Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
File:                     3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json)
Hash identifier:          pxxzogQXlGI1YghT96tl5ZK4EXgi4XIc1AhHlPHHDMs=
Subject key identifier:   9F:CB:5B:92:02:CF:71:E7:CE:02:1B:8D:F8:BA:66:FE:37:77:76:14
Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
Certificate issuer:       /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
Manifest number:          018F
Signing time:             Sat 03 Oct 2026 05:05:51 +0000
Manifest this update:     Sat 03 Oct 2026 05:05:50 +0000
Manifest next update:     Sat 10 Oct 2026 05:05:50 +0000
Files and hashes:         1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: 9AWo50h6mY56LLmvBZfA3JsRWeW4JYPXd953UR+Gt0I=)
                          2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: ynSgl+qDFctPpLQpUDpO6c7qHmQkyXIZinhvMDk0vnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
                          rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
        Validity
            Not Before: Oct  3 05:05:50 2026 GMT
            Not After : Oct 10 05:05:50 2026 GMT
        Subject: CN=6ac08d2e-83d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:a7:7f:4c:e9:0d:ef:eb:e1:47:85:03:39:
                    94:af:90:ff:e7:6f:50:dc:77:b4:f9:87:d5:3e:03:
                    5a:2e:db:7d:b9:eb:48:f7:33:6b:6a:70:76:d7:9f:
                    6f:19:df:d4:87:3c:2b:8c:fb:c6:38:dc:d8:98:7d:
                    04:31:c5:43:cd:b1:4c:cf:e7:0d:dd:c9:91:cd:b7:
                    8b:3b:07:10:8d:88:3d:05:10:ac:80:6f:9c:3e:02:
                    57:4f:15:ae:8e:7b:8f:d2:31:93:38:de:84:77:7e:
                    93:64:8a:d5:37:83:b7:10:13:64:f7:9b:df:ff:16:
                    8f:6c:b2:1d:a0:6f:42:94:ea:57:0f:3a:9e:36:b4:
                    0c:ce:25:06:ff:15:65:41:bc:a4:e8:17:d1:cb:3f:
                    e8:bb:dc:96:38:d7:91:4c:68:58:c2:32:cd:d5:5f:
                    f5:7e:94:19:2d:7b:5f:fb:9a:d8:62:23:66:b4:41:
                    51:00:48:be:e5:44:90:30:66:ba:e8:2a:4c:6d:d1:
                    32:1f:5a:11:2e:58:b6:40:13:d6:a5:ac:90:b8:d9:
                    d0:9b:1c:83:6a:27:79:b0:28:53:a6:39:05:52:25:
                    2a:ae:00:16:57:06:2b:82:7f:70:e1:f0:30:54:96:
                    87:cc:5e:d8:f1:46:52:d7:05:5e:3b:56:3e:9f:70:
                    a0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CB:5B:92:02:CF:71:E7:CE:02:1B:8D:F8:BA:66:FE:37:77:76:14
            X509v3 Authority Key Identifier:
                keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5f:f8:1d:42:03:7c:04:6b:41:fb:65:99:99:1e:8b:a3:b0:
         6e:80:7d:c3:37:ae:87:6b:8f:85:d4:d1:a8:3f:b4:25:04:68:
         7a:43:61:8c:35:39:84:b1:34:a6:91:29:8b:54:bc:0c:5b:bc:
         6b:55:ba:79:e2:35:90:c4:ad:a0:ba:40:d7:91:46:e6:3c:06:
         b2:0c:9e:c8:75:58:7b:61:60:a7:55:47:07:b6:1b:81:5e:74:
         aa:2d:05:c9:f5:cc:ce:89:2d:83:73:23:11:ae:6c:3a:7e:ea:
         fb:97:d9:24:0e:9b:28:f2:ef:0e:e1:07:87:11:f3:09:ae:bf:
         55:39:89:3f:a2:36:d3:50:7e:01:8a:0c:ee:f1:73:23:a6:96:
         98:97:e8:cd:ee:5b:d3:a9:de:f2:2d:80:c7:13:7e:e9:d9:54:
         8b:1e:39:61:d2:e9:4c:a9:ea:de:2d:39:60:bc:6e:4f:fd:14:
         05:18:f1:50:9b:0d:4d:95:c8:f7:16:c6:9f:55:79:0e:7b:0f:
         bc:8c:3b:eb:4d:62:3f:9f:6a:4d:cb:d2:aa:8d:11:6c:1c:df:
         05:ab:be:e1:de:14:9b:ca:1b:20:79:e2:f6:c9:70:45:99:e1:
         32:17:4d:0d:2d:5d:65:84:91:71:57:e1:19:d2:73:1b:54:b9:
         95:e5:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:10:15 2026 by rpki-client