Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
File:                     3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft (raw, json)
Hash identifier:          8JoYhPR7VDFlJJw36WmUI3szc/DM0nzgZXvkHONmYx4=
Subject key identifier:   91:F9:EF:07:2B:9A:31:64:A0:15:F7:11:1F:C4:C7:3B:10:CD:0D:01
Authority key identifier: DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6
Certificate issuer:       /CN=A9154515/serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
Manifest number:          96
Signing time:             Fri 23 Oct 2026 08:06:02 +0000
Manifest this update:     Fri 23 Oct 2026 08:06:02 +0000
Manifest next update:     Fri 30 Oct 2026 08:06:02 +0000
Files and hashes:         1: 3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl (hash: /QfX5Cl78O5LzsFvq1BuicJmrzAyKYoamh37Wn5ptho=)
                          2: E7A0471CF5FE11F091C416DF536F56BC.roa (hash: k8QEl3i1mj0JdrQoFekMU1jbFfjtjnZk+vYtYEngXQI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl
                          rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 08:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154515, serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
        Validity
            Not Before: Oct 23 08:06:02 2026 GMT
            Not After : Oct 30 08:06:02 2026 GMT
        Subject: CN=6adb156a-923f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:b5:86:74:da:66:af:67:a2:cd:1c:fb:72:
                    c7:20:d3:7c:5e:40:38:3c:5a:e2:e0:ad:c8:7f:af:
                    d1:72:c7:c2:53:65:1b:75:2c:37:8e:26:be:e6:a5:
                    88:b1:e8:de:42:b9:02:31:7f:25:24:f8:66:db:b0:
                    07:6f:ed:7f:c7:ef:d8:e0:b1:4f:a1:53:6d:ce:7d:
                    c6:d3:1c:8e:0b:a1:be:f5:4c:be:58:26:a4:a5:4e:
                    8a:90:0d:df:38:61:e0:7b:72:bb:eb:ce:a3:84:3e:
                    a0:ef:8f:5e:bc:3e:fc:a0:86:4a:41:31:64:05:9f:
                    52:3a:17:ec:f9:f4:d2:58:ef:18:63:64:be:97:d8:
                    9f:ba:71:fd:49:da:f9:17:95:6d:c3:98:ac:57:70:
                    3c:fa:76:34:f0:2c:28:36:af:8e:37:74:c3:26:d5:
                    49:11:8a:9e:d2:91:14:ff:74:03:e7:95:e1:4f:d4:
                    ea:c0:60:b8:24:78:52:db:85:ce:6e:19:57:92:a7:
                    05:6d:f0:36:e6:a1:9a:fe:ea:ed:b4:40:14:1c:e6:
                    2d:ea:0a:9e:63:e0:4e:8b:f4:a8:19:05:27:f9:03:
                    15:ce:d8:8a:22:6e:76:58:89:87:b2:42:7b:dd:de:
                    75:f6:df:6a:e2:bf:81:84:98:5b:bc:a2:16:99:2d:
                    de:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F9:EF:07:2B:9A:31:64:A0:15:F7:11:1F:C4:C7:3B:10:CD:0D:01
            X509v3 Authority Key Identifier:
                keyid:DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:84:b4:45:cf:06:93:7f:ab:dc:d8:ad:f7:77:a8:5b:51:2f:
         8d:d8:76:b0:ca:b1:73:26:71:8f:ba:9b:e6:b8:ff:d1:42:5a:
         64:e1:7e:3e:fa:ad:4e:5f:a3:fd:5f:53:20:fc:f9:5e:60:f8:
         f6:fb:14:a8:79:dc:97:bf:b3:56:95:38:43:f5:e6:76:bb:85:
         ec:5a:e9:52:54:0b:5a:26:a7:c4:c6:40:1e:28:98:38:11:98:
         bf:b8:f2:ef:38:9e:98:33:c7:45:40:fb:17:d1:b3:15:c2:0e:
         71:af:6b:74:e5:27:8c:aa:9c:c4:43:7e:0c:63:97:70:53:2d:
         46:a4:b2:c2:3d:fd:02:7e:51:0c:aa:15:f9:b6:e9:b4:79:66:
         26:05:bf:57:7c:a4:b7:a9:7f:60:69:75:e0:a7:75:22:72:40:
         5f:4d:fa:9b:ed:84:3d:81:6f:cb:9a:eb:51:1c:83:ca:2c:06:
         36:03:5b:96:33:43:ff:4e:54:02:26:71:ff:fb:c7:91:0b:20:
         53:2e:45:26:18:45:6a:70:45:19:95:30:75:80:96:d8:8d:95:
         e1:8e:7f:96:71:77:a7:3b:70:5d:72:d4:3c:7a:9e:cd:77:9f:
         28:59:b9:b6:83:5e:95:af:64:16:b5:7d:da:ae:f4:f3:4d:46:
         61:51:a6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 18:50:46 2026 by rpki-client