Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
File:                     3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft (raw, json)
Hash identifier:          2NGuBed3TBZIyNpl0LyQrPmq/33wFO6R3RkNKQX68o8=
Subject key identifier:   46:20:56:E9:31:FF:5A:83:A8:A8:E4:D4:7A:7D:E9:5F:CA:44:3B:76
Authority key identifier: DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0
Certificate issuer:       /CN=A91A5201/serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
Manifest number:          0122
Signing time:             Tue 27 Oct 2026 06:06:49 +0000
Manifest this update:     Tue 27 Oct 2026 06:06:49 +0000
Manifest next update:     Tue 03 Nov 2026 06:06:49 +0000
Files and hashes:         1: 3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl (hash: zLKE+klsoqfWyZQo2vVf+lXxyArecoxctr0Y4wM+7cw=)
                          2: D0CA23541BC611F09FDAC047C4F9AE02.roa (hash: T6VpKK0GSgbr7FyO43J42BuxmDs3Uod/nZfdKOm/b7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl
                          rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 06:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5201, serialNumber=DEE5B8BC850A5B6BCB46D7E3B4C97E8B8328A7A0
        Validity
            Not Before: Oct 27 06:06:49 2026 GMT
            Not After : Nov  3 06:06:49 2026 GMT
        Subject: CN=6ae03f79-7205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:1d:6c:20:38:50:81:e2:6f:b3:28:a4:19:
                    4b:48:8e:41:0c:32:c5:d5:71:a9:34:1f:08:4b:81:
                    fd:00:fa:b5:e9:f0:cd:9f:f4:96:69:97:46:ed:d9:
                    49:ad:a8:52:24:54:24:04:1d:93:81:16:3d:8e:86:
                    24:aa:f3:40:95:8c:91:5c:a1:f2:f6:89:de:d6:60:
                    5b:df:66:ae:6e:61:73:88:2f:d2:dc:e0:47:b7:fa:
                    1c:9a:2f:26:c7:ae:07:f5:13:73:17:dd:f3:ab:80:
                    f6:08:cd:aa:d4:74:0d:5c:87:d0:be:e1:61:7b:f8:
                    4f:c2:e3:cb:bd:b8:54:1f:6d:3a:de:8e:b2:54:07:
                    e5:01:d5:aa:1b:45:eb:28:d8:91:ae:92:56:0f:d8:
                    6a:da:3d:01:7a:07:ad:f7:34:38:c4:45:fa:73:26:
                    8b:33:d0:72:0a:30:73:df:71:0e:4f:aa:9d:24:83:
                    01:10:fa:d5:07:f2:88:24:f9:4b:84:88:ee:73:19:
                    c6:08:d3:cb:16:a9:18:80:c5:2f:b3:29:3a:3f:22:
                    0d:6e:f4:d1:4a:cc:9a:dc:22:2a:6a:15:6e:d5:71:
                    d6:56:bc:55:b8:1f:ad:57:5b:f9:f0:23:54:17:d1:
                    f0:f1:45:fc:b9:b4:35:59:dd:12:62:73:47:8f:7a:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:20:56:E9:31:FF:5A:83:A8:A8:E4:D4:7A:7D:E9:5F:CA:44:3B:76
            X509v3 Authority Key Identifier:
                keyid:DE:E5:B8:BC:85:0A:5B:6B:CB:46:D7:E3:B4:C9:7E:8B:83:28:A7:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3uW4vIUKW2vLRtfjtMl-i4Mop6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5201/45AAA1E81B5511F0A395B813C4F9AE02/3uW4vIUKW2vLRtfjtMl-i4Mop6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ab:1e:88:d6:36:42:11:41:7a:91:25:2f:87:32:eb:bf:d2:
         a8:20:f7:20:0b:92:99:01:99:76:f6:2b:99:1b:cf:15:0d:23:
         6b:b3:f7:d0:38:9b:fa:03:24:4f:e2:00:86:b6:5e:25:d9:99:
         9f:6c:08:c0:90:73:e5:bb:d9:e3:6b:01:25:29:6f:4e:41:61:
         05:53:2e:f2:47:49:4f:e3:4e:f6:2a:e9:ad:9e:0d:3a:09:29:
         9f:10:34:a5:28:ef:d9:ce:cb:e0:f8:6b:6a:c6:d3:c3:81:72:
         ee:b9:4b:e5:e1:e6:a4:ef:11:3a:9a:01:b2:bc:ad:8f:b2:f7:
         26:06:55:f2:a3:0e:f6:12:49:6d:17:ff:cf:4b:4c:49:01:73:
         f2:b4:67:ba:01:34:58:53:43:88:01:df:fc:96:9e:16:4b:6b:
         a0:f2:74:a5:d2:b2:f4:2a:d9:ce:39:bb:3e:2f:a3:bb:ca:c3:
         50:c6:64:ee:b6:89:17:c2:ad:1d:7e:79:fd:7a:79:36:e7:31:
         2d:76:6e:6a:79:66:2b:94:42:7a:b4:f0:8f:8f:43:04:0b:58:
         52:44:75:34:de:32:96:b0:c4:8b:de:97:85:96:db:c9:aa:eb:
         d9:88:b6:4a:fe:a5:18:9e:39:23:c2:bc:3f:d8:56:76:00:0b:
         ab:a4:9b:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUyMDExMTAvBgNVBAUTKERFRTVCOEJDODUwQTVCNkJDQjQ2RDdFM0I0Qzk3RThC
ODMyOEE3QTAwHhcNMjYxMDI3MDYwNjQ5WhcNMjYxMTAzMDYwNjQ5WjAYMRYwFAYD
VQQDEw02YWUwM2Y3OS03MjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyJEdbCA4UIHib7MopBlLSI5BDDLF1XGpNB8IS4H9APq16fDNn/SWaZdG7dlJ
rahSJFQkBB2TgRY9joYkqvNAlYyRXKHy9one1mBb32aubmFziC/S3OBHt/ocmi8m
x64H9RNzF93zq4D2CM2q1HQNXIfQvuFhe/hPwuPLvbhUH2063o6yVAflAdWqG0Xr
KNiRrpJWD9hq2j0Beget9zQ4xEX6cyaLM9ByCjBz33EOT6qdJIMBEPrVB/KIJPlL
hIjucxnGCNPLFqkYgMUvsyk6PyINbvTRSsya3CIqahVu1XHWVrxVuB+tV1v58CNU
F9Hw8UX8ubQ1Wd0SYnNHj3oqnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEYgVukx
/1qDqKjk1Hp96V/KRDt2MB8GA1UdIwQYMBaAFN7luLyFCltry0bX47TJfouDKKeg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIwMS80NUFBQTFFODFC
NTUxMUYwQTM5NUI4MTNDNEY5QUUwMi8zdVc0dklVS1cydkxSdGZqdE1sLWk0TW9w
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN1VzR2SVVLVzJ2TFJ0Zmp0TWwtaTRNb3A2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTIwMS80NUFBQTFFODFCNTUxMUYwQTM5NUI4MTNDNEY5QUUwMi8zdVc0dklVS1cy
dkxSdGZqdE1sLWk0TW9wNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApKseiNY2QhFBepElL4cy67/SqCD3IAuSmQGZdvYrmRvPFQ0ja7P30Dib+gMk
T+IAhrZeJdmZn2wIwJBz5bvZ42sBJSlvTkFhBVMu8kdJT+NO9irprZ4NOgkpnxA0
pSjv2c7L4PhrasbTw4Fy7rlL5eHmpO8ROpoBsrytj7L3JgZV8qMO9hJJbRf/z0tM
SQFz8rRnugE0WFNDiAHf/JaeFktroPJ0pdKy9CrZzjm7Pi+ju8rDUMZk7raJF8Kt
HX55/Xp5NucxLXZuanlmK5RCerTwj49DBAtYUkR1NN4ylrDEi96XhZbbyarr2Yi2
Sv6lGJ45I8K8P9hWdgALq6SbUg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:33:00 2026 by rpki-client