Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
File:                     3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json)
Hash identifier:          OGIKzGroYgx3Hk15MRdsbVO2TiiaEs20rC2O1iDL240=
Subject key identifier:   3C:5C:A5:9F:1A:CD:BD:C9:A7:86:CB:C9:35:16:02:68:39:59:62:40
Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
Certificate issuer:       /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Certificate serial:       2B2C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
Manifest number:          2B2C
Signing time:             Fri 04 Sep 2026 15:31:21 +0000
Manifest this update:     Fri 04 Sep 2026 15:31:20 +0000
Manifest next update:     Fri 11 Sep 2026 15:31:20 +0000
Files and hashes:         1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: M6SEx2+KnHui6oLOtmjw3LdJaIdBACA3tZL8r3S3Z5M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11052 (0x2b2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
        Validity
            Not Before: Sep  4 15:31:20 2026 GMT
            Not After : Sep 11 15:31:20 2026 GMT
        Subject: CN=6a9ae449-5769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:6f:8f:6e:36:ab:98:eb:0c:94:bc:ed:05:
                    1f:d0:fb:11:b0:00:09:45:ed:a6:44:86:5e:fc:9d:
                    fc:4e:d1:02:08:e0:ad:00:bf:00:92:e4:84:dd:91:
                    7c:2e:7f:22:9b:71:c9:9e:1d:5d:27:a2:68:b3:9a:
                    10:b7:29:63:a5:e5:d9:0d:f7:22:7c:cf:f4:81:52:
                    a5:e6:c6:60:53:a4:20:b1:2f:2a:ae:55:f7:2a:94:
                    55:eb:85:a7:3c:4e:4b:12:c7:8b:0c:e9:95:4e:71:
                    59:23:35:23:c4:73:b2:d0:2b:2d:91:77:34:d0:86:
                    f5:99:98:99:fd:89:ef:06:32:c5:90:c4:fe:fd:ec:
                    4d:87:6f:0e:cd:48:08:e7:b8:3a:fd:0e:ef:b5:46:
                    8d:06:ee:8a:74:8e:b9:6b:b6:f0:95:1a:43:67:96:
                    8c:6e:90:c9:2f:b9:86:20:c4:43:1a:14:c7:e1:1b:
                    08:8b:82:f9:67:5b:b8:c4:19:51:f2:0e:6e:47:e0:
                    d0:b1:70:af:ac:4a:30:57:f1:52:82:44:81:d8:16:
                    d5:36:bb:74:73:1f:d1:53:93:c5:91:15:e6:17:f8:
                    14:8c:cc:4f:f3:62:a8:2f:65:d5:2d:5d:6e:67:4b:
                    38:ae:7b:4a:ab:42:73:85:10:f3:e4:46:35:5d:46:
                    15:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5C:A5:9F:1A:CD:BD:C9:A7:86:CB:C9:35:16:02:68:39:59:62:40
            X509v3 Authority Key Identifier:
                keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:56:37:b5:4d:4b:fe:b8:5b:d2:96:aa:65:77:99:54:5f:41:
         bf:78:11:6b:22:0d:03:08:1d:a8:30:f2:63:4c:98:79:91:5f:
         3e:b7:63:88:95:0a:14:d5:45:3a:26:9a:3f:22:3f:df:ea:43:
         fc:d4:f0:a8:62:91:fb:a5:94:88:56:5e:d2:5b:17:75:ea:82:
         e7:07:06:52:39:a4:2e:d6:c9:c1:07:6d:cc:61:01:e3:51:5e:
         29:e7:70:c7:b1:06:63:40:3d:31:59:bc:fc:0f:bd:d1:63:83:
         62:d4:8b:ef:48:fe:a2:9d:27:05:38:b3:e8:66:4f:13:21:6b:
         81:ac:1e:23:e8:bc:11:89:38:c2:76:c6:6d:71:5e:20:41:b8:
         d9:95:ec:20:c5:f6:29:b0:36:b2:de:2c:f4:16:8e:a1:21:02:
         a7:10:12:fc:6b:73:6c:39:22:58:3c:25:17:2d:ba:d6:b3:16:
         15:a1:b0:81:99:63:69:bc:d1:5b:1f:3b:e5:a6:a8:7d:62:e2:
         fc:cb:df:9e:30:83:81:0d:dc:75:2d:19:d2:10:3f:7c:5d:90:
         c1:c6:05:e4:ce:8a:df:6f:6a:0d:d8:bc:d2:66:ce:24:d8:19:
         f4:45:e9:1e:e9:db:93:62:c7:57:8c:9b:f2:58:23:3f:5e:9d:
         01:55:0e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:21:42 2026 by rpki-client