Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File:                     z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier:          NUnsl4dYuXDbPrm30+mXHh1tLL07Bpw5OQHoqAU23n0=
Subject key identifier:   69:D3:17:8B:DE:03:99:AF:7B:15:D4:30:64:20:24:A7:AB:2E:A6:53
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer:       /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial:       35DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number:          35A5
Signing time:             Sat 24 Oct 2026 14:28:07 +0000
Manifest this update:     Sat 24 Oct 2026 14:28:06 +0000
Manifest next update:     Sat 31 Oct 2026 14:28:06 +0000
Files and hashes:         1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: Sg3LOSaGfQho9HlyUffSsCdNC03KGU3BL3cYMJJQUg4=)
                          2: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=)
                          3: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=)
                          4: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=)
                          5: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=)
                          6: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=)
                          7: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=)
                          8: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=)
                          9: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13787 (0x35db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
        Validity
            Not Before: Oct 24 14:28:06 2026 GMT
            Not After : Oct 31 14:28:06 2026 GMT
        Subject: CN=6adcc077-3a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:1c:e9:18:90:08:b7:89:22:74:4d:e1:07:
                    3e:5e:49:a4:23:c2:3b:92:b1:b5:48:8f:6c:34:53:
                    16:dd:3c:e3:7e:48:23:fc:56:1e:69:96:b9:5e:a8:
                    78:50:17:7a:b8:19:58:49:10:64:c9:b8:3b:33:80:
                    94:f9:da:26:15:86:97:ed:39:8b:9f:28:a6:1c:73:
                    cb:ae:71:2f:95:f4:27:38:05:80:4b:03:fd:07:0e:
                    ce:8c:e7:1d:c4:47:68:15:1b:2f:43:f8:26:a3:58:
                    d2:38:d8:6a:0f:bb:ce:ca:8a:1b:f4:bd:15:6d:af:
                    68:13:ce:85:7b:9b:c3:4d:19:49:74:48:0f:77:8f:
                    c8:79:d0:6c:40:a4:4c:e6:ce:63:20:71:4e:20:49:
                    56:30:7c:ba:07:c4:35:ca:5a:40:27:36:aa:d4:f3:
                    ff:e7:ea:7c:5f:df:c5:0e:e4:2a:f8:af:76:39:3c:
                    83:a0:87:7e:99:da:3e:7a:ed:1e:88:de:23:14:ee:
                    70:36:4b:af:04:39:32:85:18:c5:cd:cd:36:82:3c:
                    54:cb:65:6e:a9:4a:b4:2f:42:9b:fd:16:98:26:34:
                    76:8d:cd:3e:26:61:48:66:4d:8d:cb:0b:8c:04:2c:
                    8d:64:5a:e0:49:4e:29:ec:7b:eb:1f:4c:34:0b:04:
                    04:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D3:17:8B:DE:03:99:AF:7B:15:D4:30:64:20:24:A7:AB:2E:A6:53
            X509v3 Authority Key Identifier:
                keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1f:a0:a2:bd:a5:de:28:6d:53:b4:d8:24:70:e0:81:54:b6:
         44:29:e4:a4:19:5b:98:5e:62:ce:57:f2:f6:72:f6:f2:cf:d9:
         4d:62:c0:bc:ba:76:90:41:df:f4:df:b9:35:bf:1c:15:5a:7f:
         40:50:a2:b4:35:62:95:ca:36:00:c6:42:9f:3c:65:e3:a8:e3:
         cf:0c:7c:d9:ec:52:9f:ca:9b:b0:66:04:a4:b2:d2:ca:2f:fd:
         62:be:a2:5b:30:cf:66:a6:fd:68:95:9c:ec:8c:ce:10:ef:a6:
         a6:97:d7:2a:0c:03:db:c0:58:7a:bd:1a:fc:5e:e2:15:53:cb:
         cb:6d:e7:b1:85:e6:33:bb:7c:70:25:90:c6:d4:40:01:5c:f2:
         a7:14:8c:f2:ae:76:bf:82:d7:c2:9b:7e:a7:ca:cc:f5:90:12:
         48:9b:1d:26:c8:f1:a2:73:9a:5d:1f:52:10:d0:55:eb:76:4b:
         8c:b4:25:63:5a:63:74:2c:97:c0:af:24:b3:8b:c8:76:86:ba:
         71:26:3f:40:e1:58:e8:e2:5b:93:c0:60:00:1e:f9:5b:db:32:
         8b:24:d4:57:c2:16:0a:05:05:ff:f6:b0:de:e5:63:db:7f:a0:
         ce:a8:c9:eb:38:3e:ff:13:30:7e:b4:ae:c3:01:80:01:dd:61:
         98:e3:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:56:34 2026 by rpki-client