Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
File:                     3n3GT5n2JAYkuhPSFUlETEJLVG8.mft (raw, json)
Hash identifier:          0HYG+qjY48g/S47PsL5CXEUyZodYffrELfunRGXV2co=
Subject key identifier:   AD:68:2C:27:4D:06:80:7A:3F:FA:39:C9:59:13:73:17:DC:65:B8:07
Authority key identifier: DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F
Certificate issuer:       /CN=A91567EF/serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
Manifest number:          80
Signing time:             Wed 07 Oct 2026 08:24:00 +0000
Manifest this update:     Wed 07 Oct 2026 08:23:59 +0000
Manifest next update:     Wed 14 Oct 2026 08:23:59 +0000
Files and hashes:         1: 3n3GT5n2JAYkuhPSFUlETEJLVG8.crl (hash: 2zzTPK198kzeZXSBBe8xciOfGRmCAs/OgtHRp1YtykU=)
                          2: 616D1BAC6B9C11F1A5AE9DAA6D47A888.roa (hash: Q8pRs/zL4LH+ArnuogEwPHVYr3czyBo1S7DW7cvjosM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl
                          rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91567EF, serialNumber=DE7DC64F99F6240624BA13D21549444C424B546F
        Validity
            Not Before: Oct  7 08:23:59 2026 GMT
            Not After : Oct 14 08:23:59 2026 GMT
        Subject: CN=6ac601a0-4922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:80:bd:ae:af:93:0b:6f:7c:b9:78:9d:43:
                    de:ba:56:e4:4c:5f:66:bb:58:31:a5:d1:d7:f8:75:
                    5b:6a:31:9d:f1:fb:e3:db:50:33:4d:37:3c:21:08:
                    ad:64:b4:50:43:c6:d4:c5:b4:f2:df:72:92:21:91:
                    98:ef:8b:3e:98:ea:93:0f:90:7e:53:5a:1c:d8:c4:
                    d8:da:86:5e:a1:fa:49:89:a8:52:24:28:2c:98:4f:
                    f4:09:82:63:1b:3c:2c:61:15:98:5a:f6:23:2d:47:
                    d1:5f:87:0f:1d:44:aa:ec:d9:49:ae:91:ae:cd:de:
                    19:33:a0:7c:44:27:37:8b:74:59:ca:71:c3:fc:39:
                    50:51:39:87:cb:1c:0d:63:ff:87:e6:a1:3d:c9:e8:
                    04:51:42:55:d8:dd:b1:38:66:d6:0e:3c:1d:9e:9e:
                    72:87:1d:0e:5d:57:99:9d:a4:59:70:04:94:44:77:
                    e1:20:3a:f7:dc:56:e2:67:f2:75:a4:a3:2a:d7:2c:
                    fd:ac:5f:1e:af:3e:d8:94:74:2f:9d:5f:f0:1a:a5:
                    5d:cb:93:d1:3d:a1:c2:be:aa:ea:52:8f:b8:b9:51:
                    26:a1:c6:48:43:4c:09:e0:f1:12:7a:61:c8:ce:4e:
                    fe:21:67:0c:8d:c3:57:ed:81:6e:ba:3a:4b:06:81:
                    4c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:68:2C:27:4D:06:80:7A:3F:FA:39:C9:59:13:73:17:DC:65:B8:07
            X509v3 Authority Key Identifier:
                keyid:DE:7D:C6:4F:99:F6:24:06:24:BA:13:D2:15:49:44:4C:42:4B:54:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3n3GT5n2JAYkuhPSFUlETEJLVG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567EF/5C9C8AC0113F11F1821E48F0203D8C67/3n3GT5n2JAYkuhPSFUlETEJLVG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b5:62:db:0c:72:5c:bf:07:5f:05:2b:0d:b8:7f:ef:d9:5a:
         c0:1b:a5:41:5e:41:19:7e:41:2a:5f:a0:1c:b9:27:81:8b:d2:
         39:11:31:33:16:df:a5:c6:9e:c8:55:90:78:fd:ae:69:92:40:
         31:66:34:db:32:29:a2:a1:ec:8f:3f:13:9a:8b:f3:21:91:8a:
         b5:4e:fd:52:dc:13:87:7b:c6:53:f4:c4:6a:d9:f1:c8:71:14:
         f7:bc:9a:af:d7:3f:86:2f:2c:78:31:c7:1e:2d:0e:50:ce:7f:
         e8:8f:48:3d:7a:1b:1b:ca:18:63:34:76:7c:13:2a:06:80:77:
         3c:4d:52:85:b8:d5:a3:70:07:17:3b:3e:43:c6:05:44:ea:07:
         88:16:f5:54:84:e5:1d:01:1c:60:d2:19:0d:92:ef:a6:b1:62:
         6d:69:a5:69:28:77:76:0d:1e:5f:58:d5:36:d6:aa:35:4c:e7:
         55:50:84:05:b4:2b:4e:4d:c1:c7:3c:c5:67:69:f4:c2:c1:44:
         eb:ee:9e:bb:b4:9a:c4:97:85:ba:3c:f1:52:cd:45:44:8f:53:
         ea:44:4d:12:0c:8f:77:4c:e3:56:46:75:82:d4:5e:8f:4b:8d:
         a2:e2:de:da:cc:5b:27:81:ca:0e:7a:d1:5a:04:fd:b4:45:31:
         eb:fe:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:40:03 2026 by rpki-client