Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft
File:                     3QrS3kp0TRozsRu2q9fm6s79wIU.mft (raw, json)
Hash identifier:          dUBFxE6uYbd2vJ++5XH2qoypJGn1GQS/rv/DoGzNnec=
Subject key identifier:   D0:83:0F:2F:47:F0:91:5B:65:53:F8:DF:89:81:E3:8E:36:64:C0:35
Authority key identifier: DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85
Certificate issuer:       /CN=A91DC897/serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft
Manifest number:          80
Signing time:             Wed 07 Oct 2026 08:15:41 +0000
Manifest this update:     Wed 07 Oct 2026 08:15:40 +0000
Manifest next update:     Wed 14 Oct 2026 08:15:40 +0000
Files and hashes:         1: 3QrS3kp0TRozsRu2q9fm6s79wIU.crl (hash: PcfVc9Xy6gjli49APl10cc76fMIcIrZPKR12aIbSSjg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl
                          rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC897, serialNumber=DD0AD2DE4A744D1A33B11BB6ABD7E6EACEFDC085
        Validity
            Not Before: Oct  7 08:15:40 2026 GMT
            Not After : Oct 14 08:15:40 2026 GMT
        Subject: CN=6ac5ffac-64c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:77:67:d8:7c:d5:b9:0c:1d:78:9b:59:ec:
                    06:a7:db:aa:09:3d:e5:3b:ff:ca:a5:79:78:b4:9f:
                    b4:9d:a6:bd:a2:52:e6:a4:f8:64:7a:a1:96:b6:01:
                    7c:3c:85:e2:f9:f0:1c:b4:c8:c6:a5:a2:33:b2:af:
                    7b:1c:e0:c3:63:2d:95:c9:8c:3d:2c:12:fd:e6:0f:
                    ac:b3:62:fc:5f:6c:ed:c9:cd:25:f9:3f:08:46:10:
                    ca:68:e2:d1:6f:7e:ca:39:7f:bf:f1:9b:a3:f5:09:
                    e1:16:49:b7:47:1c:4a:21:26:a0:e0:0a:cc:22:be:
                    db:32:ec:b9:9b:f9:bf:0e:90:c2:94:5c:e3:5f:eb:
                    50:e2:50:87:19:58:e5:a9:04:62:af:76:ac:1b:cd:
                    5b:44:a9:72:09:4b:91:3e:e9:6d:2d:b3:5b:dd:a5:
                    52:a6:90:fa:bc:7a:3d:93:97:2c:d7:93:12:1a:da:
                    62:83:dd:66:9b:82:b2:a3:f1:2f:87:1d:cd:6a:d5:
                    20:2c:22:cc:c3:5c:91:16:3d:ba:0b:9a:6f:d6:8c:
                    ed:ec:3e:53:9f:c8:47:35:df:aa:bf:df:dc:46:0f:
                    89:d7:ff:b9:26:04:24:05:c8:a5:11:68:53:7a:f4:
                    f1:84:c4:cb:ad:5c:1b:8a:0a:ee:69:e5:d0:ea:df:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:83:0F:2F:47:F0:91:5B:65:53:F8:DF:89:81:E3:8E:36:64:C0:35
            X509v3 Authority Key Identifier:
                keyid:DD:0A:D2:DE:4A:74:4D:1A:33:B1:1B:B6:AB:D7:E6:EA:CE:FD:C0:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3QrS3kp0TRozsRu2q9fm6s79wIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/650D00F6003011F194A257AB476F56BC/3QrS3kp0TRozsRu2q9fm6s79wIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:30:13:16:35:b4:db:93:0c:b0:3d:6c:d9:3e:c0:e7:fa:88:
         95:f5:3b:9c:3f:6a:2e:2d:e5:28:a9:b8:f2:bb:27:8d:6f:86:
         cb:63:6b:65:65:d8:f2:47:1a:d7:49:60:09:b9:06:8a:84:56:
         e8:68:2b:21:cf:10:8c:ba:99:79:e7:e6:98:7b:f8:cc:08:e8:
         bb:b2:eb:2f:20:9a:10:f5:c4:39:a1:da:b1:71:67:32:a6:06:
         1c:52:7a:c8:9b:25:0b:81:51:a8:49:3b:07:90:d2:b5:42:81:
         93:bc:c3:14:fb:fd:5c:ff:db:81:c1:d8:4e:ff:da:cc:d5:36:
         59:d7:1a:e4:3e:b8:dc:c6:83:73:ce:6b:dc:fa:4e:86:67:46:
         20:ae:bf:6b:dc:d8:d9:14:38:03:d4:35:5a:90:a8:d8:a5:fb:
         94:5c:21:cf:59:93:82:e8:ad:fc:8b:b3:32:dd:6b:75:2e:6b:
         7b:2d:d3:d5:a6:6c:e1:32:dd:1d:ca:8a:70:c2:fd:09:18:23:
         64:7b:1f:8f:f2:6c:d2:71:c5:56:1c:3f:87:75:e5:27:4b:4d:
         16:d9:bb:20:ff:b4:7c:e4:9c:25:bd:c8:9d:45:04:e9:48:19:
         1a:b4:60:33:50:d3:c5:79:49:64:8e:50:22:26:10:f9:1c:d3:
         30:72:07:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM4OTcxMTAvBgNVBAUTKEREMEFEMkRFNEE3NDREMUEzM0IxMUJCNkFCRDdFNkVB
Q0VGREMwODUwHhcNMjYxMDA3MDgxNTQwWhcNMjYxMDE0MDgxNTQwWjAYMRYwFAYD
VQQDEw02YWM1ZmZhYy02NGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsPN3Z9h81bkMHXibWewGp9uqCT3lO//KpXl4tJ+0naa9olLmpPhkeqGWtgF8
PIXi+fActMjGpaIzsq97HODDYy2VyYw9LBL95g+ss2L8X2ztyc0l+T8IRhDKaOLR
b37KOX+/8Zuj9QnhFkm3RxxKISag4ArMIr7bMuy5m/m/DpDClFzjX+tQ4lCHGVjl
qQRir3asG81bRKlyCUuRPultLbNb3aVSppD6vHo9k5cs15MSGtpig91mm4Kyo/Ev
hx3NatUgLCLMw1yRFj26C5pv1ozt7D5Tn8hHNd+qv9/cRg+J1/+5JgQkBcilEWhT
evTxhMTLrVwbigruaeXQ6t93dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCDDy9H
8JFbZVP434mB4442ZMA1MB8GA1UdIwQYMBaAFN0K0t5KdE0aM7EbtqvX5urO/cCF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg5Ny82NTBEMDBGNjAw
MzAxMUYxOTRBMjU3QUI0NzZGNTZCQy8zUXJTM2twMFRSb3pzUnUycTlmbTZzNzl3
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNRclMza3AwVFJvenNSdTJxOWZtNnM3OXdJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Qzg5Ny82NTBEMDBGNjAwMzAxMUYxOTRBMjU3QUI0NzZGNTZCQy8zUXJTM2twMFRS
b3pzUnUycTlmbTZzNzl3SVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtDATFjW025MMsD1s2T7A5/qIlfU7nD9qLi3lKKm48rsnjW+Gy2NrZWXY8kca
10lgCbkGioRW6GgrIc8QjLqZeefmmHv4zAjou7LrLyCaEPXEOaHasXFnMqYGHFJ6
yJslC4FRqEk7B5DStUKBk7zDFPv9XP/bgcHYTv/azNU2Wdca5D643MaDc85r3PpO
hmdGIK6/a9zY2RQ4A9Q1WpCo2KX7lFwhz1mTguit/IuzMt1rdS5rey3T1aZs4TLd
HcqKcML9CRgjZHsfj/Js0nHFVhw/h3XlJ0tNFtm7IP+0fOScJb3InUUE6UgZGrRg
M1DTxXlJZI5QIiYQ+RzTMHIHXA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 13:41:03 2026 by rpki-client