Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
File:                     3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json)
Hash identifier:          ZommWBuY01IvG8/LvFi8V1Wfd+QTk4VvxD7rUjSHxgs=
Subject key identifier:   CD:9E:BC:F2:40:52:5B:D5:E9:CD:15:AA:6E:4E:4A:F1:54:FA:1D:2F
Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
Certificate issuer:       /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Certificate serial:       3082
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
Manifest number:          304D
Signing time:             Sat 10 Oct 2026 15:26:41 +0000
Manifest this update:     Sat 10 Oct 2026 15:26:41 +0000
Manifest next update:     Sat 17 Oct 2026 15:26:41 +0000
Files and hashes:         1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: deqNzNdUWxxFoefrVVHe3mYYwyBD4hpR+VkraZGOpQE=)
                          2: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: J3PZrywDsbQ/lQ2CWAaJkUEV4PwYoj7ULriLoGXZDIM=)
                          3: 502355A2B13D11E59299870AC4F9AE02.roa (hash: BfBmSktsaPGNqALLSu3GYa3mdTXISus2Av+2uclLCkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
                          rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 15:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12418 (0x3082)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
        Validity
            Not Before: Oct 10 15:26:41 2026 GMT
            Not After : Oct 17 15:26:41 2026 GMT
        Subject: CN=6aca5931-d7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:32:9e:5f:b7:5a:d8:d0:8f:fe:c9:62:52:
                    11:54:23:79:89:e6:b2:29:47:e5:6f:fa:f9:8c:3b:
                    f6:ea:f3:ee:06:63:d8:87:61:d8:19:80:78:03:b0:
                    48:1c:ae:24:82:bb:49:58:bb:2a:41:63:6a:ed:89:
                    4e:b9:8c:21:cb:87:3a:23:6b:bf:a2:3b:23:c3:f8:
                    86:75:c5:91:5e:2c:82:3f:02:5f:e8:51:fc:35:b3:
                    05:56:b8:fb:82:dd:d3:14:63:9f:c5:df:f6:08:23:
                    b4:6d:61:78:94:4c:98:1d:cf:b6:d4:bd:35:bc:dc:
                    65:ea:be:a4:d2:e6:2c:6d:8e:9d:74:bc:e1:44:d2:
                    da:03:22:0b:d6:27:d6:cc:58:15:69:d0:7a:6f:12:
                    bc:ad:47:cb:99:09:d4:a4:ae:b7:eb:b6:e6:f1:2d:
                    c6:9d:11:c6:da:a1:18:8f:c6:20:50:d0:6b:39:aa:
                    e5:95:0b:3a:c1:80:00:63:fb:ba:0c:81:0e:16:ef:
                    b9:27:a8:fc:67:c5:81:1d:44:1f:77:59:fb:bc:9c:
                    eb:aa:47:11:35:8e:eb:af:b8:2a:db:38:89:e0:60:
                    dd:fe:2a:9e:16:d0:5c:fe:2f:35:f8:33:e5:78:51:
                    90:12:cc:c1:ff:80:33:10:3f:4a:e8:05:f5:a8:b2:
                    8a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9E:BC:F2:40:52:5B:D5:E9:CD:15:AA:6E:4E:4A:F1:54:FA:1D:2F
            X509v3 Authority Key Identifier:
                keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c7:cb:2e:a6:cf:0f:56:58:34:81:c6:9d:0f:72:38:97:98:
         47:dd:fe:6e:77:4f:ed:5c:ab:6c:ac:c0:f9:32:ed:7d:79:a0:
         25:45:ca:f4:be:7f:cd:6d:7e:dd:fb:67:53:50:0e:24:25:ba:
         a8:b3:a0:2c:dd:85:c8:c8:eb:f9:ff:c4:ea:b8:9f:9b:a9:95:
         5a:39:bd:16:5e:90:01:41:45:30:5e:52:f4:58:99:49:49:95:
         a5:e8:ef:eb:2c:b6:d3:f0:7f:d4:f9:8e:8a:61:be:4a:9c:74:
         92:50:07:35:ef:5b:fe:c5:21:ef:c0:dc:21:2e:05:90:bc:9a:
         bc:2c:7f:d4:1e:88:86:62:26:5f:4a:92:ae:f2:f6:85:e0:6b:
         23:58:78:54:38:bf:c8:80:5c:40:77:33:8f:ef:f2:15:8d:37:
         fa:c6:49:33:ed:f0:69:b4:cf:c9:92:30:d9:3e:7a:38:2f:ad:
         60:25:f9:b5:cd:d3:67:ab:24:53:94:4c:a9:de:26:5c:66:fb:
         59:4a:d7:3d:c9:96:a3:64:9d:7a:2b:3d:e3:3e:49:ea:54:0e:
         13:44:b0:3e:67:00:c1:a5:e4:90:7e:54:87:67:bc:c7:2e:d5:
         20:9f:6b:79:d4:20:0b:d1:61:d9:66:51:0a:31:c0:6f:f4:60:
         5c:73:7f:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI3NjIxMTAvBgNVBAUTKERDQjMwRUNGNzhBMTMzNzVFRTUyNTI3OEY5Q0ZEMzBG
N0M1OEFBOEIwHhcNMjYxMDEwMTUyNjQxWhcNMjYxMDE3MTUyNjQxWjAYMRYwFAYD
VQQDEw02YWNhNTkzMS1kN2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtqEynl+3WtjQj/7JYlIRVCN5ieayKUflb/r5jDv26vPuBmPYh2HYGYB4A7BI
HK4kgrtJWLsqQWNq7YlOuYwhy4c6I2u/ojsjw/iGdcWRXiyCPwJf6FH8NbMFVrj7
gt3TFGOfxd/2CCO0bWF4lEyYHc+21L01vNxl6r6k0uYsbY6ddLzhRNLaAyIL1ifW
zFgVadB6bxK8rUfLmQnUpK6367bm8S3GnRHG2qEYj8YgUNBrOarllQs6wYAAY/u6
DIEOFu+5J6j8Z8WBHUQfd1n7vJzrqkcRNY7rr7gq2ziJ4GDd/iqeFtBc/i81+DPl
eFGQEszB/4AzED9K6AX1qLKKoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2evPJA
UlvV6c0Vqm5OSvFU+h0vMB8GA1UdIwQYMBaAFNyzDs94oTN17lJSePnP0w98WKqL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc2Mi84QUFFMEY4QzI4
MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0zWHVVbEo0LWNfVEQzeFlx
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNMTU96M2loTTNYdVVsSjQtY19URDN4WXFvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mjc2Mi84QUFFMEY4QzI4MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0z
WHVVbEo0LWNfVEQzeFlxb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYMfLLqbPD1ZYNIHGnQ9yOJeYR93+bndP7VyrbKzA+TLtfXmgJUXK9L5/zW1+
3ftnU1AOJCW6qLOgLN2FyMjr+f/E6rifm6mVWjm9Fl6QAUFFMF5S9FiZSUmVpejv
6yy20/B/1PmOimG+Spx0klAHNe9b/sUh78DcIS4FkLyavCx/1B6IhmImX0qSrvL2
heBrI1h4VDi/yIBcQHczj+/yFY03+sZJM+3wabTPyZIw2T56OC+tYCX5tc3TZ6sk
U5RMqd4mXGb7WUrXPcmWo2Sdeis94z5J6lQOE0SwPmcAwaXkkH5Uh2e8xy7VIJ9r
edQgC9Fh2WZRCjHAb/RgXHN/pg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:40:59 2026 by rpki-client