Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
File:                     Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft (raw, json)
Hash identifier:          UhgdQ2Z+ZfFGSYQFskJ9LEvWSnK0i70CpVPrUWCPklo=
Subject key identifier:   DD:13:06:23:5F:4E:31:A3:E7:2D:92:37:57:7B:D0:BB:2D:76:CB:E0
Authority key identifier: 3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3
Certificate issuer:       /CN=A91A3399/serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3
Certificate serial:       024D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
Manifest number:          0241
Signing time:             Mon 05 Oct 2026 02:54:45 +0000
Manifest this update:     Mon 05 Oct 2026 02:54:45 +0000
Manifest next update:     Mon 12 Oct 2026 02:54:45 +0000
Files and hashes:         1: Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl (hash: qkwo+AgBbQemU/0ExsrhjFssGiGg05drpb6xCTMEp6Q=)
                          2: 553596D65DB511EE841C151FC4F9AE02.roa (hash: ENKRczYYvLUIozCAd5X4sketAA/sYkbVgxD+0/V4DAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl
                          rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3399, serialNumber=3DBDD7ED412480E9355C27F3C113B5640D3186B3
        Validity
            Not Before: Oct  5 02:54:45 2026 GMT
            Not After : Oct 12 02:54:45 2026 GMT
        Subject: CN=6ac31175-3c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:7d:f4:e8:ef:73:20:25:85:a2:ef:c2:5f:
                    fa:43:0b:3c:fe:af:27:d3:c6:b1:d0:d1:9d:a0:62:
                    7f:74:4c:32:9d:aa:88:97:16:f2:bc:21:a6:5e:dc:
                    32:0c:41:9a:eb:85:ee:fc:dc:8c:6c:37:de:7b:42:
                    39:d3:33:1b:0e:92:00:2d:0f:04:a8:47:e7:69:2e:
                    f0:f7:36:11:53:b5:13:99:e9:b7:b5:0c:47:1c:b8:
                    e0:ce:7e:89:98:48:fc:ed:5e:dc:e2:de:92:62:5a:
                    e6:f4:00:b2:82:f6:20:56:22:a4:dc:b6:14:a3:d1:
                    10:e4:dd:c8:9e:b9:7b:18:32:9d:3b:74:7b:71:cc:
                    e8:b3:13:64:b7:20:01:af:e8:2f:9e:f3:20:7f:10:
                    2e:3e:f5:8b:cc:53:2a:ae:10:62:d3:49:34:2c:f8:
                    9e:fb:f0:95:b7:c7:43:b7:2d:47:e9:11:cb:26:b4:
                    ba:28:8d:13:5e:d0:df:98:d1:38:d6:1b:14:18:81:
                    56:64:af:59:71:7f:78:6d:c8:69:5d:80:d0:d2:37:
                    9d:d1:ce:8e:75:ee:cc:99:c3:e1:27:48:77:24:d8:
                    7c:1e:23:c2:35:65:7c:7b:0c:c0:44:33:7e:2d:b7:
                    06:58:37:fd:76:6b:05:dd:91:55:12:c7:a7:9b:2f:
                    3a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:13:06:23:5F:4E:31:A3:E7:2D:92:37:57:7B:D0:BB:2D:76:CB:E0
            X509v3 Authority Key Identifier:
                keyid:3D:BD:D7:ED:41:24:80:E9:35:5C:27:F3:C1:13:B5:64:0D:31:86:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3399/BA68C3285CB811EE8523BC7AC4F9AE02/Pb3X7UEkgOk1XCfzwRO1ZA0xhrM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b8:8d:ea:0d:09:53:d0:b2:5a:e4:a3:03:f0:1a:30:ec:e5:
         d3:ca:d9:01:0f:1c:6b:3c:67:72:a2:b0:db:15:f5:c8:0b:4d:
         fb:37:0b:88:7d:7f:98:5c:f5:d3:66:2a:84:aa:6d:54:44:2f:
         cf:06:60:97:b8:82:43:dc:08:51:5a:89:24:5e:ab:9a:e2:9f:
         56:a1:70:22:38:39:72:91:2b:ce:5f:a5:a1:56:47:d4:e1:f3:
         e2:e5:8a:ef:e7:9f:8f:96:ab:78:5d:b4:95:a0:64:c9:67:ce:
         9f:a1:96:e1:f7:72:3c:d3:4b:20:10:c8:1d:47:75:fa:df:80:
         94:c4:e7:2b:09:dc:a0:d9:94:c1:80:05:4b:12:32:79:fc:f7:
         6f:63:30:c5:2f:54:f0:08:7f:79:e2:d3:e7:a2:05:57:a3:3f:
         33:68:65:65:62:e7:2c:74:d1:45:d4:ed:85:14:bf:10:d5:e5:
         1a:fa:53:4a:eb:0a:d9:99:99:7a:8a:ae:bc:fc:a5:71:2c:1d:
         be:38:78:60:e4:85:85:e3:12:16:e6:5f:7f:1e:2a:b4:ad:d4:
         37:1e:c6:47:e8:90:06:e9:75:07:5c:ad:5b:8c:be:c3:6e:10:
         e8:63:a4:92:ed:dc:1d:8f:84:71:b8:54:07:af:04:de:f8:21:
         26:0f:ed:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTMzOTkxMTAvBgNVBAUTKDNEQkREN0VENDEyNDgwRTkzNTVDMjdGM0MxMTNCNTY0
MEQzMTg2QjMwHhcNMjYxMDA1MDI1NDQ1WhcNMjYxMDEyMDI1NDQ1WjAYMRYwFAYD
VQQDEw02YWMzMTE3NS0zYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmh99OjvcyAlhaLvwl/6Qws8/q8n08ax0NGdoGJ/dEwynaqIlxbyvCGmXtwy
DEGa64Xu/NyMbDfee0I50zMbDpIALQ8EqEfnaS7w9zYRU7UTmem3tQxHHLjgzn6J
mEj87V7c4t6SYlrm9ACygvYgViKk3LYUo9EQ5N3Inrl7GDKdO3R7cczosxNktyAB
r+gvnvMgfxAuPvWLzFMqrhBi00k0LPie+/CVt8dDty1H6RHLJrS6KI0TXtDfmNE4
1hsUGIFWZK9ZcX94bchpXYDQ0jed0c6Ode7MmcPhJ0h3JNh8HiPCNWV8ewzARDN+
LbcGWDf9dmsF3ZFVEsenmy86awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0TBiNf
TjGj5y2SN1d70LstdsvgMB8GA1UdIwQYMBaAFD291+1BJIDpNVwn88ETtWQNMYaz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzM5OS9CQTY4QzMyODVD
QjgxMUVFODUyM0JDN0FDNEY5QUUwMi9QYjNYN1VFa2dPazFYQ2Z6d1JPMVpBMHho
ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BiM1g3VUVrZ09rMVhDZnp3Uk8xWkEweGhyTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzM5OS9CQTY4QzMyODVDQjgxMUVFODUyM0JDN0FDNEY5QUUwMi9QYjNYN1VFa2dP
azFYQ2Z6d1JPMVpBMHhock0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa7iN6g0JU9CyWuSjA/AaMOzl08rZAQ8cazxncqKw2xX1yAtN+zcLiH1/mFz1
02YqhKptVEQvzwZgl7iCQ9wIUVqJJF6rmuKfVqFwIjg5cpErzl+loVZH1OHz4uWK
7+efj5areF20laBkyWfOn6GW4fdyPNNLIBDIHUd1+t+AlMTnKwncoNmUwYAFSxIy
efz3b2MwxS9U8Ah/eeLT56IFV6M/M2hlZWLnLHTRRdTthRS/ENXlGvpTSusK2ZmZ
eoquvPylcSwdvjh4YOSFheMSFuZffx4qtK3UNx7GR+iQBul1B1ytW4y+w24Q6GOk
ku3cHY+EcbhUB68E3vghJg/tXg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 18:58:49 2026 by rpki-client