Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft
File:                     _rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft (raw, json)
Hash identifier:          exthzMGo0qXredJyzpR7Lkljg+iLtyKA8gpxS0sTb5I=
Subject key identifier:   71:22:DF:60:B9:A2:09:05:F0:C8:9A:B9:27:DE:D6:20:6D:20:B0:43
Authority key identifier: FE:B9:53:5D:9E:41:71:D8:7A:8B:F6:F6:CB:61:D2:31:BF:2F:36:2C
Certificate issuer:       /CN=A91665DC/serialNumber=FEB9535D9E4171D87A8BF6F6CB61D231BF2F362C
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft
Manifest number:          3C
Signing time:             Sat 03 Oct 2026 09:18:07 +0000
Manifest this update:     Sat 03 Oct 2026 09:18:06 +0000
Manifest next update:     Sat 10 Oct 2026 09:18:06 +0000
Files and hashes:         1: _rlTXZ5Bcdh6i_b2y2HSMb8vNiw.crl (hash: UyDJ8gsqq34X1x272/DAWKWURGlgJHXLjkhvxD1BJVo=)
                          2: 407DE8A2653B11F19447D4298B47A888.roa (hash: 4uGgyHi+pahZitNop8GwY6mUioENqBPhA9aD2Qxg/D0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.crl
                          rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91665DC, serialNumber=FEB9535D9E4171D87A8BF6F6CB61D231BF2F362C
        Validity
            Not Before: Oct  3 09:18:06 2026 GMT
            Not After : Oct 10 09:18:06 2026 GMT
        Subject: CN=6ac0c84e-3db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:55:74:0b:88:f7:4e:d7:37:20:39:23:b6:
                    d8:d9:09:e4:a9:5c:5e:5d:60:d8:e1:e9:b1:f3:a4:
                    91:60:d8:e9:6e:c2:ee:1f:30:23:15:e0:42:c3:e1:
                    9b:38:4a:90:5c:2f:8c:95:71:de:4d:1f:d1:5f:24:
                    1e:75:fc:97:d5:81:10:34:dd:03:62:68:95:45:16:
                    13:4c:a6:3a:f0:da:28:a2:11:09:01:0b:f8:1f:7a:
                    9c:4a:c6:c3:82:91:cd:0e:25:95:22:fb:49:ef:ce:
                    e1:fe:06:49:97:4d:a4:b3:f4:7d:be:ba:25:29:af:
                    b7:6c:8a:a6:d7:f9:f9:dd:02:58:ae:f1:8a:3e:ad:
                    7c:d8:55:80:24:40:a9:8e:ba:cb:74:39:88:5a:65:
                    cf:49:f7:fc:b4:25:5b:7b:0d:c2:0c:48:0e:fe:86:
                    01:a6:a3:56:a5:0d:cf:85:84:21:ab:1d:a5:9c:32:
                    94:6e:fb:fc:a7:f7:cf:a9:cd:bf:df:b6:19:b3:f4:
                    78:e6:6e:33:44:0b:24:5c:af:7e:1c:26:e7:e6:50:
                    d4:84:16:38:93:b7:84:cf:96:1b:d6:ac:8a:83:aa:
                    dd:5a:78:56:a5:82:49:91:6d:9e:89:66:f6:d7:e7:
                    c9:75:54:e0:a9:49:6e:46:57:37:43:33:bf:37:15:
                    06:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:22:DF:60:B9:A2:09:05:F0:C8:9A:B9:27:DE:D6:20:6D:20:B0:43
            X509v3 Authority Key Identifier:
                keyid:FE:B9:53:5D:9E:41:71:D8:7A:8B:F6:F6:CB:61:D2:31:BF:2F:36:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91665DC/C66C26D8653911F18E895AE18947A888/_rlTXZ5Bcdh6i_b2y2HSMb8vNiw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:86:e0:b7:3b:5a:44:e6:bc:a5:eb:75:f8:4a:42:27:d5:64:
         bf:21:4c:f7:3e:6d:c8:c1:ff:83:30:37:70:97:33:bb:1e:66:
         20:ae:d4:ed:32:84:5d:ae:57:b9:88:63:e4:3e:87:ed:16:78:
         25:c5:4d:aa:36:0f:1c:12:b6:85:19:49:12:1f:80:28:26:e3:
         ac:48:b4:d4:01:49:8f:de:b6:b8:03:30:0c:df:05:f0:e6:c6:
         17:e3:31:2f:e4:44:0d:4e:68:41:7b:fa:5d:95:96:05:7f:d9:
         2d:34:24:9f:eb:ab:25:49:80:ed:89:6a:f5:e7:8b:a0:fb:83:
         94:b9:ab:76:f4:3b:c3:e0:ae:7b:e2:b7:2b:7a:67:1e:49:24:
         bd:d5:0e:92:ec:82:4b:41:37:8b:77:be:e8:06:fa:b8:78:ea:
         60:02:67:75:96:53:04:f9:32:26:b8:f3:5a:9d:23:25:b7:a0:
         64:f7:30:81:b3:72:2e:69:51:b1:36:58:ba:56:f4:8f:68:33:
         61:b2:d2:ab:89:a6:e9:1c:35:bb:db:0b:31:05:e5:24:c8:8c:
         b3:ed:5b:eb:2b:a4:cb:81:a1:1c:67:42:13:e1:28:39:5d:ae:
         f9:54:b0:46:f8:96:cd:92:38:3c:9a:e8:b4:a1:22:9e:52:5a:
         a7:43:01:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:28:51 2026 by rpki-client