Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
File:                     b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json)
Hash identifier:          HhauqoNWMiqOSVX0d4qd5GnF/gjyG/7ZP07amcGMsoc=
Subject key identifier:   E7:C4:D3:F3:C2:BD:D6:F0:03:C3:C1:B0:52:C8:6D:CB:2F:44:83:F8
Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
Certificate issuer:       /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
Manifest number:          0151
Signing time:             Sat 17 Oct 2026 05:55:42 +0000
Manifest this update:     Sat 17 Oct 2026 05:55:41 +0000
Manifest next update:     Sat 24 Oct 2026 05:55:41 +0000
Files and hashes:         1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: s4PM1bQhPxjiLSU/JeH20Jz0NZEgsMnfHULSONfl5OA=)
                          2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: hlc/zBoAtbTj6NsgQPISupfKKjQQ309kzeQx+JZUlfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
                          rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 05:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
        Validity
            Not Before: Oct 17 05:55:41 2026 GMT
            Not After : Oct 24 05:55:41 2026 GMT
        Subject: CN=6ad30ddd-5a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ad:78:74:2b:e0:f7:8c:6a:1a:7e:32:55:b3:
                    8c:05:27:02:4e:fd:6a:a2:ec:ee:2c:73:fa:28:a1:
                    27:b7:f0:8b:bd:2f:e8:15:ed:8d:1e:f3:9a:e5:0c:
                    5e:1d:ab:6a:81:2b:f1:b2:70:6f:c6:6c:b6:e5:57:
                    1f:ba:72:61:d1:9e:7f:fd:92:fd:84:ab:d4:bd:3a:
                    d6:d2:d4:35:0e:a9:0d:22:31:19:5c:b7:26:8f:a1:
                    fc:bd:2b:72:9a:2c:94:aa:42:7d:2a:52:c8:7a:d2:
                    c2:bf:24:33:8f:cc:48:8b:a6:6e:15:73:01:e9:e8:
                    c7:8c:8c:ad:26:a8:d4:de:7c:38:6a:58:31:13:e1:
                    67:93:77:af:10:2d:60:9e:6d:65:23:d9:4a:04:2f:
                    10:2d:54:ad:76:f6:a8:fe:44:c6:3d:93:e3:a2:79:
                    77:35:d5:24:2e:bc:0c:bb:2f:6b:d4:64:f1:e4:fb:
                    f2:c9:44:16:f4:83:91:80:66:d1:ad:ab:b1:e9:65:
                    09:13:94:53:ef:41:f8:c9:17:d4:2c:0d:36:b9:3a:
                    71:da:80:00:04:7c:8b:d5:09:a3:31:11:8e:40:77:
                    df:86:56:6d:68:4b:1a:bf:ab:f3:b1:83:10:18:c1:
                    a1:f8:89:ae:a8:83:15:04:f1:ad:08:d0:c1:15:9e:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C4:D3:F3:C2:BD:D6:F0:03:C3:C1:B0:52:C8:6D:CB:2F:44:83:F8
            X509v3 Authority Key Identifier:
                keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:74:18:89:38:8e:bd:88:ca:6f:3f:e8:d7:c0:83:c3:12:ed:
         9d:32:6f:01:c7:b3:e6:8d:0e:50:4b:9b:29:36:55:60:07:f7:
         17:4a:58:c5:10:78:e2:ee:5d:58:4a:2e:64:7c:08:9e:e1:21:
         f4:3f:81:bb:e5:7a:fb:1c:91:8e:02:75:c6:04:94:46:54:15:
         3e:5d:47:cc:78:f1:3c:f9:a3:76:57:21:a4:38:52:4b:7e:54:
         64:25:5b:c7:91:59:4b:f7:21:08:c1:d2:69:b6:0d:25:fb:31:
         c0:e8:19:f5:05:9d:df:63:23:6e:69:6a:63:90:ae:f6:19:59:
         c9:ee:fd:6b:7a:a5:1c:76:ed:79:24:f0:cc:a3:6c:0f:86:8e:
         48:01:11:75:45:2c:55:76:ca:1d:6a:ae:18:4c:7b:2c:dd:85:
         92:3e:2a:f5:4d:b9:6b:17:c7:f9:4c:34:3f:0f:24:69:26:84:
         c7:f6:7c:4c:04:b8:b2:a1:f2:df:18:9b:c9:7d:fb:7d:af:87:
         a6:d8:6a:eb:6a:1d:27:39:cc:b4:25:5d:ab:66:64:ca:f4:d5:
         e7:38:db:34:c5:01:0f:a0:03:f4:0a:aa:2f:33:52:45:69:6e:
         6a:4f:0a:cf:e8:93:6e:b5:87:50:ec:ee:bc:15:01:ee:3f:6d:
         e6:00:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 17:38:59 2026 by rpki-client