Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
File:                     A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft (raw, json)
Hash identifier:          a1xhPng69p2xf4iilggzTZavHfeNc8llrTzNYRwEIa4=
Subject key identifier:   48:3E:1C:C9:F2:6B:4A:53:4D:FE:8C:1D:06:E8:88:CD:FA:78:F7:8F
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Certificate issuer:       /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial:       0448
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
Manifest number:          0432
Signing time:             Wed 07 Oct 2026 00:24:21 +0000
Manifest this update:     Wed 07 Oct 2026 00:24:21 +0000
Manifest next update:     Wed 14 Oct 2026 00:24:21 +0000
Files and hashes:         1: A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl (hash: VSPPBAtIfuCuJ5AYIDULEx9yqIAUp1L9Pu8ylzYPZF0=)
                          2: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (hash: 2w8tzihYxteSAWlYehFedS9pPwNpZwA6Ufz/Jy6ET4s=)
                          3: 67A55414D56911EFB3E08134C4F9AE02.roa (hash: 6gyuElfq0PIA/FM7aREUsNAU/exyPDZQFt/Bj2F34gs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
                          rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
        Validity
            Not Before: Oct  7 00:24:21 2026 GMT
            Not After : Oct 14 00:24:21 2026 GMT
        Subject: CN=6ac59135-4326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:75:58:e2:47:67:81:0c:2e:c4:7c:4e:30:
                    fe:d4:3f:a5:23:25:ae:50:af:e7:0a:25:dc:ad:28:
                    63:4b:f6:c8:d6:18:f7:ff:bc:5d:d7:7e:ae:a0:6a:
                    db:29:46:0e:6d:53:ed:ff:d9:da:59:be:2f:aa:ee:
                    a3:69:be:76:ac:5b:22:0e:b3:d9:02:9e:91:91:8d:
                    a5:c2:48:1c:39:2e:7e:90:44:41:9c:89:8a:06:35:
                    9e:dd:a7:3f:72:a0:5d:ea:b2:b2:2c:49:02:4e:a5:
                    78:6e:91:b8:f1:5d:c7:a1:0e:7e:47:d4:b4:64:02:
                    ad:09:87:c5:fd:55:71:10:36:64:54:ea:7b:6f:d9:
                    4e:fc:5e:f3:aa:03:27:19:7c:58:a0:51:72:45:cf:
                    2c:37:96:2d:84:30:0c:e8:a7:75:74:dc:f1:34:5f:
                    40:82:a2:23:f0:9e:25:b4:7a:2e:cd:0b:62:2b:5b:
                    1b:36:c4:82:e1:a8:2c:44:de:7c:30:63:25:d8:64:
                    07:1b:fb:ad:60:36:aa:5d:78:9b:ae:1b:fc:93:8d:
                    b7:9b:3c:27:67:a4:02:10:88:35:b5:bb:16:4b:4f:
                    7a:bd:f7:f6:a7:4c:ec:63:69:d4:c4:60:1b:b4:61:
                    4f:0d:30:d1:ef:a6:13:fd:0b:04:44:fb:af:e4:ae:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3E:1C:C9:F2:6B:4A:53:4D:FE:8C:1D:06:E8:88:CD:FA:78:F7:8F
            X509v3 Authority Key Identifier:
                keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:37:e9:a1:4e:4d:27:5f:66:6a:eb:84:8c:85:e0:2d:26:b9:
         f1:9d:2c:d8:1d:ed:a4:fd:39:72:ba:a2:17:18:ad:7b:9b:c2:
         e0:74:5a:a3:8e:bb:ac:be:4e:2d:7f:c8:23:5c:82:ee:a4:10:
         7f:0d:04:7f:04:3a:65:1e:fe:2f:f8:34:a7:a1:ff:9d:d4:5f:
         38:f1:35:e7:5f:ab:23:65:3f:7e:00:06:49:0c:e9:e2:35:3f:
         47:01:83:20:41:d3:f3:19:69:9a:06:e9:b6:5a:9b:c5:31:26:
         27:f4:d1:b3:7c:21:c4:16:f1:15:d9:4b:f4:ac:c4:e8:a1:78:
         34:eb:b1:24:cc:6f:ca:74:2e:0c:fe:02:2b:08:97:50:7b:01:
         fe:1b:2d:02:f9:65:d8:61:8d:aa:89:0c:b1:00:b2:de:05:d3:
         54:c0:00:9d:d9:b5:04:ac:15:db:83:4b:68:dc:15:a1:6d:c4:
         50:37:94:56:a5:de:30:a2:59:a8:a9:46:60:38:a2:79:7c:21:
         13:e0:83:17:0f:2a:01:f0:52:c3:b5:31:0c:65:e1:52:87:58:
         89:2b:f9:7b:3a:65:3c:43:bf:d0:83:08:31:e4:fc:ad:d4:3b:
         ad:29:8d:56:4f:d0:0d:be:45:e0:16:77:42:40:1d:89:ac:45:
         3a:07:94:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 09:34:27 2026 by rpki-client