Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft
File:                     3SNdNwiQmzPViUtMzckQXGH9Fq4.mft (raw, json)
Hash identifier:          B1GzQff6r6BCND92JWQfI3zGo7ZQnPX32P2OeWagvSc=
Subject key identifier:   C5:F1:BE:5B:40:4F:DF:B6:BA:A3:8A:FD:71:32:D1:D0:6D:7B:37:DA
Authority key identifier: DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE
Certificate issuer:       /CN=A91B8C13/serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft
Manifest number:          027B
Signing time:             Sun 18 Oct 2026 15:16:59 +0000
Manifest this update:     Sun 18 Oct 2026 15:16:59 +0000
Manifest next update:     Sun 25 Oct 2026 15:16:59 +0000
Files and hashes:         1: 3SNdNwiQmzPViUtMzckQXGH9Fq4.crl (hash: 3smwfgZ0uUB6RLrms/ArAeTmVp/dkInGpWgreDtr7Js=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl
                          rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 15:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C13, serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE
        Validity
            Not Before: Oct 18 15:16:59 2026 GMT
            Not After : Oct 25 15:16:59 2026 GMT
        Subject: CN=6ad4e2eb-0499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:25:2d:4d:f0:ce:fa:9f:ea:fa:8b:9e:80:
                    a0:ed:bc:98:ff:9e:f7:54:55:84:dd:b1:48:19:29:
                    e5:5b:60:10:61:c7:e6:26:6b:de:8e:04:cd:0d:6d:
                    03:20:32:6d:1c:de:8d:e3:36:7e:fb:58:e4:6e:b0:
                    5f:66:33:19:4e:77:ee:0e:4e:bc:9e:37:84:c8:5b:
                    ac:96:da:73:90:1c:ac:c9:30:05:27:19:83:34:55:
                    66:86:62:0c:12:87:a1:06:2a:4e:dd:cd:24:61:ff:
                    2d:ab:d1:78:01:2e:93:c0:a1:49:b7:94:c6:48:7d:
                    86:2f:1d:8c:1a:8a:25:40:75:9b:f9:6b:45:74:fc:
                    f8:ab:b9:2f:6a:60:54:b7:c5:7a:8c:bb:52:85:1a:
                    90:11:ab:bb:44:5c:77:ae:4b:82:e0:32:26:e3:00:
                    2d:e5:c1:ad:67:5a:0c:81:48:ef:f1:0c:49:3c:39:
                    2a:64:c3:dd:0a:eb:95:b6:f0:eb:3d:7a:5b:23:65:
                    f3:78:20:fa:74:e1:7b:55:e0:1f:b0:ed:68:1a:fa:
                    45:f7:49:54:47:f6:b8:56:b8:87:e0:f3:52:ac:e4:
                    fc:77:63:3f:51:d9:a5:68:35:65:a2:21:9d:3b:ec:
                    a1:2b:08:ee:69:04:d7:ef:b2:c1:74:4c:a7:2a:e6:
                    7a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F1:BE:5B:40:4F:DF:B6:BA:A3:8A:FD:71:32:D1:D0:6D:7B:37:DA
            X509v3 Authority Key Identifier:
                keyid:DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:2e:c9:ec:e3:2e:8f:62:e8:3d:8d:d4:5c:e6:e3:fa:d6:4b:
         c2:75:5b:74:14:c6:5f:e1:08:99:c6:91:92:0a:02:b6:f1:7e:
         30:fa:03:8f:75:d3:22:c6:e8:76:23:08:35:6f:f8:12:cb:f5:
         70:51:1d:a1:ea:7e:ee:8a:05:a2:67:4b:58:3d:5c:38:08:d7:
         70:07:d1:26:15:a2:fe:06:fb:c0:0e:cd:c4:2f:09:aa:d6:47:
         ea:05:ed:b8:6e:5a:92:68:1b:a8:f1:14:3d:25:be:b0:cf:1a:
         e1:5c:5b:c6:4f:59:04:ea:a4:77:99:d6:82:73:a0:46:ef:43:
         c8:ac:d1:e9:93:1a:6f:e7:39:70:ba:d8:72:41:60:86:fe:92:
         58:63:53:43:5d:31:5f:c7:23:91:be:85:45:d5:46:1a:2e:bb:
         ff:19:85:f9:d6:c3:2b:49:46:e0:c2:cf:cf:8b:01:b2:bd:b1:
         06:c1:93:74:ef:07:5e:18:52:56:42:2a:04:52:7b:88:f9:5c:
         e8:27:d0:80:6c:a4:58:f3:5a:c2:1f:9b:e7:ab:99:da:04:0e:
         a9:e3:94:1a:c0:5f:bf:99:a7:6b:30:49:09:2e:19:1c:13:70:
         9c:19:02:5a:00:25:32:03:96:e1:c4:cf:4e:76:97:99:3a:ac:
         5c:7e:85:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhDMTMxMTAvBgNVBAUTKEREMjM1RDM3MDg5MDlCMzNENTg5NEI0Q0NEQzkxMDVD
NjFGRDE2QUUwHhcNMjYxMDE4MTUxNjU5WhcNMjYxMDI1MTUxNjU5WjAYMRYwFAYD
VQQDEw02YWQ0ZTJlYi0wNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4VUlLU3wzvqf6vqLnoCg7byY/573VFWE3bFIGSnlW2AQYcfmJmvejgTNDW0D
IDJtHN6N4zZ++1jkbrBfZjMZTnfuDk68njeEyFusltpzkBysyTAFJxmDNFVmhmIM
EoehBipO3c0kYf8tq9F4AS6TwKFJt5TGSH2GLx2MGoolQHWb+WtFdPz4q7kvamBU
t8V6jLtShRqQEau7RFx3rkuC4DIm4wAt5cGtZ1oMgUjv8QxJPDkqZMPdCuuVtvDr
PXpbI2XzeCD6dOF7VeAfsO1oGvpF90lUR/a4VriH4PNSrOT8d2M/UdmlaDVloiGd
O+yhKwjuaQTX77LBdEynKuZ6XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXxvltA
T9+2uqOK/XEy0dBtezfaMB8GA1UdIwQYMBaAFN0jXTcIkJsz1YlLTM3JEFxh/Rau
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy9EMDYxMTcxNjBC
MkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16UFZpVXRNemNrUVhHSDlG
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzNTTmROd2lRbXpQVmlVdE16Y2tRWEdIOUZxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEMxMy9EMDYxMTcxNjBCMkQxMUVFODY3RTZBMTdDNEY5QUUwMi8zU05kTndpUW16
UFZpVXRNemNrUVhHSDlGcTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAi7J7OMuj2LoPY3UXObj+tZLwnVbdBTGX+EImcaRkgoCtvF+MPoDj3XTIsbo
diMINW/4Esv1cFEdoep+7ooFomdLWD1cOAjXcAfRJhWi/gb7wA7NxC8JqtZH6gXt
uG5akmgbqPEUPSW+sM8a4Vxbxk9ZBOqkd5nWgnOgRu9DyKzR6ZMab+c5cLrYckFg
hv6SWGNTQ10xX8cjkb6FRdVGGi67/xmF+dbDK0lG4MLPz4sBsr2xBsGTdO8HXhhS
VkIqBFJ7iPlc6CfQgGykWPNawh+b56uZ2gQOqeOUGsBfv5mnazBJCS4ZHBNwnBkC
WgAlMgOW4cTPTnaXmTqsXH6Ftw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 14:28:37 2026 by rpki-client