Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
File:                     3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json)
Hash identifier:          uehMuv23Azoe8U7IP9s6iYMRgbOOShCMcEb/vWrLSp4=
Subject key identifier:   E3:88:DE:FB:3E:FF:B1:DC:1C:46:F0:59:A0:49:65:C4:CF:71:54:E3
Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
Certificate issuer:       /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Certificate serial:       0C3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
Manifest number:          41BE
Signing time:             Sun 04 Oct 2026 14:49:00 +0000
Manifest this update:     Sun 04 Oct 2026 14:48:59 +0000
Manifest next update:     Sun 11 Oct 2026 14:48:59 +0000
Files and hashes:         1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: iEVQB1untEW3N5nFC0G9ZtNt4Y9Qrxu2v1C78IyM2U0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
                          rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3133 (0xc3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
        Validity
            Not Before: Oct  4 14:48:59 2026 GMT
            Not After : Oct 11 14:48:59 2026 GMT
        Subject: CN=6ac2675b-eaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:96:2b:5c:d9:06:7f:20:b6:96:56:6e:54:09:
                    61:8d:94:c8:1a:92:1b:79:70:19:0b:b2:98:cd:ab:
                    06:cc:b9:73:1d:64:a5:9a:dd:78:5e:9d:c1:d3:82:
                    d5:74:c1:65:ea:5d:58:59:03:2e:d6:ae:89:ec:e2:
                    64:c8:7f:1a:64:00:b7:d3:a9:b3:8b:6b:87:3a:82:
                    be:58:e0:e3:1c:e4:38:53:59:b3:b5:cf:23:3b:02:
                    e1:a8:1a:35:77:58:6b:96:19:c5:4a:81:bf:82:61:
                    73:c8:5d:85:7f:fa:72:77:e6:60:14:87:72:a1:59:
                    23:bf:25:7c:3c:c9:8c:d1:52:44:ee:27:00:89:9f:
                    3a:a0:e5:f7:07:5e:2f:8c:73:1d:02:26:02:60:30:
                    c0:c6:b7:62:a9:42:c4:7b:a5:bc:13:55:6c:66:98:
                    99:52:46:59:1a:e2:47:a4:d5:2e:70:eb:ea:18:64:
                    5c:ab:85:29:81:2a:10:fe:7d:f4:5e:2c:72:c1:13:
                    02:f8:9d:cb:38:a7:0a:95:fa:fe:4c:ac:47:c9:6d:
                    84:ba:ec:88:76:49:9b:00:13:c8:55:04:0e:9a:ab:
                    08:cc:1d:8b:af:65:bc:ae:aa:ce:4a:f7:0c:82:db:
                    bd:fd:f5:93:9a:b1:43:3f:0b:1a:0d:1a:8e:fa:9b:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:88:DE:FB:3E:FF:B1:DC:1C:46:F0:59:A0:49:65:C4:CF:71:54:E3
            X509v3 Authority Key Identifier:
                keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:62:15:07:42:7d:5a:a0:9b:1e:82:15:2a:9a:79:b8:f7:cb:
         37:d3:da:f9:1b:99:5c:e8:cc:c8:cd:a4:93:30:93:ac:41:f6:
         0d:54:92:8b:e2:e8:98:28:32:d0:e2:f1:61:bc:0b:a7:3a:2a:
         42:15:a8:71:73:0a:6d:31:c0:38:f5:dd:ac:16:b9:f8:f4:ec:
         9c:92:10:9e:a5:05:c5:54:fa:3f:64:f1:7d:14:61:89:1f:cb:
         7f:52:31:61:b1:72:d2:40:c7:13:a6:ec:f1:bb:1e:e2:be:18:
         d4:1a:79:21:e9:65:18:ca:8c:61:54:c4:ce:25:0d:b0:9d:e9:
         2d:70:30:9c:c2:f3:b9:33:f0:ae:da:b9:e5:88:53:37:63:c1:
         d4:7d:77:8a:73:1c:92:8d:35:d9:c3:a2:6e:02:bf:6f:c8:40:
         a0:d4:ea:24:d6:fd:93:ce:c2:cf:45:34:7a:2a:1b:55:49:67:
         79:44:8d:b0:e7:d4:16:aa:69:15:c7:75:f5:e8:51:09:d3:63:
         5d:de:0a:25:43:96:99:e0:f5:c4:ff:ed:55:71:ca:a3:c7:ba:
         ec:9e:05:cd:2d:a0:c9:42:8b:5d:76:4d:6f:a2:27:c4:23:46:
         ee:98:de:ca:49:fc:08:f5:04:a0:a4:6f:77:af:46:54:26:59:
         06:dc:68:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVBQUExMTAvBgNVBAUTKERDRjU0NzBDNUM4NzgyODhENjFEOUVBNUE1MTVENTg1
MEU3QjU4NzMwHhcNMjYxMDA0MTQ0ODU5WhcNMjYxMDExMTQ0ODU5WjAYMRYwFAYD
VQQDEw02YWMyNjc1Yi1lYWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5ZYrXNkGfyC2llZuVAlhjZTIGpIbeXAZC7KYzasGzLlzHWSlmt14Xp3B04LV
dMFl6l1YWQMu1q6J7OJkyH8aZAC306mzi2uHOoK+WODjHOQ4U1mztc8jOwLhqBo1
d1hrlhnFSoG/gmFzyF2Ff/pyd+ZgFIdyoVkjvyV8PMmM0VJE7icAiZ86oOX3B14v
jHMdAiYCYDDAxrdiqULEe6W8E1VsZpiZUkZZGuJHpNUucOvqGGRcq4UpgSoQ/n30
XixywRMC+J3LOKcKlfr+TKxHyW2EuuyIdkmbABPIVQQOmqsIzB2Lr2W8rqrOSvcM
gtu9/fWTmrFDPwsaDRqO+pvHzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOOI3vs+
/7HcHEbwWaBJZcTPcVTjMB8GA1UdIwQYMBaAFNz1Rwxch4KI1h2epaUV1YUOe1hz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFBQS84RjU4OTI5NDFE
OTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdvaldIWjZscFJYVmhRNTdX
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNQVkhERnlIZ29qV0haNmxwUlhWaFE1N1dITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUFBQS84RjU4OTI5NDFEOTUxMUUyQTk4QTlBN0QwOEIwMkNEMi8zUFZIREZ5SGdv
aldIWjZscFJYVmhRNTdXSE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ2IVB0J9WqCbHoIVKpp5uPfLN9Pa+RuZXOjMyM2kkzCTrEH2DVSSi+LomCgy
0OLxYbwLpzoqQhWocXMKbTHAOPXdrBa5+PTsnJIQnqUFxVT6P2TxfRRhiR/Lf1Ix
YbFy0kDHE6bs8bse4r4Y1Bp5IellGMqMYVTEziUNsJ3pLXAwnMLzuTPwrtq55YhT
N2PB1H13inMcko012cOibgK/b8hAoNTqJNb9k87Cz0U0eiobVUlneUSNsOfUFqpp
Fcd19ehRCdNjXd4KJUOWmeD1xP/tVXHKo8e67J4FzS2gyUKLXXZNb6InxCNG7pje
ykn8CPUEoKRvd69GVCZZBtxomg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:13:40 2026 by rpki-client