Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
File:                     3SQy2K1rs-npllWAu8bSIhkHs_c.mft (raw, json)
Hash identifier:          C4mGdWhMszlS6IW6sTRsMoTnmEEL0YTq+DuLi54o4qc=
Subject key identifier:   E9:E5:69:EB:F3:F5:E7:1E:82:97:A0:C0:AE:B5:CF:AA:E1:05:9E:13
Authority key identifier: DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7
Certificate issuer:       /CN=A91AAE2E/serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
Manifest number:          01D6
Signing time:             Sat 03 Oct 2026 04:18:13 +0000
Manifest this update:     Sat 03 Oct 2026 04:18:12 +0000
Manifest next update:     Sat 10 Oct 2026 04:18:12 +0000
Files and hashes:         1: 3SQy2K1rs-npllWAu8bSIhkHs_c.crl (hash: /2MrdB6+9euU9hfztdGleU5S7a985AzLKAs3RWRadQk=)
                          2: 121E99A8F21911EE95F21158C4F9AE02.roa (hash: MxjihytyjqbI0kprRCcgZJxlcagSJ1SZVxyrVtzudrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE2E, serialNumber=DD2432D8AD6BB3E9E9965580BBC6D2221907B3F7
        Validity
            Not Before: Oct  3 04:18:12 2026 GMT
            Not After : Oct 10 04:18:12 2026 GMT
        Subject: CN=6ac08205-ee93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:1b:2b:25:2f:84:61:8b:a6:01:a0:98:18:
                    cf:23:6c:e9:fd:bd:24:73:59:21:25:e4:d5:b1:79:
                    0c:51:18:3c:25:83:40:63:8a:0c:78:61:82:43:a5:
                    69:fa:d8:87:b4:9f:ca:9b:4e:71:be:4f:7b:b2:3a:
                    7c:13:1b:cd:0f:62:d7:05:ff:25:91:1d:81:44:64:
                    9a:14:c4:13:1c:1d:00:00:aa:57:ec:ca:60:a6:3c:
                    b9:41:77:93:23:a9:8d:5c:7c:51:4d:91:9b:79:f4:
                    2b:11:0b:c4:b3:9c:4c:6a:2d:cc:1f:82:fa:60:b2:
                    ed:45:f5:4b:9e:77:b7:f7:2c:31:52:07:1a:29:14:
                    c8:59:50:cd:31:75:77:8c:4a:fd:2e:a2:b2:eb:79:
                    a7:2b:b7:46:66:36:68:30:6c:ee:5f:4d:26:d0:44:
                    c7:b3:64:b5:c3:c1:22:00:48:5e:64:ab:d6:b9:12:
                    8a:3d:51:ec:07:bc:ef:42:23:45:2e:26:b8:2f:6a:
                    17:45:11:9b:6b:7a:0d:5e:9e:31:ba:33:14:23:92:
                    54:0b:bb:ef:e6:da:8a:2f:b3:54:24:a3:b1:cb:a2:
                    ce:a7:3a:bb:84:4b:60:be:20:ee:36:77:e8:f1:7d:
                    53:22:30:31:e0:30:bf:8f:6d:ee:71:13:4a:82:c5:
                    59:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E5:69:EB:F3:F5:E7:1E:82:97:A0:C0:AE:B5:CF:AA:E1:05:9E:13
            X509v3 Authority Key Identifier:
                keyid:DD:24:32:D8:AD:6B:B3:E9:E9:96:55:80:BB:C6:D2:22:19:07:B3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SQy2K1rs-npllWAu8bSIhkHs_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE2E/E71A0BBCF21711EEBCCC3120C4F9AE02/3SQy2K1rs-npllWAu8bSIhkHs_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:56:1b:b8:7e:c7:7d:48:4b:fd:83:e6:08:ef:b7:51:50:5d:
         61:eb:12:26:a7:09:3e:99:b4:7d:8a:5c:48:f4:b9:88:68:6a:
         07:77:e9:cd:2d:d1:75:d4:4f:41:61:bf:3a:c7:fb:b3:77:3f:
         f7:4d:72:0d:a5:ed:cf:d2:6c:64:39:d2:c6:96:08:72:9c:7b:
         8e:d4:84:86:0e:cd:c4:d7:23:35:32:74:f8:e5:76:01:29:f7:
         72:d9:f1:71:72:f6:35:d4:f4:91:08:28:40:a4:be:76:49:b9:
         77:b7:83:8b:88:bb:d8:b8:3e:46:d4:fc:58:b5:ae:ad:e5:5f:
         de:9c:14:b8:f6:14:e8:9d:fa:9c:06:63:99:00:a7:30:3a:b9:
         06:44:09:bd:71:cd:20:1c:46:0a:b1:7d:fb:86:05:04:50:c1:
         73:f0:94:7e:35:da:2c:34:97:cf:3c:2d:04:5f:87:0b:3a:ba:
         1c:06:d3:44:91:a3:cd:d3:04:64:bf:fc:69:51:d5:33:66:5a:
         71:d2:0e:25:7c:ec:b5:91:26:8c:89:ef:4a:0a:20:91:ba:e1:
         e3:00:e1:ae:c4:3c:44:69:64:a3:2b:60:c8:81:b8:e0:7c:e9:
         a7:d5:bd:76:ec:b6:8b:80:a6:e6:ee:14:68:26:89:db:3e:33:
         df:80:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:37 2026 by rpki-client