Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
File:                     3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json)
Hash identifier:          BVJw2EBru8boV9f0Lki9aUcU6bTphgaSzU8U11dFfqY=
Subject key identifier:   1C:42:7F:CD:4F:D0:1B:BE:6F:16:7F:6F:11:8E:E6:FD:7E:42:7E:69
Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
Certificate issuer:       /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
Manifest number:          0248
Signing time:             Wed 07 Oct 2026 02:51:09 +0000
Manifest this update:     Wed 07 Oct 2026 02:51:08 +0000
Manifest next update:     Wed 14 Oct 2026 02:51:08 +0000
Files and hashes:         1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: 8lzHa+5C6YVidQUB648HdQNveyYia8KKD8TaxVq5HvQ=)
                          2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: z/CeXg1zE451kjdiV+L83Kbr1l7Vh3IeBEWeCzKi+60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl
                          rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
        Validity
            Not Before: Oct  7 02:51:08 2026 GMT
            Not After : Oct 14 02:51:08 2026 GMT
        Subject: CN=6ac5b39c-df4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:62:48:4c:51:2a:4f:2e:9b:da:55:70:ba:14:
                    9a:67:8c:e8:6c:ce:64:b1:bb:c4:1d:55:70:49:54:
                    5c:dc:e3:6d:cc:25:64:38:a4:06:1d:84:6b:02:46:
                    fb:70:cd:53:67:40:d4:43:a4:2b:75:71:e7:3c:25:
                    d6:dc:ad:d5:b0:62:cf:db:21:f4:4d:23:97:49:5c:
                    54:ad:d0:8f:90:a0:28:6c:22:92:7e:a7:63:37:51:
                    bd:6f:e7:b6:34:be:c3:7a:73:a9:f3:41:d9:4d:7e:
                    eb:0a:da:fa:ff:7d:2e:01:89:69:a1:ac:34:9b:fa:
                    c6:60:6d:17:64:e7:a8:0b:10:ce:72:39:fa:7a:e7:
                    63:24:14:72:c0:a3:fb:e6:ff:5c:84:6b:f7:8a:ac:
                    df:f1:af:47:cb:f8:0d:27:fd:61:20:d7:30:00:58:
                    24:43:02:70:5a:e6:97:58:84:eb:8d:87:51:80:24:
                    38:bc:b8:60:f9:68:aa:ef:11:7f:89:a9:f8:8e:65:
                    18:b0:96:99:6d:6b:31:7f:2b:83:fc:c4:bc:c7:47:
                    51:0e:35:22:18:a0:eb:58:32:5c:d4:d2:4e:63:66:
                    58:4c:e4:e4:62:6f:80:2a:39:71:b4:9d:2c:82:5e:
                    53:ec:c3:3c:0e:90:4e:72:3e:07:78:38:cf:09:70:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:42:7F:CD:4F:D0:1B:BE:6F:16:7F:6F:11:8E:E6:FD:7E:42:7E:69
            X509v3 Authority Key Identifier:
                keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:22:40:47:56:e4:7a:34:3c:1b:c3:0f:03:53:f2:68:29:7a:
         63:53:89:43:8f:c2:ca:e4:a5:15:42:e7:ef:8b:ff:52:3b:10:
         99:e1:29:be:cc:73:04:04:aa:60:fa:7b:a4:3a:95:67:09:3a:
         de:cf:74:ad:67:b2:c2:1e:7c:4c:6a:96:15:20:03:95:07:67:
         5a:a0:d5:c7:22:ac:ae:4f:d6:9a:cc:91:30:0b:10:a0:01:9e:
         ff:27:98:02:86:e9:b5:a3:73:51:0f:20:f2:60:89:84:eb:6d:
         e2:0e:9e:7c:e7:be:05:df:c1:26:97:f0:13:19:15:9e:b9:d9:
         86:7b:db:de:82:6f:45:48:19:f7:46:6d:1d:b0:b4:83:4f:dd:
         80:7c:03:a6:7c:76:04:f3:03:cd:26:2c:07:22:aa:00:83:4c:
         61:f6:b3:a3:ee:6d:88:1c:f2:eb:65:89:f8:49:44:2e:dd:d6:
         05:03:1c:26:68:fb:61:db:50:57:3a:6b:07:ab:c2:40:e1:43:
         c9:6b:f2:9e:3a:bb:f7:09:88:e6:95:df:69:b1:ef:e9:f8:eb:
         ec:a8:e7:e4:c4:e5:e7:20:9e:bb:be:a4:6c:08:d1:cf:1b:cb:
         fe:96:48:6b:46:b6:3d:15:2a:88:bb:17:5f:4f:ec:ea:a1:9c:
         f4:fc:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 16:08:49 2026 by rpki-client