Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
File:                     M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json)
Hash identifier:          NSgEo5JpWca++WMXebFOi1t4mnkM/3gP5f7LWL/kEwQ=
Subject key identifier:   B0:AE:B2:76:5C:4B:81:08:4E:BF:CF:50:9D:9D:15:C9:47:20:B4:28
Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Certificate issuer:       /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Certificate serial:       021F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
Manifest number:          020C
Signing time:             Sat 31 Oct 2026 03:37:37 +0000
Manifest this update:     Sat 31 Oct 2026 03:37:36 +0000
Manifest next update:     Sat 07 Nov 2026 03:37:36 +0000
Files and hashes:         1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: gDmRG7dJ69eDS8fZI/r16UmNFm+RcmMJ5xb0tle5a/Y=)
                          2: B62EB8B8810311F19140D3D06AA30FBC.roa (hash: yrlm89UITOQeEQb//8fs853uuFCWdfVzgxpgMA+QA4o=)
                          3: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (hash: 0apNe0l5FgQvHElgMHv4f+0Whu9gEz8dqP8QgQpe1fU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
                          rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 03:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
        Validity
            Not Before: Oct 31 03:37:36 2026 GMT
            Not After : Nov  7 03:37:36 2026 GMT
        Subject: CN=6ae56280-4853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:a4:03:40:0b:8e:31:dc:f1:40:34:3c:90:
                    5b:b5:79:4a:1f:83:61:77:e7:fc:0b:c9:fe:78:de:
                    22:dc:b9:4a:a7:33:1f:fd:e8:ae:7f:1a:84:d7:d9:
                    30:96:cd:31:fe:59:4d:c7:63:54:fb:a5:e5:fa:eb:
                    d0:61:5d:ad:96:e4:7b:87:43:02:7e:7e:fa:fd:4d:
                    53:e8:8a:58:5e:6e:37:8c:42:ec:42:3d:8b:f6:4c:
                    a5:ad:64:8f:70:64:73:95:c9:c7:b9:11:f4:33:8f:
                    03:70:72:97:be:b6:17:1d:fa:8f:9c:89:fb:2d:bb:
                    f6:1d:d5:13:28:af:bf:b4:f8:67:c1:58:8f:ca:e2:
                    72:fc:46:ea:6a:14:e1:cd:e5:f9:d3:ec:bb:29:34:
                    a6:aa:89:51:92:a6:6a:8f:11:5c:4b:1e:f5:aa:07:
                    c0:0b:95:e7:20:45:eb:97:6e:17:73:33:0f:6c:2f:
                    bf:aa:d0:12:b6:cf:0c:51:92:be:67:14:7d:f4:cf:
                    fb:c0:9b:fe:ad:78:fb:fb:fa:28:b9:2e:e9:f8:78:
                    e7:99:9c:87:f7:29:2c:ee:c8:2a:36:3e:60:9f:3c:
                    89:c8:22:90:d7:ee:da:69:80:13:99:3b:17:4c:ba:
                    a2:2a:d7:23:64:11:2f:3d:74:af:73:aa:b8:b5:5a:
                    b7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AE:B2:76:5C:4B:81:08:4E:BF:CF:50:9D:9D:15:C9:47:20:B4:28
            X509v3 Authority Key Identifier:
                keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6f:84:43:af:4c:c2:9a:67:83:6b:2c:cc:0e:49:20:6d:51:
         f0:80:c5:39:74:da:59:e8:c3:5f:82:5a:d3:5f:66:fc:4a:f5:
         da:5c:cc:a2:ff:b1:a6:92:f5:f7:66:14:f9:2d:da:51:9c:cb:
         df:dc:52:cb:b7:26:fa:84:d5:ee:c9:82:07:23:e8:30:9c:be:
         8d:0d:e1:25:f6:53:9f:b7:6c:68:72:57:d4:c3:0c:2e:07:5c:
         b5:eb:ef:d7:d3:9e:de:0f:fe:51:2b:f8:7b:4e:db:ae:4c:73:
         f3:c2:1a:60:d4:7a:ec:71:0c:3e:5c:0f:4b:9a:b7:c8:c1:e5:
         a4:ad:be:60:0c:a6:a1:07:32:4b:63:c5:77:e0:01:be:8c:25:
         4f:72:8c:e6:68:60:77:49:2f:1d:f1:34:d8:35:97:13:ec:b2:
         db:f1:57:d7:ec:62:c0:ae:27:89:96:61:66:1d:02:f3:13:9c:
         41:4a:98:0e:c2:45:80:c5:8d:37:9a:0c:f9:1c:42:fe:7b:39:
         dc:d4:5a:16:84:19:80:de:56:ce:37:52:8b:1a:ea:9c:af:e1:
         49:91:61:34:71:ff:de:9b:62:6f:f2:a1:cf:59:69:11:55:81:
         3b:05:a2:c2:e5:4e:d9:26:c9:1c:ec:44:b6:2c:c6:d9:57:59:
         a1:31:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:54:34 2026 by rpki-client