Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
File:                     3Y89lj-o0fItV_Tfspq9cNJVjjc.mft (raw, json)
Hash identifier:          vtuKlD8YWpXk3X1yWLl7uXtsraiwWCzmeP5fSvWThM8=
Subject key identifier:   64:0B:07:9A:D4:DA:39:55:9B:DE:A5:6E:E1:9A:E9:D6:6B:B7:2E:CE
Authority key identifier: DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37
Certificate issuer:       /CN=A91D506C/serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37
Certificate serial:       03C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
Manifest number:          03B9
Signing time:             Fri 09 Oct 2026 00:45:01 +0000
Manifest this update:     Fri 09 Oct 2026 00:45:00 +0000
Manifest next update:     Fri 16 Oct 2026 00:45:00 +0000
Files and hashes:         1: 3Y89lj-o0fItV_Tfspq9cNJVjjc.crl (hash: CY0PL7332kBYeKF5F6lZ2kUbavd7zNQ3W4EG12M7Gn4=)
                          2: 76C5241CF47311EC8721C33DC4F9AE02.roa (hash: PJNN23fDPqaEdDsm5vZGPWP/DmPwgv21Z3U/EtL0Bso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl
                          rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 00:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D506C, serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37
        Validity
            Not Before: Oct  9 00:45:00 2026 GMT
            Not After : Oct 16 00:45:00 2026 GMT
        Subject: CN=6ac8390c-f7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7c:47:f1:fb:a7:12:cf:6e:cd:21:eb:38:de:
                    ca:60:58:64:fb:27:e8:90:fc:c3:78:0a:15:26:c4:
                    40:83:f0:4d:b0:79:26:e7:f8:8b:fe:9f:f3:9e:6d:
                    07:81:c1:6d:81:c7:7b:dc:87:bb:04:e0:d3:f7:0f:
                    fb:a7:0a:dc:ce:be:a6:8f:01:9a:a7:03:b9:04:df:
                    f9:2d:37:e2:1b:76:b6:63:53:a5:ef:00:62:fc:52:
                    e4:5b:75:a6:4d:ab:04:3c:3e:d3:41:f4:d2:4e:9b:
                    9a:43:ba:7b:66:3d:b0:3d:d5:e3:16:82:07:8a:62:
                    60:69:d0:be:10:a4:b5:68:27:ea:36:fa:52:e7:4e:
                    da:e1:be:a6:48:99:17:a8:ab:ab:c5:d5:01:59:ff:
                    ae:19:1f:7f:60:8a:4b:51:39:47:a5:2a:db:f5:7b:
                    11:dc:4e:d8:5f:42:9d:41:29:dc:99:9e:26:fe:25:
                    8e:4a:e9:09:f0:73:ee:dc:1b:f2:b1:8b:79:73:a2:
                    f4:9b:e6:f8:25:df:97:39:23:7f:6a:0f:73:be:6d:
                    ec:92:e2:2a:77:3c:4d:84:02:06:5d:87:c5:03:04:
                    9f:2e:4d:b2:4c:30:78:16:e1:57:3f:58:14:27:c0:
                    ae:77:87:44:54:93:c8:08:e1:f4:90:43:ad:5e:02:
                    07:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0B:07:9A:D4:DA:39:55:9B:DE:A5:6E:E1:9A:E9:D6:6B:B7:2E:CE
            X509v3 Authority Key Identifier:
                keyid:DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:39:8a:ec:1d:de:f3:74:b1:3d:ce:56:74:9f:de:72:3d:b4:
         2e:e3:4b:b2:43:59:ae:8d:68:0b:00:32:3e:64:65:79:03:42:
         aa:69:59:68:8e:dc:d3:2e:cf:da:c2:7c:86:2e:43:11:30:34:
         d6:92:39:84:b6:f3:f1:cf:a3:92:c3:72:ad:03:fb:74:62:7a:
         03:15:00:f1:00:e3:39:d6:aa:19:0d:8c:34:04:f2:54:6c:c8:
         63:15:67:91:fa:c4:ff:6e:cb:62:10:53:81:c5:c8:8c:56:c7:
         2c:18:81:18:8a:a0:a1:af:76:83:ba:35:c8:0f:d0:bb:b2:7f:
         98:27:53:a6:40:79:11:1d:f1:bd:18:bd:be:e5:f0:61:03:84:
         1e:ff:dd:91:ae:2d:0f:21:4f:e2:70:9b:b3:8b:3d:c0:27:c3:
         cb:7d:64:97:ac:f1:60:c8:31:5f:f5:5c:e3:53:2b:e7:e4:34:
         c9:5e:6d:5b:9d:3c:45:53:18:ff:fd:bf:1f:1a:09:0d:11:69:
         b7:ca:a7:ed:48:84:00:73:ea:66:e0:c4:ec:06:a6:c2:7f:5e:
         2a:69:10:ec:ed:b3:dd:75:63:00:e7:9d:53:f0:9b:63:a2:9c:
         9f:ca:50:85:c7:6e:3f:57:36:b6:b0:70:ff:83:2a:41:07:7b:
         14:07:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:53:30 2026 by rpki-client