Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
File:                     3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json)
Hash identifier:          MuEDjFL5JPYvID0I7GoQYZV+WTLkYmhnNd4YSqHXhE8=
Subject key identifier:   6E:E6:CD:77:3C:05:2D:44:F7:79:F2:45:A4:EB:05:96:5E:90:2A:4A
Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
Certificate issuer:       /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
Manifest number:          017D
Signing time:             Sat 17 Oct 2026 05:17:57 +0000
Manifest this update:     Sat 17 Oct 2026 05:17:57 +0000
Manifest next update:     Sat 24 Oct 2026 05:17:57 +0000
Files and hashes:         1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: MQXuudeiNRzHka8CP0Mpv7lvEU+C7/XkIQqvjU9/b/o=)
                          2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: QzecNRiadvNS3uXz4puDDg8aeFgkZFgzMCT4KbxjYQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
                          rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 05:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
        Validity
            Not Before: Oct 17 05:17:57 2026 GMT
            Not After : Oct 24 05:17:57 2026 GMT
        Subject: CN=6ad30505-17ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:d8:98:65:b1:bb:ad:46:27:76:1e:63:07:
                    5a:c9:3e:5a:eb:ce:ae:e9:86:1b:a0:b6:5a:c5:b1:
                    33:5e:85:cd:1f:aa:6d:24:e9:0c:ff:c2:2a:37:a7:
                    bc:56:a0:9f:08:bc:a0:02:72:cf:31:d3:3a:16:10:
                    75:7d:33:f6:55:dd:83:35:d4:b3:8f:74:11:92:cd:
                    ad:aa:35:3b:3b:4f:c5:82:52:90:9a:9f:65:93:09:
                    bd:ac:d0:1a:84:02:2a:cc:34:27:e9:97:a7:7a:b5:
                    53:b0:d4:a3:a5:09:c6:2d:83:dc:e7:70:ca:03:06:
                    16:c3:ac:1f:f8:3a:a0:67:92:d7:b1:68:39:88:90:
                    29:09:2f:de:7c:e2:19:c1:d9:f6:f3:10:90:b8:81:
                    6a:bc:3c:6a:c7:bd:39:a8:fe:27:de:a4:7a:23:15:
                    22:a2:24:d2:80:0e:58:7b:71:25:7c:9a:62:bf:48:
                    a2:bc:52:3c:c3:3f:33:90:61:13:b1:02:74:57:09:
                    1d:61:06:7c:63:44:64:67:75:67:36:09:1d:d1:d5:
                    2c:15:a9:74:33:dc:dc:bd:1f:7c:28:f1:fb:e0:a0:
                    6f:95:b5:68:22:38:6d:5e:fe:60:15:f3:92:6f:4f:
                    d9:42:a7:26:a8:0b:77:bd:ba:92:93:72:0e:4a:f5:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E6:CD:77:3C:05:2D:44:F7:79:F2:45:A4:EB:05:96:5E:90:2A:4A
            X509v3 Authority Key Identifier:
                keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f0:51:b1:f6:2a:05:ac:7e:c4:9a:e7:0a:3e:34:74:e1:f8:
         ce:3e:9b:b1:70:70:2f:94:cf:a4:9b:dc:69:5d:1a:d0:b6:ad:
         ab:f4:51:46:2f:a1:11:50:b7:c8:a0:4b:1d:01:89:89:cb:56:
         a2:75:1d:e7:6b:ba:0e:30:f7:fd:2c:34:5a:0f:79:50:b3:c5:
         dc:c9:cf:ce:a5:38:15:43:ea:82:34:4d:b1:29:b4:85:9e:79:
         93:33:3b:8a:92:3c:ec:25:ed:78:09:12:07:aa:6c:72:a0:7f:
         1e:5f:1e:bb:98:2b:71:d2:26:d5:71:cb:8f:74:ab:7b:fe:92:
         84:8a:c6:93:b3:87:e6:69:f4:7b:0b:c5:77:9d:10:84:ab:58:
         dd:56:08:c7:10:fe:5a:94:a7:37:5f:89:a8:47:78:5d:3e:d1:
         00:bb:a0:80:3d:ca:9c:d8:05:87:99:93:85:28:24:d1:26:40:
         72:10:c0:5f:63:02:f9:a1:87:49:03:0a:fc:52:76:80:7a:18:
         39:c5:bb:04:48:29:89:df:bb:fb:b7:7e:95:ce:50:73:a5:87:
         a7:b7:a1:1b:2e:2e:c3:f6:3d:68:ec:72:90:b2:cf:42:04:b8:
         8e:2e:44:3a:8f:bc:93:9d:28:a1:72:7c:f1:e8:4c:69:68:ae:
         46:71:af:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY2REMxMTAvBgNVBAUTKERENTc0NjBGMEMxMkJFMDU0NjEzQTJGNDI5NjdCMDdE
QTU2ODdCRjAwHhcNMjYxMDE3MDUxNzU3WhcNMjYxMDI0MDUxNzU3WjAYMRYwFAYD
VQQDEw02YWQzMDUwNS0xN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvp7YmGWxu61GJ3YeYwdayT5a686u6YYboLZaxbEzXoXNH6ptJOkM/8IqN6e8
VqCfCLygAnLPMdM6FhB1fTP2Vd2DNdSzj3QRks2tqjU7O0/FglKQmp9lkwm9rNAa
hAIqzDQn6ZenerVTsNSjpQnGLYPc53DKAwYWw6wf+DqgZ5LXsWg5iJApCS/efOIZ
wdn28xCQuIFqvDxqx705qP4n3qR6IxUioiTSgA5Ye3ElfJpiv0iivFI8wz8zkGET
sQJ0VwkdYQZ8Y0RkZ3VnNgkd0dUsFal0M9zcvR98KPH74KBvlbVoIjhtXv5gFfOS
b0/ZQqcmqAt3vbqSk3IOSvX1SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG7mzXc8
BS1E93nyRaTrBZZekCpKMB8GA1UdIwQYMBaAFN1XRg8MEr4FRhOi9ClnsH2laHvw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy81QTE4MkM3Qzg1
MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3ZnVkdFNkwwS1dld2ZhVm9l
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2VfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjZEQy81QTE4MkM3Qzg1MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3Zn
VkdFNkwwS1dld2ZhVm9lX0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkfBRsfYqBax+xJrnCj40dOH4zj6bsXBwL5TPpJvcaV0a0Latq/RRRi+hEVC3
yKBLHQGJictWonUd52u6DjD3/Sw0Wg95ULPF3MnPzqU4FUPqgjRNsSm0hZ55kzM7
ipI87CXteAkSB6pscqB/Hl8eu5grcdIm1XHLj3Sre/6ShIrGk7OH5mn0ewvFd50Q
hKtY3VYIxxD+WpSnN1+JqEd4XT7RALuggD3KnNgFh5mThSgk0SZAchDAX2MC+aGH
SQMK/FJ2gHoYOcW7BEgpid+7+7d+lc5Qc6WHp7ehGy4uw/Y9aOxykLLPQgS4ji5E
Oo+8k50ooXJ88ehMaWiuRnGvvg==
-----END CERTIFICATE-----
Generated at Sun Oct 18 14:39:21 2026 by rpki-client