Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
File:                     3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft (raw, json)
Hash identifier:          GRBOHAOLDz5BlOb7aN3c7MbYGaCDsZbLFythQZRpE14=
Subject key identifier:   86:F6:9E:D3:6B:01:AB:81:33:0D:D6:2E:0E:92:44:39:22:65:D5:69
Authority key identifier: DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20
Certificate issuer:       /CN=A9113C02/serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720
Certificate serial:       094B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
Manifest number:          298E
Signing time:             Thu 08 Oct 2026 16:18:23 +0000
Manifest this update:     Thu 08 Oct 2026 16:18:23 +0000
Manifest next update:     Thu 15 Oct 2026 16:18:23 +0000
Files and hashes:         1: 3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl (hash: DAdGSc8D9EcFjxcB/wT36le2T7pyfHeTjL73mNYb+Ak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl
                          rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2379 (0x94b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113C02, serialNumber=DE78F7BD5924A8067490BFBD32E47E7FFAB67720
        Validity
            Not Before: Oct  8 16:18:23 2026 GMT
            Not After : Oct 15 16:18:23 2026 GMT
        Subject: CN=6ac7c24f-0a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:9f:96:3c:1e:66:b8:a3:1d:a9:ba:b6:d1:
                    51:89:ae:ea:b2:17:cc:34:45:b3:79:a3:df:fd:7a:
                    f0:51:7b:76:e5:a7:b8:61:fd:f0:30:a0:d8:af:4d:
                    15:0c:a9:80:35:96:02:49:a0:81:7c:f1:36:77:27:
                    ea:9d:a1:73:5a:90:c1:b2:04:b5:78:6c:99:58:7d:
                    b0:41:84:b8:a3:0a:ab:0f:a2:82:64:30:67:70:63:
                    92:df:c7:d3:58:6f:5c:04:fe:01:f3:54:b8:23:f8:
                    0a:2e:3f:73:79:6b:53:7b:15:d4:e1:5d:e6:d7:b5:
                    4a:04:be:ff:d0:2e:4f:9f:5a:4c:67:e4:82:64:8b:
                    02:ca:da:b8:42:a0:47:e6:5e:fb:cc:25:9f:c7:aa:
                    92:f0:d7:a8:ad:f9:c4:37:f7:70:62:39:cb:34:d0:
                    72:1b:b9:2a:1e:5e:94:2c:d6:1a:7d:50:f5:24:4e:
                    16:90:66:9b:da:2d:60:8a:aa:03:c0:d8:55:47:b0:
                    36:8d:69:72:c4:34:fb:24:e4:37:22:83:98:ee:7d:
                    5a:18:91:bc:d9:44:18:e4:fa:75:34:19:6a:20:f3:
                    8c:02:16:10:04:bb:54:82:af:a0:2c:a2:05:66:7e:
                    7b:0a:0e:ee:a6:c7:52:48:e6:3c:71:8c:f7:da:6c:
                    03:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F6:9E:D3:6B:01:AB:81:33:0D:D6:2E:0E:92:44:39:22:65:D5:69
            X509v3 Authority Key Identifier:
                keyid:DE:78:F7:BD:59:24:A8:06:74:90:BF:BD:32:E4:7E:7F:FA:B6:77:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/3nj3vVkkqAZ0kL-9MuR-f_q2dyA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d3:2f:b4:a1:b5:74:bf:e1:5e:5b:84:69:91:ab:a3:e9:ac:
         1a:8d:5d:4e:72:6d:19:9e:ea:2d:6e:bb:1c:4a:08:71:af:97:
         c7:13:a2:5f:87:75:e7:c6:50:29:4b:fc:98:fc:6d:ed:a1:90:
         e5:93:e8:77:98:44:fa:91:4b:1d:85:19:9c:f8:c2:63:03:da:
         6c:f2:56:69:6b:2c:68:cb:6b:a9:39:93:fd:44:3e:0e:ba:95:
         45:b3:70:62:7f:8f:05:d4:8d:26:29:32:f3:8f:30:c4:31:ff:
         10:c6:60:45:08:5c:bd:31:4f:08:5c:f9:76:a1:3c:37:d8:e0:
         05:bc:9a:20:77:02:e1:db:b2:2c:15:6d:53:7e:ce:e9:32:fb:
         6e:1c:e7:a3:01:57:8f:c7:b9:55:40:a8:e5:a6:00:f6:c7:7a:
         74:47:b8:21:1a:2f:35:76:4c:49:cc:18:6a:48:d0:f6:22:72:
         de:a5:ec:7a:a4:dc:60:99:8a:5a:39:d8:ef:9c:6c:f4:cd:5f:
         a4:ba:ac:d8:3e:4a:da:5a:4c:ac:41:1f:52:83:78:ac:14:62:
         63:35:02:ab:a1:d5:0a:5b:0f:a6:12:62:6b:19:fe:c4:f1:e6:
         2c:22:f0:ed:9f:5f:51:d4:9d:b4:cb:26:84:2e:96:e8:dc:8f:
         b8:2f:dc:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNDMDIxMTAvBgNVBAUTKERFNzhGN0JENTkyNEE4MDY3NDkwQkZCRDMyRTQ3RTdG
RkFCNjc3MjAwHhcNMjYxMDA4MTYxODIzWhcNMjYxMDE1MTYxODIzWjAYMRYwFAYD
VQQDEw02YWM3YzI0Zi0wYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAstmfljweZrijHam6ttFRia7qshfMNEWzeaPf/XrwUXt25ae4Yf3wMKDYr00V
DKmANZYCSaCBfPE2dyfqnaFzWpDBsgS1eGyZWH2wQYS4owqrD6KCZDBncGOS38fT
WG9cBP4B81S4I/gKLj9zeWtTexXU4V3m17VKBL7/0C5Pn1pMZ+SCZIsCytq4QqBH
5l77zCWfx6qS8NeorfnEN/dwYjnLNNByG7kqHl6ULNYafVD1JE4WkGab2i1giqoD
wNhVR7A2jWlyxDT7JOQ3IoOY7n1aGJG82UQY5Pp1NBlqIPOMAhYQBLtUgq+gLKIF
Zn57Cg7upsdSSOY8cYz32mwDFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIb2ntNr
AauBMw3WLg6SRDkiZdVpMB8GA1UdIwQYMBaAFN54971ZJKgGdJC/vTLkfn/6tncg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw
NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FBWjBrTC05TXVSLWZfcTJk
eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNuajN2VmtrcUFaMGtMLTlNdVItZl9xMmR5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi8zbmozdlZra3FB
WjBrTC05TXVSLWZfcTJkeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAotMvtKG1dL/hXluEaZGro+msGo1dTnJtGZ7qLW67HEoIca+XxxOiX4d158ZQ
KUv8mPxt7aGQ5ZPod5hE+pFLHYUZnPjCYwPabPJWaWssaMtrqTmT/UQ+DrqVRbNw
Yn+PBdSNJiky848wxDH/EMZgRQhcvTFPCFz5dqE8N9jgBbyaIHcC4duyLBVtU37O
6TL7bhznowFXj8e5VUCo5aYA9sd6dEe4IRovNXZMScwYakjQ9iJy3qXseqTcYJmK
WjnY75xs9M1fpLqs2D5K2lpMrEEfUoN4rBRiYzUCq6HVClsPphJiaxn+xPHmLCLw
7Z9fUdSdtMsmhC6W6NyPuC/cVg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 21:10:19 2026 by rpki-client