Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
File:                     3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft (raw, json)
Hash identifier:          hbnRJzVwmxVB1gdjLrYS1+sqwzWbt7TDFPIy44NyoBE=
Subject key identifier:   EE:6C:62:44:30:14:9A:34:E7:BE:B9:9A:24:D2:4B:19:A6:16:DA:F7
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Certificate issuer:       /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
Manifest number:          010A
Signing time:             Wed 09 Sep 2026 06:30:56 +0000
Manifest this update:     Wed 09 Sep 2026 06:30:56 +0000
Manifest next update:     Wed 16 Sep 2026 06:30:56 +0000
Files and hashes:         1: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl (hash: mit+9GkWOKtHoGTIQiugpdJmkUq8TDblJcKi39LCfkE=)
                          2: D0CA23541BC611F09FDAC047C4F9AE02.roa (hash: T6VpKK0GSgbr7FyO43J42BuxmDs3Uod/nZfdKOm/b7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
                          rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 06:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
        Validity
            Not Before: Sep  9 06:30:56 2026 GMT
            Not After : Sep 16 06:30:56 2026 GMT
        Subject: CN=6aa0fd20-fc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:a9:61:42:36:95:24:83:ca:2f:45:2b:62:
                    3a:a3:24:1c:d3:35:43:88:6b:af:e4:f9:9f:30:c7:
                    2d:c6:47:fb:dd:42:3e:35:ba:21:4f:e2:fa:d2:9f:
                    2d:03:24:0d:79:54:f7:a6:36:65:3a:8e:cc:b5:9e:
                    83:1f:37:9d:e5:da:a9:1f:89:a0:e6:e6:4d:0e:64:
                    f0:ec:cb:72:01:77:39:db:6b:81:b1:51:9b:09:27:
                    bd:44:fb:ec:3c:27:56:21:12:c2:95:1d:a5:6b:45:
                    65:02:34:84:6b:e1:44:0f:4d:be:03:97:d4:1f:1c:
                    69:41:56:59:ea:38:2d:27:95:c2:d0:16:5c:ab:38:
                    5e:4a:14:23:10:b7:04:68:92:2b:eb:e7:a8:99:6d:
                    af:c8:5d:3d:76:e8:9c:35:4f:01:cb:a8:57:f0:de:
                    1b:46:cf:5b:93:05:45:2d:28:55:c8:62:95:32:28:
                    0a:7d:b1:4b:49:e4:20:df:cc:2e:f4:00:85:7f:91:
                    b4:fe:fc:a1:1c:94:47:cb:af:69:a5:8e:d8:6a:a5:
                    8c:cc:ae:b1:f3:e3:da:1e:28:de:e6:d9:20:8c:2e:
                    ec:24:39:91:95:ed:27:0b:6c:7e:8a:0a:2d:ea:00:
                    c0:33:f0:83:0a:b7:48:56:38:89:08:da:e0:9a:dd:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6C:62:44:30:14:9A:34:E7:BE:B9:9A:24:D2:4B:19:A6:16:DA:F7
            X509v3 Authority Key Identifier:
                keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:92:bb:bc:0b:82:91:e0:ad:ef:10:62:23:c5:d0:cc:b9:55:
         9b:53:27:5a:f0:4d:56:58:ff:4f:e6:78:ab:12:ef:1e:3c:6e:
         6c:69:88:76:cd:3d:9d:1b:41:92:65:25:bd:cf:af:1a:6a:cf:
         3d:de:79:e6:41:a1:f9:df:3b:1a:4e:23:ce:dd:0a:6a:2e:66:
         cb:0f:5d:1a:d3:1e:3d:09:b1:17:cb:2f:8d:55:f6:44:17:a4:
         fc:9c:13:ad:4d:f0:17:fd:2c:e0:9b:f3:29:8e:91:3d:68:95:
         b5:53:49:4d:d6:99:70:0f:1c:1b:26:f4:cf:e4:5f:cd:0f:41:
         8b:dc:fb:9c:c1:ba:3d:b8:5a:00:6a:36:af:51:ef:7f:03:f8:
         69:67:ad:f1:ff:1f:8a:82:2e:50:77:47:17:7e:51:95:84:76:
         9e:f6:a9:c1:45:e7:63:0f:f1:e5:89:98:7f:b5:0a:dd:65:eb:
         c6:18:d6:bc:eb:e2:7b:ab:e0:8b:44:2d:1d:bc:c1:ef:8e:70:
         6d:df:d0:d3:3e:56:e3:cc:5e:60:d1:71:57:f9:ad:58:71:0f:
         e4:56:90:f6:4e:2d:08:d8:4a:e3:4e:7f:3e:a8:70:28:91:45:
         bc:00:f8:fb:ab:62:bb:54:92:9b:8f:c6:98:f2:2f:bc:a8:29:
         ab:c9:b9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:48:49 2026 by rpki-client