Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
File:                     T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft (raw, json)
Hash identifier:          MNHXYVU5fXexjLm8LNk237JiUJYk/8favjeGR45QCHY=
Subject key identifier:   7C:01:F4:A1:65:63:2D:0D:67:2E:80:30:37:AD:7B:0C:38:C0:74:22
Authority key identifier: 4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0
Certificate issuer:       /CN=A918924D/serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
Manifest number:          6C
Signing time:             Thu 15 Oct 2026 09:08:07 +0000
Manifest this update:     Thu 15 Oct 2026 09:08:06 +0000
Manifest next update:     Thu 22 Oct 2026 09:08:06 +0000
Files and hashes:         1: T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl (hash: qzyziaT6/g9hokkAC1nHxdbcFR9sD+YgXVtXD/W4zt4=)
                          2: 0F7A780C278211F19C45DF9DCA833773.roa (hash: Nj46aMQlSHXr0PtozGObb5+1Bq9Ubs8JUSseSuuPGA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl
                          rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 09:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918924D, serialNumber=4FEDD80068788FF079BFBA3F3AE4937264115FC0
        Validity
            Not Before: Oct 15 09:08:06 2026 GMT
            Not After : Oct 22 09:08:06 2026 GMT
        Subject: CN=6ad097f7-51b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:db:27:38:c1:d6:da:0e:23:83:a3:7e:df:34:
                    66:30:b3:79:b2:6f:30:6e:52:a0:7e:fd:00:d4:07:
                    dd:9b:5e:f4:f9:e2:d1:40:b3:54:20:de:78:dd:db:
                    7b:cf:c4:45:c5:03:97:7e:2f:15:f2:dc:21:c3:48:
                    65:13:a3:4c:d8:1b:dd:50:1b:df:97:4a:66:0f:8d:
                    1a:ab:af:34:da:d6:3c:70:9a:14:fc:0d:ce:bd:68:
                    fe:5e:1a:83:54:6c:45:d3:fc:18:e1:a6:ff:95:56:
                    30:ef:2c:2c:b1:fd:dd:2b:e2:ca:ab:92:f6:ae:2a:
                    4c:17:1a:74:7b:c4:ed:af:6b:cc:a3:93:6d:b6:87:
                    5b:bb:0f:c8:a2:1d:21:e1:3f:15:62:f9:e2:8d:08:
                    dc:f2:fa:fc:e9:ff:47:d3:0d:34:47:55:10:58:5c:
                    8e:08:3e:18:9f:eb:51:71:7b:d3:9f:7f:7d:05:8f:
                    4a:55:0b:ed:4e:34:9a:84:fd:cb:94:b7:22:20:06:
                    b0:86:5a:bd:18:8d:76:b7:d4:73:eb:84:2a:bd:f3:
                    4a:b9:b2:e5:ef:0c:5d:fd:d6:4e:a8:e6:15:0b:52:
                    17:33:3a:9a:31:a7:fb:74:3e:2a:06:9b:21:ff:31:
                    e3:2d:52:29:0c:e5:79:eb:e0:b1:08:e6:5f:3b:58:
                    68:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:01:F4:A1:65:63:2D:0D:67:2E:80:30:37:AD:7B:0C:38:C0:74:22
            X509v3 Authority Key Identifier:
                keyid:4F:ED:D8:00:68:78:8F:F0:79:BF:BA:3F:3A:E4:93:72:64:11:5F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-3YAGh4j_B5v7o_OuSTcmQRX8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918924D/CBE97B62277511F1A85D704CC6833773/T-3YAGh4j_B5v7o_OuSTcmQRX8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:35:55:6f:6d:ca:4d:ba:9e:be:91:05:00:79:23:25:60:d7:
         3e:f1:7e:34:de:01:b9:d5:e9:11:d8:5c:02:68:e0:06:2d:fd:
         9e:90:d8:56:48:af:67:22:8d:4e:b7:7d:65:7f:90:d7:87:a1:
         94:82:c2:30:9f:e9:ba:ec:ec:c6:21:e5:e3:93:3e:b3:60:2e:
         60:af:ab:36:19:74:4f:b9:8d:28:89:94:e6:9a:0c:8d:ea:d9:
         2b:09:6e:95:2f:a6:6e:c3:7e:60:08:67:1e:6d:e9:13:7a:e4:
         ba:85:21:d1:4c:42:11:8c:6d:8a:b5:06:04:77:c3:23:33:ec:
         50:9d:e7:43:0d:8f:9c:73:e3:bc:37:07:df:14:2d:9f:e5:d6:
         98:87:c7:f1:67:21:7c:55:0c:e8:2b:ba:57:b0:64:73:fb:d2:
         b4:71:20:f4:a5:12:64:f5:2f:d5:19:0b:69:a1:77:cd:0e:df:
         14:9c:f7:24:fd:e8:f9:1b:2b:96:64:2e:99:c9:14:a0:85:36:
         35:4f:ae:7e:c6:ea:37:4d:37:fa:9b:51:d3:30:07:5c:e5:b4:
         ba:b2:f0:b0:7b:c2:aa:2f:ff:ca:40:3f:da:01:3d:94:d0:21:
         fb:3b:27:1f:d6:04:68:8c:ed:c4:6f:bc:84:49:2f:75:4a:6f:
         60:5f:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 22:31:18 2026 by rpki-client