    92:78:83:d9:55:55:fb:ed:26:6e:55:f4:da:9c:2d:
                    0a:8b:a6:81:02:d2:13:24:b8:63:4f:8c:25:a1:1f:
                    26:fb:45:55:07:3d:26:45:d5:20:25:9b:91:75:33:
                    25:d9:b9:7f:ec:1e:33:49:19:2d:cd:ca:03:99:69:
                    cf:6b:56:bf:96:ba:f1:a5:e2:dc:f0:55:1d:22:79:
                    7a:05:93:57:df:8f:e2:ab:69:37:63:1c:b9:1d:9d:
                    df:22:a7:29:87:62:f9:c0:8f:74:8c:af:ea:a0:0e:
                    82:de:e1:aa:ba:49:54:77:6c:a0:d4:3f:7e:7d:65:
                    c3:0c:50:c7:00:77:5a:8a:cc:8b:77:68:6c:9b:1d:
                    d8:2a:a1:66:87:7e:2e:0e:25:3a:3f:26:ba:69:6e:
                    19:9c:fa:52:64:6f:d3:e9:6e:9c:43:8f:5d:67:42:
                    c0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B5:56:21:0E:05:E6:16:34:F0:DE:51:5C:C8:5F:3B:61:08:E8:CA
            X509v3 Authority Key Identifier:
                keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:db:ef:72:e3:cd:0f:b1:c1:70:5a:db:a5:d1:d6:30:fd:0f:
         74:e6:26:10:68:1e:dc:47:98:55:85:f6:41:67:ef:cd:03:d1:
         ae:61:85:10:7e:74:8a:1d:dd:9e:35:36:0e:0a:e1:e2:14:df:
         86:3a:96:7f:2f:93:4a:14:e4:8c:d3:e9:63:da:3c:b6:10:eb:
         f7:cc:ec:3d:a3:3a:09:21:b2:ac:52:99:ff:66:6f:3a:3e:ae:
         07:97:f9:2d:21:3f:1a:7e:c2:54:ce:51:bd:92:36:bb:9d:a8:
         2c:9d:80:2f:9a:02:d8:98:f4:96:2b:bf:c3:1d:63:e2:63:bf:
         9a:94:82:46:0e:0d:40:59:a9:c0:c9:10:80:b5:73:f1:fb:e4:
         fe:96:ef:f7:d6:d3:78:75:c5:24:4b:d3:7e:08:de:f0:5e:55:
         35:8f:61:b2:b3:8f:6a:b2:74:cb:0c:f0:3b:ac:21:cd:fb:ba:
         c7:fa:7a:28:12:e1:4c:2e:96:58:87:31:30:02:07:3c:2b:28:
         dd:9a:a7:3a:00:5e:2e:89:3c:c0:f1:05:1e:80:91:33:40:af:
         4f:f8:5b:ba:8e:8b:74:7d:5f:65:52:a8:0d:9a:11:45:f1:2b:
         c3:e8:08:13:03:6d:92:d3:f8:d4:1e:e5:fc:65:07:89:93:c6:
         5c:eb:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 04:43:10 2026 by rpki-client