Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
File:                     A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json)
Hash identifier:          F2cNZmzFWACQZ0aACBRyVrb2TDNk43p08i8uScGLQbg=
Subject key identifier:   DF:F1:D5:83:65:DC:6B:B4:46:5F:D8:E5:CF:99:2D:D2:DA:F4:E2:F5
Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4
Certificate issuer:       /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
Certificate serial:       0CDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
Manifest number:          0CD0
Signing time:             Sun 04 Oct 2026 18:32:12 +0000
Manifest this update:     Sun 04 Oct 2026 18:32:11 +0000
Manifest next update:     Sun 11 Oct 2026 18:32:11 +0000
Files and hashes:         1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: q46YgXG4NJT5lMrO+tyaJyk353QLFQLM0hkJv8ZcxsY=)
                          2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: veYCT0YVn2lsSh/a1SemHmCMUXzXqFx3N+q0M958UTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3290 (0xcda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91822BF, serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4
        Validity
            Not Before: Oct  4 18:32:11 2026 GMT
            Not After : Oct 11 18:32:11 2026 GMT
        Subject: CN=6ac29bab-5a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:8b:c3:99:7d:f7:c7:7c:aa:90:7b:fa:bd:
                    94:f7:42:7c:0a:b8:bb:71:af:57:c2:b1:cc:06:7a:
                    1e:0c:5f:03:a5:44:24:9f:79:a8:cd:96:c9:db:78:
                    1d:ed:7d:9c:2a:60:6e:bf:dd:93:ec:d7:56:71:4d:
                    e9:5f:44:e2:36:da:29:c6:b7:ab:71:ea:49:6c:db:
                    3d:59:af:7e:79:18:a2:76:b1:97:7a:26:df:c6:f6:
                    83:cc:39:69:0c:1f:58:20:1c:b0:90:21:03:72:5c:
                    f0:39:32:82:b3:7f:0a:e5:92:4e:58:bf:7e:7d:6d:
                    0a:bb:e0:4f:c3:9b:5d:34:99:6e:9c:e3:d7:a7:6d:
                    77:57:7d:63:81:37:da:cb:fd:bd:29:23:f3:1e:00:
                    6e:8d:85:f9:e7:03:d9:29:37:8d:58:85:f4:e4:d8:
                    5b:8a:d0:3d:97:8f:e2:80:39:a7:c5:ec:19:15:ef:
                    e9:9e:8d:d2:bb:0f:ee:4b:27:ce:72:24:ec:9f:78:
                    4c:f3:70:fa:f6:d4:ff:04:02:5d:6e:bf:18:92:f9:
                    a0:33:d5:05:94:62:c3:70:19:41:ec:fe:22:3a:67:
                    3a:e0:72:04:01:97:75:e0:08:95:c2:28:81:e0:10:
                    76:93:2d:26:de:27:ed:06:8a:2d:e6:6f:e2:e6:6d:
                    21:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F1:D5:83:65:DC:6B:B4:46:5F:D8:E5:CF:99:2D:D2:DA:F4:E2:F5
            X509v3 Authority Key Identifier:
                keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:98:9f:66:a0:de:89:48:1a:97:91:3c:5c:5d:ce:37:bf:da:
         dc:7d:44:58:00:aa:6b:f6:ba:28:eb:5c:b8:d5:84:e4:a5:4d:
         63:5e:f9:c8:2c:48:57:8b:8f:1b:44:1f:4d:20:dd:dd:5a:2a:
         c3:7a:e9:62:c4:f0:34:46:eb:c8:d8:fc:ce:c2:22:01:68:c1:
         75:37:9b:c8:cd:c3:d1:1d:28:99:f9:cb:99:53:a2:46:1d:cc:
         9f:69:72:d2:95:74:d8:70:7d:c9:fa:51:a5:62:c7:62:74:d9:
         8e:b3:0a:b5:35:bd:c9:12:c0:58:6f:75:b5:4e:a1:ca:4b:e5:
         7f:9d:12:74:35:14:79:c5:5d:e7:8e:23:ca:bd:5d:e2:a5:bc:
         dd:98:73:b6:b7:e8:c2:52:65:39:5f:65:73:df:97:04:50:b2:
         de:60:c4:cd:4b:c1:dd:88:5f:4d:e0:1d:14:c1:d7:a6:d6:92:
         f4:79:6e:b2:6b:8f:4d:98:d2:b3:26:80:bd:47:9e:0c:15:e2:
         5a:a4:2f:fa:55:66:cc:df:bc:92:4e:7b:09:9f:3f:27:b4:ea:
         af:fe:3b:8b:ff:95:e6:77:26:20:ef:1a:8f:fc:91:1e:a9:12:
         fb:f1:e2:e4:96:dc:f2:46:40:25:f8:b8:78:e7:89:ef:64:2d:
         80:8f:84:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:35:37 2026 by rpki-client