Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
File:                     kS3Nd84XYnPZShzEJZKtBclnamI.mft (raw, json)
Hash identifier:          snTaAiuvznZfJ7vV+/vgZkW+pEJYB+UXFb7U/ezWR6Y=
Subject key identifier:   6A:20:77:9D:A9:57:C7:05:FE:63:C0:8D:4E:52:8D:92:36:60:66:25
Authority key identifier: 91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62
Certificate issuer:       /CN=A91CA6E6/serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
Certificate serial:       027F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
Manifest number:          0446
Signing time:             Wed 07 Oct 2026 02:19:47 +0000
Manifest this update:     Wed 07 Oct 2026 02:19:47 +0000
Manifest next update:     Wed 14 Oct 2026 02:19:47 +0000
Files and hashes:         1: kS3Nd84XYnPZShzEJZKtBclnamI.crl (hash: SpoAll0x8LWsEQWTjkz43AB+dujZfhpurFrp9Plog6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl
                          rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA6E6, serialNumber=912DCD77CE176273D94A1CC42592AD05C9676A62
        Validity
            Not Before: Oct  7 02:19:47 2026 GMT
            Not After : Oct 14 02:19:47 2026 GMT
        Subject: CN=6ac5ac43-fcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:62:63:17:9f:81:6a:1d:4f:fa:3b:8a:f5:ce:
                    0b:e9:22:5e:a9:ac:bc:3a:96:8c:77:9b:3f:8e:70:
                    36:b3:90:9e:c5:46:86:83:83:3c:9f:0c:60:1d:23:
                    cc:15:ef:43:18:62:f2:d4:24:9a:09:4c:9f:4a:f1:
                    24:b1:08:30:1e:19:8a:27:75:b2:e7:50:44:1f:3b:
                    9f:fe:87:ec:38:23:d3:04:9f:3b:6c:6e:33:b6:b1:
                    6c:bf:2e:b4:51:a3:56:7c:8d:2a:e6:46:a3:ca:8e:
                    16:38:d7:a0:84:6e:f4:d6:5c:b2:a4:6c:cf:49:b1:
                    9c:4d:ba:aa:b2:3e:71:df:8d:6b:2e:06:5c:34:c6:
                    44:6c:08:79:d6:47:72:76:c1:97:09:7c:ec:3d:ce:
                    ec:e1:6a:57:7f:55:77:3b:25:7b:de:b1:6b:a3:34:
                    a7:f1:16:17:c0:cc:05:77:d7:92:2d:b1:c5:ba:39:
                    21:a1:86:3b:2a:bc:9f:29:7c:42:c9:57:6d:9a:27:
                    b3:e2:b7:dd:3e:0a:79:45:12:4a:ae:35:03:dc:a4:
                    96:46:1c:61:7a:53:c5:30:5f:d1:a3:a2:e3:bf:e5:
                    fb:12:41:88:c5:1f:95:f1:2e:54:6f:61:ae:58:9b:
                    ad:19:8a:89:45:ce:22:ba:a8:b4:6e:d4:a8:34:89:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:20:77:9D:A9:57:C7:05:FE:63:C0:8D:4E:52:8D:92:36:60:66:25
            X509v3 Authority Key Identifier:
                keyid:91:2D:CD:77:CE:17:62:73:D9:4A:1C:C4:25:92:AD:05:C9:67:6A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS3Nd84XYnPZShzEJZKtBclnamI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/kS3Nd84XYnPZShzEJZKtBclnamI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:4d:51:c8:f3:de:01:84:50:c8:c4:37:4b:d5:60:ef:57:25:
         ec:bf:b1:26:3e:5f:fc:6d:58:e4:15:5f:6e:2f:f2:2a:c5:78:
         1c:24:4c:8c:87:83:dc:82:7b:ef:01:92:8d:7c:2a:9b:c2:e6:
         ec:7b:81:e1:eb:a8:ed:39:a0:8a:b3:99:36:21:f1:b6:b3:df:
         12:33:c2:98:73:1f:bb:0b:5d:42:d4:ca:f4:26:a4:b4:3f:f5:
         48:e8:14:bd:af:2a:45:2b:fb:ab:97:47:6b:3e:6a:f1:f4:54:
         17:f4:03:e2:f0:d3:6b:1d:ca:90:56:bf:be:5f:b6:e5:c8:1d:
         5b:9d:db:f1:8e:80:26:7b:7a:77:6d:04:8c:0c:d4:e3:07:c4:
         ca:9d:9c:bf:d9:c6:b7:18:96:65:db:c6:67:86:76:c4:75:7d:
         1d:b3:69:85:d8:a3:df:c3:9f:57:20:a9:e4:a3:03:29:f9:60:
         95:07:ff:de:64:68:c6:4f:48:54:e1:1c:24:06:d3:96:ae:37:
         a0:58:4a:58:cb:20:2e:24:af:d4:00:6c:a1:88:37:7d:48:34:
         21:fe:95:6a:37:96:b6:fa:f7:7f:a4:f0:48:31:36:8c:8b:7f:
         dc:07:48:e9:ac:78:5a:65:12:47:6a:7b:de:48:b8:a4:0a:e2:
         2e:33:2b:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0E2RTYxMTAvBgNVBAUTKDkxMkRDRDc3Q0UxNzYyNzNEOTRBMUNDNDI1OTJBRDA1
Qzk2NzZBNjIwHhcNMjYxMDA3MDIxOTQ3WhcNMjYxMDE0MDIxOTQ3WjAYMRYwFAYD
VQQDEw02YWM1YWM0My1mY2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm2JjF5+Bah1P+juK9c4L6SJeqay8OpaMd5s/jnA2s5CexUaGg4M8nwxgHSPM
Fe9DGGLy1CSaCUyfSvEksQgwHhmKJ3Wy51BEHzuf/ofsOCPTBJ87bG4ztrFsvy60
UaNWfI0q5kajyo4WONeghG701lyypGzPSbGcTbqqsj5x341rLgZcNMZEbAh51kdy
dsGXCXzsPc7s4WpXf1V3OyV73rFrozSn8RYXwMwFd9eSLbHFujkhoYY7KryfKXxC
yVdtmiez4rfdPgp5RRJKrjUD3KSWRhxhelPFMF/Ro6Ljv+X7EkGIxR+V8S5Ub2Gu
WJutGYqJRc4iuqi0btSoNIl8uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGogd52p
V8cF/mPAjU5SjZI2YGYlMB8GA1UdIwQYMBaAFJEtzXfOF2Jz2UocxCWSrQXJZ2pi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw
RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFluUFpTaHpFSlpLdEJjbG5h
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tTM05kODRYWW5QWlNoekVKWkt0QmNsbmFtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9rUzNOZDg0WFlu
UFpTaHpFSlpLdEJjbG5hbUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATE1RyPPeAYRQyMQ3S9Vg71cl7L+xJj5f/G1Y5BVfbi/yKsV4HCRMjIeD3IJ7
7wGSjXwqm8Lm7HuB4euo7TmgirOZNiHxtrPfEjPCmHMfuwtdQtTK9CaktD/1SOgU
va8qRSv7q5dHaz5q8fRUF/QD4vDTax3KkFa/vl+25cgdW53b8Y6AJnt6d20EjAzU
4wfEyp2cv9nGtxiWZdvGZ4Z2xHV9HbNphdij38OfVyCp5KMDKflglQf/3mRoxk9I
VOEcJAbTlq43oFhKWMsgLiSv1ABsoYg3fUg0If6VajeWtvr3f6TwSDE2jIt/3AdI
6ax4WmUSR2p73ki4pAriLjMrJQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 19:56:08 2026 by rpki-client