Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File:                     z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier:          IzOTUc6yZjYBflfsmmowSXWeTqsKEtobX44GFRc/J3o=
Subject key identifier:   EE:5F:E6:6C:FD:4A:AE:86:89:80:2F:D0:6B:FC:D8:D0:67:E0:E6:43
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer:       /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial:       35C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number:          3593
Signing time:             Fri 18 Sep 2026 14:28:10 +0000
Manifest this update:     Fri 18 Sep 2026 14:28:09 +0000
Manifest next update:     Fri 25 Sep 2026 14:28:09 +0000
Files and hashes:         1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: z0OvYYFQXPq0+FAc2Fg2YMx/MFIdpdJzzgeElgJIl1U=)
                          2: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: OUkqc0JJeZAHQVQCdchJ3SKWImAhqs3OJ9Z3qySp4FA=)
                          3: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: zXZC60n925PmaDCxh4C7vIvAHN5TNsKG+1Ba8djmE9Y=)
                          4: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: YCd5o7On1y+SHONkQBJovS+uo0GGM/WK3rrtMYJzyII=)
                          5: F550BA02768A11F081B6114EC4F9AE02.roa (hash: neiydLY9Cl0TGLFQWdquxHh/fNcYQkEW5dYQjIq0Srs=)
                          6: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: glALgrbmF01IVQRiyxIVv6eHHxZAf+RMib8Ld7sENCE=)
                          7: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: 1y7dtJH8FI8uaEk6pEXieoHRszpWfthycbrXqZc4aig=)
                          8: A05116766B2311F1965223AA8747A888.roa (hash: o3GmXdn/NZuZNV1jlEPfeEGxVI8i4EuD+jKGW64/kR0=)
                          9: 568554A2493411EF859C1D49C4F9AE02.roa (hash: s/bSow85/kS0GWvpraVo5pKsf8+KJlRdsUDeBNvD0fg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13769 (0x35c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
        Validity
            Not Before: Sep 18 14:28:09 2026 GMT
            Not After : Sep 25 14:28:09 2026 GMT
        Subject: CN=6aad4a7a-84b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:dc:0c:8a:03:37:eb:68:25:33:cc:46:cd:
                    a6:62:13:ea:72:be:3b:35:83:e5:a3:d3:fa:b4:af:
                    e3:74:ff:63:d4:c6:8d:bc:51:47:ae:aa:e0:04:64:
                    64:5a:45:da:9f:08:a6:5a:7e:ca:65:7d:8f:ff:63:
                    ca:45:74:ba:08:71:e6:ab:42:7e:bb:b6:4c:1d:f5:
                    55:de:66:ce:03:c0:18:ad:8b:ed:91:22:30:68:76:
                    de:8b:8a:a2:88:21:62:20:f7:45:51:d1:d4:b9:0a:
                    ea:a2:d4:ce:9c:f7:bb:d7:27:8e:7c:3e:5d:50:42:
                    cd:bb:e9:dc:1b:d6:3b:d1:0c:10:78:dd:b5:69:8b:
                    50:6f:01:f5:50:1d:d5:13:82:85:19:7d:c9:05:e2:
                    71:11:08:3a:0f:d3:48:bb:72:70:02:3c:c3:56:0c:
                    49:1f:e9:4e:30:41:33:86:51:47:2b:57:77:50:26:
                    17:f8:a1:af:e9:3c:15:42:43:9d:e6:ac:64:73:a9:
                    2f:db:eb:35:15:53:e1:48:76:a7:d8:a9:fd:4f:33:
                    31:2e:c4:0d:db:c8:34:7c:63:74:33:74:08:9d:a0:
                    1c:ae:3d:68:b2:19:63:96:bd:bb:50:12:51:b5:b8:
                    d6:a2:99:bb:34:81:37:b0:59:73:0f:f3:81:b1:9c:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5F:E6:6C:FD:4A:AE:86:89:80:2F:D0:6B:FC:D8:D0:67:E0:E6:43
            X509v3 Authority Key Identifier:
                keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b4:e6:ce:81:0d:1d:53:6e:44:b2:5d:a0:fb:37:c2:b4:e1:
         be:4d:29:92:8e:70:82:ce:93:82:ab:2f:1b:4f:28:88:d3:9e:
         ba:6c:15:20:01:61:65:6f:a3:a4:37:96:1e:06:ca:de:92:d3:
         0c:df:04:49:8c:cf:b6:ea:19:4f:d9:dd:b5:d2:5d:35:6c:96:
         af:86:9f:86:33:cf:db:10:d2:d1:91:e1:35:fc:07:62:2a:eb:
         56:2b:36:a3:4e:3f:c7:fc:90:f8:0e:b5:d6:53:2d:d5:28:08:
         c7:c1:71:52:18:42:a8:99:d1:e1:32:94:01:61:20:b4:a7:03:
         a5:a9:0d:24:04:09:c4:9d:b5:b6:b7:e0:08:65:08:61:e3:cb:
         33:4b:5d:f1:8a:26:15:3e:13:5b:45:03:e7:b1:ca:60:76:b0:
         18:4a:cf:d2:2c:32:97:ea:8f:42:4d:ec:33:63:ea:88:41:28:
         b1:b5:3f:ac:ee:de:02:8c:9e:6a:0d:38:95:90:fd:64:66:11:
         b0:bb:bb:84:12:4c:b3:be:39:0c:ff:3a:03:2d:b4:2c:1f:00:
         a2:e6:07:33:3f:33:61:12:fa:1e:c4:73:c8:13:f6:a8:cc:8b:
         4a:1f:ff:43:19:45:f5:6e:72:af:ab:19:61:24:82:b7:6e:1d:
         70:63:78:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 03:41:40 2026 by rpki-client