Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
File:                     3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json)
Hash identifier:          TATd/xhp47TL3DPINgz9iBwPRmIlOoEqvSgXhLf2rfI=
Subject key identifier:   6E:5B:C8:A3:85:9C:86:32:8C:48:E0:AD:D3:76:57:B4:7F:D0:D6:35
Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E
Certificate issuer:       /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
Manifest number:          0108
Signing time:             Mon 05 Oct 2026 06:36:01 +0000
Manifest this update:     Mon 05 Oct 2026 06:36:00 +0000
Manifest next update:     Mon 12 Oct 2026 06:36:00 +0000
Files and hashes:         1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: XuFJFQDyPhX3x9wqX21u0QXIdK4s0dS35Ipuq+nCmIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl
                          rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
        Validity
            Not Before: Oct  5 06:36:00 2026 GMT
            Not After : Oct 12 06:36:00 2026 GMT
        Subject: CN=6ac34551-c3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:a6:12:0a:dc:58:70:a0:50:c0:e2:8b:32:
                    95:67:c6:92:7a:e6:69:b4:a6:b1:2e:9c:02:36:5a:
                    98:63:d3:c1:2b:9b:ac:f9:34:55:1a:64:48:d1:22:
                    0e:c6:e0:89:6d:c3:9b:79:fd:bb:c2:09:0e:4b:db:
                    cb:f3:a9:0f:55:6f:18:46:08:bc:4c:5d:6a:4a:b1:
                    ba:19:11:df:6f:98:21:fc:39:ab:26:c3:92:19:9d:
                    80:5d:84:cf:f4:9b:a4:2e:c1:b4:24:5b:17:a6:79:
                    45:aa:d8:d6:04:a3:fb:40:03:d0:29:eb:c1:cd:6c:
                    d8:2f:12:49:20:48:9d:d7:c7:14:e2:25:8f:b5:14:
                    e1:84:1f:cb:76:74:39:b0:9e:93:99:43:98:c8:44:
                    bb:ae:f4:6e:c9:60:95:62:92:c1:44:fe:f1:a7:f1:
                    85:0f:b3:1b:8d:1a:8c:3b:cb:65:35:e4:85:50:98:
                    60:83:17:e2:65:26:43:fc:6e:7f:36:7b:0a:26:a8:
                    3c:22:ac:a6:16:87:96:da:49:1b:b2:f7:12:7b:3d:
                    9d:7f:49:91:d7:5b:da:5d:ec:a2:f0:ee:60:be:5d:
                    37:76:3a:f8:af:c3:1c:31:c7:49:9c:c6:e2:69:12:
                    d7:0d:08:88:2b:5c:81:47:e4:46:d2:af:f5:f3:68:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5B:C8:A3:85:9C:86:32:8C:48:E0:AD:D3:76:57:B4:7F:D0:D6:35
            X509v3 Authority Key Identifier:
                keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:e2:d5:cb:2f:b5:63:a2:0e:74:13:f7:30:81:64:86:e2:
         b5:f2:72:dc:4f:7a:09:f0:28:50:28:98:3f:b1:cb:be:3c:5f:
         cc:fa:c6:47:70:b8:51:20:cb:b2:7e:75:b8:0e:5f:d6:9e:e6:
         d8:18:bd:8d:e3:64:c6:9a:a7:05:a1:8b:82:95:7a:39:30:f5:
         d0:37:07:49:a9:c1:5b:4b:b3:f9:87:2b:0a:5c:92:02:3c:2e:
         52:66:9f:da:db:2e:75:36:57:0e:12:f2:30:be:5d:8d:23:64:
         44:2a:6f:b9:d1:85:38:29:53:7e:32:53:8a:98:83:96:3f:19:
         64:4e:d7:eb:6e:28:a1:b8:43:f6:3b:9a:17:7a:02:86:53:9a:
         3a:9e:0b:33:11:5a:f5:91:cb:5f:81:69:14:0b:1f:05:ad:93:
         1c:e3:dd:9d:61:53:2b:69:f6:a7:07:d5:6f:1d:1c:85:9b:88:
         15:68:36:59:83:d9:48:4f:3d:32:fa:15:b5:4f:7f:53:e4:00:
         83:26:8a:6d:ae:a7:04:23:1b:1e:fb:0f:74:b5:51:2e:ea:d7:
         bf:b0:e6:9d:b2:b7:c2:86:0e:af:04:ce:cd:7e:90:fb:27:4f:
         b5:fe:af:aa:4e:50:b9:40:fb:0b:08:d9:5f:83:0e:1f:6d:aa:
         3c:2e:23:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 10:09:22 2026 by rpki-client