Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
File:                     3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json)
Hash identifier:          XfoyaW0jFKTaBaNsx9/TQ/Viw2PwIgLXqg/bjcDrlek=
Subject key identifier:   37:8F:F5:65:99:4B:68:17:53:88:3B:42:36:1F:A9:5B:C5:4F:CB:41
Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
Certificate issuer:       /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Certificate serial:       16CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
Manifest number:          16BF
Signing time:             Sun 04 Oct 2026 16:41:46 +0000
Manifest this update:     Sun 04 Oct 2026 16:41:45 +0000
Manifest next update:     Sun 11 Oct 2026 16:41:45 +0000
Files and hashes:         1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: IB/A7sgIvUuMMCqds1po00i3cWmlxTvGB6LYU/n6N74=)
                          2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: VHKrRamBzI5Z2a2wNY14oKOBu6LJFzzc8akNzDVPDyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
                          rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5834 (0x16ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
        Validity
            Not Before: Oct  4 16:41:45 2026 GMT
            Not After : Oct 11 16:41:45 2026 GMT
        Subject: CN=6ac281ca-d5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:64:0d:1a:14:58:22:15:db:78:3b:ef:d6:da:
                    67:3c:57:02:35:07:97:5c:af:77:c0:60:bb:33:db:
                    db:f8:fc:f6:23:cc:45:0c:12:55:f4:1c:99:82:ae:
                    9a:32:33:07:ce:36:bd:79:ce:da:6b:13:6f:45:0e:
                    ce:9a:52:9d:93:6a:1b:e5:8c:23:4a:6a:23:21:9b:
                    9d:b4:f9:52:d0:c2:1d:fc:b6:5a:44:d5:c7:9b:a2:
                    0e:41:e2:d6:e1:f8:10:ce:b6:e0:a6:c6:c1:d8:f7:
                    db:6d:ce:bb:9f:d4:8a:b0:f3:56:36:3b:f2:d7:2d:
                    af:bd:67:26:1b:12:a8:fc:26:36:6f:2c:12:54:40:
                    fa:ae:c4:e6:48:aa:69:3c:fd:e3:e8:8e:66:6e:14:
                    69:1f:a9:25:1c:5b:30:39:08:0b:80:e3:22:7e:05:
                    9f:bf:72:0e:7d:a8:3c:70:80:a7:1d:3c:25:f3:55:
                    a6:16:14:e0:7b:a5:ef:4b:7f:7d:23:e8:aa:42:ea:
                    ff:bc:ee:ac:57:eb:af:1b:73:05:f2:14:6e:66:ad:
                    70:77:46:af:05:e5:e0:96:af:3f:fc:f4:51:b2:de:
                    65:d9:28:3d:92:0e:1a:01:f4:ea:e7:7a:e8:7e:20:
                    73:db:f1:76:f2:27:97:17:a9:5e:81:a6:17:87:8c:
                    79:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8F:F5:65:99:4B:68:17:53:88:3B:42:36:1F:A9:5B:C5:4F:CB:41
            X509v3 Authority Key Identifier:
                keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e5:97:b0:ea:33:f1:53:53:cc:f0:8c:a1:00:07:4e:33:57:
         b2:67:b7:2c:9e:ba:0a:a3:a7:89:a4:80:64:3a:b7:c8:01:bd:
         8d:a2:8d:07:6f:b6:c9:ec:34:5a:eb:8e:71:fd:2f:3f:4a:50:
         4c:f9:3f:01:27:a1:fc:e6:06:99:ab:69:2b:38:27:03:7e:d5:
         75:fe:bf:53:e6:39:f3:75:a7:bb:e7:ed:c5:e3:05:28:5a:89:
         77:d5:fd:13:98:3d:c1:25:6b:08:48:d9:2c:82:31:55:50:c6:
         61:ba:38:17:27:9f:f0:8f:bf:69:86:d6:00:4d:64:42:ad:62:
         30:6f:a8:8d:47:16:d6:25:c1:33:0b:d7:c2:51:45:4d:d2:a9:
         5f:39:d6:d0:5b:45:df:a9:37:70:8a:97:cd:d1:64:bc:fc:ee:
         f8:57:95:76:eb:97:9b:4c:c0:90:d3:ff:c7:db:0e:e4:84:f6:
         cb:6d:47:98:98:be:31:a7:15:aa:e1:e4:0b:61:c4:1c:58:54:
         39:92:84:37:85:2b:8d:91:41:46:f4:66:33:b8:3c:25:e9:a8:
         76:ee:66:f3:26:4b:78:23:73:c1:dc:fb:50:a2:ad:30:c2:eb:
         db:eb:39:78:eb:1e:d0:da:a3:d2:ea:ec:30:86:2d:1a:50:5f:
         b2:2e:63:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:29:31 2026 by rpki-client