Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft
File:                     r_h3chh1NYXDiOm4HDkGa9ONtZI.mft (raw, json)
Hash identifier:          j00FTGGNlNqHUil8yKLlFDAOSVUAyIaM4Ag6IULCttU=
Subject key identifier:   B1:F5:7A:73:94:C9:87:AE:87:D5:3B:FF:94:81:C7:92:6E:A4:73:D0
Authority key identifier: AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92
Certificate issuer:       /CN=A91CB3FE/serialNumber=AFF8777218753585C388E9B81C39066BD38DB592
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft
Manifest number:          0107
Signing time:             Fri 09 Oct 2026 06:47:59 +0000
Manifest this update:     Fri 09 Oct 2026 06:47:58 +0000
Manifest next update:     Fri 16 Oct 2026 06:47:58 +0000
Files and hashes:         1: r_h3chh1NYXDiOm4HDkGa9ONtZI.crl (hash: JXNaBW6OuRUq4ohg/vT/7JtQjzI8nLuUn0kDnc++jrc=)
                          2: AFD61B9C36A311F08A82A258C4F9AE02.roa (hash: d6zMH6FslhCioO9BUQgF2N2RzyG3M8j7DpL3pPa6Rys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl
                          rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB3FE, serialNumber=AFF8777218753585C388E9B81C39066BD38DB592
        Validity
            Not Before: Oct  9 06:47:58 2026 GMT
            Not After : Oct 16 06:47:58 2026 GMT
        Subject: CN=6ac88e1f-46b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:d0:7d:96:d4:5f:2d:d0:73:a7:ba:62:58:
                    80:d0:d0:b6:c0:53:0d:7c:48:40:77:53:b8:0e:17:
                    be:dc:e6:d5:be:c7:32:8e:92:3e:95:1d:3f:b2:37:
                    13:00:d3:27:97:64:0e:f1:d1:ca:fd:07:a5:54:05:
                    5e:1c:f5:a9:5f:2f:25:b9:f7:8e:5e:46:4f:9a:9a:
                    5d:66:05:89:27:97:07:7d:bc:6d:cb:aa:ee:9c:88:
                    fa:a2:39:20:85:61:ba:70:38:95:c8:da:c5:8a:2e:
                    18:5f:45:45:35:04:2b:2c:aa:90:a6:d6:1f:2c:33:
                    dc:8f:cf:32:a8:b9:17:89:50:d2:55:b0:f4:ec:6e:
                    94:cc:64:72:a4:43:7b:73:de:d4:59:d2:0c:ad:0f:
                    fd:62:de:28:a4:22:58:62:98:c5:84:f5:05:f7:12:
                    c2:19:e9:a9:5b:1a:13:61:2d:52:97:53:4f:c8:92:
                    f1:b6:01:89:99:6a:44:95:38:31:ae:9f:34:4a:7c:
                    7c:a1:9e:2a:f1:29:ab:5e:6e:a2:73:77:01:0f:04:
                    df:ac:d6:23:8f:28:ed:bd:c3:6c:e6:74:28:3c:1d:
                    54:27:ef:78:81:88:63:60:f7:4d:87:9a:53:fa:80:
                    5c:49:e6:7d:a4:4a:95:ea:29:17:10:0f:07:2e:3c:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F5:7A:73:94:C9:87:AE:87:D5:3B:FF:94:81:C7:92:6E:A4:73:D0
            X509v3 Authority Key Identifier:
                keyid:AF:F8:77:72:18:75:35:85:C3:88:E9:B8:1C:39:06:6B:D3:8D:B5:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_h3chh1NYXDiOm4HDkGa9ONtZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3FE/2A56878236A211F0897B4B3CC4F9AE02/r_h3chh1NYXDiOm4HDkGa9ONtZI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f0:ba:bb:d0:a0:83:c6:3d:bb:75:ff:bd:34:64:c6:c0:b3:
         37:c8:71:75:be:f9:cc:05:10:cf:93:aa:c8:4c:9c:60:91:35:
         b8:3d:d5:6d:2c:c8:20:30:b5:af:cd:4f:9f:9d:74:3b:1e:e1:
         3f:92:11:e9:41:74:35:65:ec:6c:e2:83:74:7f:7e:ea:20:8e:
         dc:cb:a6:98:e5:d9:95:da:70:0c:16:0d:69:3e:d9:4c:33:fd:
         6f:b3:a0:0c:ae:36:dc:25:db:d8:6f:d3:2c:98:79:b1:6a:10:
         9d:a8:d3:95:3a:e5:5f:fd:b8:46:d3:ab:54:dc:6d:a9:5e:f5:
         f0:ab:68:fd:3f:3f:b4:d5:64:03:44:f9:12:32:e4:0d:11:6b:
         67:cc:74:97:c5:6b:4c:62:ad:0f:04:22:b5:a7:a0:b3:09:00:
         97:40:6a:54:c7:3c:fa:2e:2d:50:7c:31:4b:99:47:82:de:20:
         9f:64:9c:7c:fd:5d:2d:d7:74:fc:12:43:02:92:42:07:47:3d:
         b3:7b:6c:e2:ea:61:ba:ca:e6:83:77:1d:aa:70:36:47:35:8f:
         cd:15:1e:04:d4:88:a6:11:b1:05:c1:52:2d:af:30:b1:37:0e:
         4a:80:2f:4c:51:6f:59:c0:7b:2a:27:d7:6b:8a:63:48:29:e3:
         49:91:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:45:22 2026 by rpki-client