Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
File:                     3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json)
Hash identifier:          YYdbfeWxxPfSp9fdX6o8ktNGHE6sBGTR+tRuz3ChHmM=
Subject key identifier:   AF:F5:FE:D6:99:A1:45:5A:4D:2F:A6:59:1D:98:DD:02:DB:4F:B9:25
Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83
Certificate issuer:       /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
Certificate serial:       0908
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
Manifest number:          0A2E
Signing time:             Fri 02 Oct 2026 20:36:13 +0000
Manifest this update:     Fri 02 Oct 2026 20:36:12 +0000
Manifest next update:     Fri 09 Oct 2026 20:36:12 +0000
Files and hashes:         1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: RmMviSWbu4ebWGxiD9vRFU3piXo25Re7al2zXR1qI/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl
                          rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312 (0x908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
        Validity
            Not Before: Oct  2 20:36:12 2026 GMT
            Not After : Oct  9 20:36:12 2026 GMT
        Subject: CN=6ac015bc-3270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:b9:1c:3d:85:cc:0a:20:3b:4c:4a:fb:d8:
                    4f:50:73:aa:44:bc:c5:38:43:28:e1:65:15:18:bc:
                    f0:1a:da:81:d1:c8:9d:82:85:36:ef:9e:ce:a0:17:
                    aa:69:44:1c:9b:89:2c:58:59:f8:6f:a2:08:7e:2e:
                    39:4c:72:1a:60:d9:ec:81:2d:3f:27:e0:a6:a5:c4:
                    39:cc:75:e0:7e:c1:57:d9:4d:61:6c:64:b3:87:3a:
                    b8:38:1e:92:1c:2d:69:9e:17:ba:79:29:bc:3a:f3:
                    f2:19:6f:fc:be:ef:fa:c8:06:d8:16:93:af:04:47:
                    4a:ed:41:d4:c6:11:88:01:b3:32:ac:bf:18:2b:ed:
                    e5:68:15:44:f0:ff:54:7d:0f:61:aa:e0:a4:b0:6a:
                    08:05:ea:78:f3:60:00:ec:67:ed:50:2d:bd:f7:5f:
                    27:ed:26:e3:f2:8e:e8:4b:59:12:6b:85:e9:f9:bc:
                    8a:36:b3:06:f9:30:1c:53:25:aa:0b:b7:3d:c0:84:
                    82:9e:e9:76:ad:de:51:3d:f9:f9:db:9d:e5:0b:79:
                    f5:d4:b9:82:91:7d:51:94:2a:7f:96:2b:c7:a9:e8:
                    d7:36:b3:c4:a8:0e:b8:48:51:2f:4f:7d:7f:23:c1:
                    c0:5e:aa:bb:41:f1:e8:1b:24:54:1d:52:78:8a:5e:
                    82:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F5:FE:D6:99:A1:45:5A:4D:2F:A6:59:1D:98:DD:02:DB:4F:B9:25
            X509v3 Authority Key Identifier:
                keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b6:60:ea:ae:2e:93:03:5f:c6:4c:e5:fa:ca:04:86:62:e7:
         7e:f9:c1:4b:a9:8b:30:8c:73:a0:af:09:96:97:c6:46:84:e7:
         62:77:54:6d:2e:2f:88:ab:b8:dc:63:74:67:d2:97:2c:4c:4a:
         79:26:53:5d:07:b9:70:c0:6a:32:96:7f:62:d2:d8:e7:c5:84:
         bd:49:32:a8:23:38:78:95:ca:ac:99:da:3f:70:a7:26:70:3d:
         aa:f0:99:7a:c2:16:50:ee:89:af:13:c3:79:f5:6d:15:5b:87:
         c7:35:09:c2:d9:ba:c3:71:11:c3:85:04:3b:58:05:2d:3a:50:
         8f:7f:0a:b7:a5:19:fa:bf:9d:01:0d:d7:c7:be:27:b7:51:35:
         73:51:3d:bb:f3:53:21:fb:11:07:cb:6e:86:00:a7:fc:3c:19:
         dc:da:2c:de:04:8b:6b:d5:6d:5b:08:a4:13:13:8e:27:35:bb:
         ea:b1:29:ef:13:c8:40:8c:d4:c3:b0:7f:b5:5c:08:af:2a:3a:
         88:93:21:91:c4:76:a7:21:f0:63:15:b0:e0:b8:6d:6e:95:33:
         81:e2:0f:ad:60:0b:9f:db:91:27:68:39:46:09:48:f1:5b:5b:
         89:ad:7b:a8:7e:31:ad:83:94:08:32:7c:1b:d6:4e:b4:af:00:
         6b:6e:53:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDQjQxMTAvBgNVBAUTKERDRTYyMjdDMDU0N0MwMEFFQzY1QzVFNjgwRjYxNzkz
RjQ5RDU1ODMwHhcNMjYxMDAyMjAzNjEyWhcNMjYxMDA5MjAzNjEyWjAYMRYwFAYD
VQQDEw02YWMwMTViYy0zMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/K5HD2FzAogO0xK+9hPUHOqRLzFOEMo4WUVGLzwGtqB0cidgoU2757OoBeq
aUQcm4ksWFn4b6IIfi45THIaYNnsgS0/J+CmpcQ5zHXgfsFX2U1hbGSzhzq4OB6S
HC1pnhe6eSm8OvPyGW/8vu/6yAbYFpOvBEdK7UHUxhGIAbMyrL8YK+3laBVE8P9U
fQ9hquCksGoIBep482AA7GftUC29918n7Sbj8o7oS1kSa4Xp+byKNrMG+TAcUyWq
C7c9wISCnul2rd5RPfn5253lC3n11LmCkX1RlCp/livHqejXNrPEqA64SFEvT31/
I8HAXqq7QfHoGyRUHVJ4il6CcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/1/taZ
oUVaTS+mWR2Y3QLbT7klMB8GA1UdIwQYMBaAFNzmInwFR8AK7GXF5oD2F5P0nVWD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNCNC8zQTdBRDNCMkUz
ODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdBcnNaY1htZ1BZWGtfU2RW
WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNPWWlmQVZId0Fyc1pjWG1nUFlYa19TZFZZTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkNCNC8zQTdBRDNCMkUzODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdB
cnNaY1htZ1BZWGtfU2RWWU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj7Zg6q4ukwNfxkzl+soEhmLnfvnBS6mLMIxzoK8JlpfGRoTnYndUbS4viKu4
3GN0Z9KXLExKeSZTXQe5cMBqMpZ/YtLY58WEvUkyqCM4eJXKrJnaP3CnJnA9qvCZ
esIWUO6JrxPDefVtFVuHxzUJwtm6w3ERw4UEO1gFLTpQj38Kt6UZ+r+dAQ3Xx74n
t1E1c1E9u/NTIfsRB8tuhgCn/DwZ3Nos3gSLa9VtWwikExOOJzW76rEp7xPIQIzU
w7B/tVwIryo6iJMhkcR2pyHwYxWw4LhtbpUzgeIPrWALn9uRJ2g5RglI8Vtbia17
qH4xrYOUCDJ8G9ZOtK8Aa25TSg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:33 2026 by rpki-client