Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
File:                     3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json)
Hash identifier:          cPlNxI3qCOlNmoqCqQvK8pRxXQhnvc06ZUNRJBTl09o=
Subject key identifier:   CB:BC:F8:5C:ED:37:81:6B:79:2A:F4:A9:D3:F2:08:90:37:10:72:C9
Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C
Certificate issuer:       /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
Manifest number:          0278
Signing time:             Sat 17 Oct 2026 01:52:18 +0000
Manifest this update:     Sat 17 Oct 2026 01:52:17 +0000
Manifest next update:     Sat 24 Oct 2026 01:52:17 +0000
Files and hashes:         1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: bFrPnCyTZOG/CQKqOlorSVZu8+0yyG0i4w4qaQV7Mg0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl
                          rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 01:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C
        Validity
            Not Before: Oct 17 01:52:17 2026 GMT
            Not After : Oct 24 01:52:17 2026 GMT
        Subject: CN=6ad2d4d2-d7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:b9:d3:9f:c9:b7:54:d0:63:85:0e:4f:02:
                    95:be:6b:38:4c:f6:73:4b:93:46:f0:0f:5e:82:eb:
                    9f:60:32:5f:f6:a0:26:4b:c5:97:ed:8a:af:7f:2f:
                    82:c1:45:48:26:03:7d:84:9e:87:d8:3f:31:4c:c7:
                    b3:83:27:ae:42:eb:7d:27:df:41:8f:09:43:3d:6c:
                    22:e5:d0:4c:98:78:35:3d:46:cb:09:d6:46:ae:71:
                    b3:87:14:de:44:23:fc:a8:e3:ec:5a:7a:96:ac:c8:
                    b3:d5:73:ef:5d:83:15:f2:f4:20:4a:c4:5e:a4:94:
                    a0:30:77:99:d2:80:d4:61:68:34:d1:4e:10:ec:f5:
                    41:4d:2e:a5:81:8b:29:4d:00:f0:07:eb:af:b4:6a:
                    0a:df:27:4a:38:92:e7:26:a5:b0:5b:27:18:6b:f2:
                    3b:04:52:bd:3b:9e:d1:39:d3:e7:6c:2c:fb:8e:9a:
                    16:4d:fe:41:4b:2f:c8:37:2f:68:a9:cc:eb:bd:52:
                    cb:74:4f:a4:11:c3:54:bd:6c:fe:53:1e:f3:36:5e:
                    10:c6:7b:38:7a:95:4a:1c:f2:ff:d4:90:75:eb:01:
                    b2:a6:c6:c2:d2:96:0c:8c:44:b7:be:78:59:5d:6d:
                    63:03:05:b6:cd:f6:5e:ae:f7:d5:42:09:24:50:44:
                    fa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BC:F8:5C:ED:37:81:6B:79:2A:F4:A9:D3:F2:08:90:37:10:72:C9
            X509v3 Authority Key Identifier:
                keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:31:f1:a4:90:b0:b0:d0:57:1f:b4:cb:0f:a1:40:11:d2:6a:
         07:82:6b:49:4d:30:8c:82:f4:cd:24:e1:84:89:a1:0b:17:71:
         a2:7b:e1:e0:72:51:2c:8b:25:de:e3:b2:af:b4:36:b7:e7:b8:
         98:a1:85:36:0c:0e:36:10:f6:f0:b7:6c:b0:7a:d8:50:28:26:
         b3:6e:4c:54:3d:53:17:9b:2a:2f:08:67:df:39:7b:8d:90:0c:
         2a:8f:dd:d5:d1:88:02:a0:dd:2b:bc:39:4a:36:96:fa:8a:14:
         89:4b:3b:34:14:03:14:39:71:68:fb:d4:8a:bc:e5:81:71:fa:
         1e:24:52:cd:b4:3b:6a:4d:b2:4f:57:59:36:37:f1:13:19:4f:
         6d:84:e6:90:d2:8b:b3:61:ba:58:22:d3:e1:7e:ad:d8:6f:28:
         97:03:05:01:0f:09:2b:7d:a6:2e:90:a2:21:de:50:3e:3e:dd:
         0b:09:aa:77:f8:27:9c:cc:16:96:5c:63:a5:a4:e0:a6:00:f8:
         85:b9:5a:70:5e:ad:03:d0:8d:39:2d:fa:e7:0e:79:d0:be:12:
         2a:4d:1e:f0:47:79:fb:61:8c:1b:59:6d:e9:ac:5b:84:87:fb:
         01:78:a2:f9:f0:d7:98:92:b9:36:5e:a3:49:86:44:6e:ed:86:
         cb:43:bc:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ2OTYxMTAvBgNVBAUTKERFNzM5MUIzNkQ2RTc2RTJDQzQwQTkwNDc3NzJDMDBC
MEY3NzUyNkMwHhcNMjYxMDE3MDE1MjE3WhcNMjYxMDI0MDE1MjE3WjAYMRYwFAYD
VQQDEw02YWQyZDRkMi1kN2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyve505/Jt1TQY4UOTwKVvms4TPZzS5NG8A9eguufYDJf9qAmS8WX7Yqvfy+C
wUVIJgN9hJ6H2D8xTMezgyeuQut9J99BjwlDPWwi5dBMmHg1PUbLCdZGrnGzhxTe
RCP8qOPsWnqWrMiz1XPvXYMV8vQgSsRepJSgMHeZ0oDUYWg00U4Q7PVBTS6lgYsp
TQDwB+uvtGoK3ydKOJLnJqWwWycYa/I7BFK9O57ROdPnbCz7jpoWTf5BSy/INy9o
qczrvVLLdE+kEcNUvWz+Ux7zNl4Qxns4epVKHPL/1JB16wGypsbC0pYMjES3vnhZ
XW1jAwW2zfZervfVQgkkUET6WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMu8+Fzt
N4FreSr0qdPyCJA3EHLJMB8GA1UdIwQYMBaAFN5zkbNtbnbizECpBHdywAsPd1Js
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni81RkNEOUZENDAw
NTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1TE1RS2tFZDNMQUN3OTNV
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzNuT1JzMjF1ZHVMTVFLa0VkM0xBQ3c5M1Vtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDY5Ni81RkNEOUZENDAwNTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1
TE1RS2tFZDNMQUN3OTNVbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADzHxpJCwsNBXH7TLD6FAEdJqB4JrSU0wjIL0zSThhImhCxdxonvh4HJRLIsl
3uOyr7Q2t+e4mKGFNgwONhD28LdssHrYUCgms25MVD1TF5sqLwhn3zl7jZAMKo/d
1dGIAqDdK7w5SjaW+ooUiUs7NBQDFDlxaPvUirzlgXH6HiRSzbQ7ak2yT1dZNjfx
ExlPbYTmkNKLs2G6WCLT4X6t2G8olwMFAQ8JK32mLpCiId5QPj7dCwmqd/gnnMwW
llxjpaTgpgD4hblacF6tA9CNOS365w550L4SKk0e8Ed5+2GMG1lt6axbhIf7AXii
+fDXmJK5Nl6jSYZEbu2Gy0O8Hw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 23:46:07 2026 by rpki-client