Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
File:                     N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft (raw, json)
Hash identifier:          2UhbEhgoBe5cNjr74C/e0p8dhZa7S8gQyBGttiiTaCc=
Subject key identifier:   9C:4A:D9:F8:9E:4F:C1:67:2C:F6:87:99:42:72:BC:85:4C:91:65:3D
Authority key identifier: 37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6
Certificate issuer:       /CN=A91F53A5/serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
Manifest number:          50
Signing time:             Fri 09 Oct 2026 00:34:56 +0000
Manifest this update:     Fri 09 Oct 2026 00:34:55 +0000
Manifest next update:     Fri 16 Oct 2026 00:34:55 +0000
Files and hashes:         1: N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl (hash: LbjaqkQlWGWOnoglh4u5c5Sm78jfP8E7Dd1VWOpUaFQ=)
                          2: 8F3BB5304DCD11F191088215B4833773.roa (hash: lA3Zts59kRJf+K26QY68A9dBrBr6aTNWe+CFgHwsnZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl
                          rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 00:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F53A5, serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6
        Validity
            Not Before: Oct  9 00:34:55 2026 GMT
            Not After : Oct 16 00:34:55 2026 GMT
        Subject: CN=6ac836b0-2a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:d3:5a:23:43:4e:a2:f3:96:1e:1b:ea:b8:
                    9d:63:c1:34:03:2f:c4:f1:a8:2f:76:42:39:96:ca:
                    c3:31:94:f3:dc:78:94:74:72:fd:f8:f0:fd:17:54:
                    18:9e:ca:24:8e:7a:59:b2:d5:ae:1f:98:a2:16:f5:
                    df:61:c7:39:0b:6b:b8:43:a8:a8:00:74:b9:bc:5f:
                    6e:a8:ca:a0:18:03:61:d2:d3:de:1b:64:45:67:8b:
                    f8:4b:b3:76:e3:f0:bc:82:66:2b:90:89:d7:b1:44:
                    e6:21:94:2c:09:4b:fd:66:c7:15:4d:a5:06:fa:d5:
                    ca:c3:2a:5f:19:46:e7:68:67:2f:e7:d8:e5:4a:44:
                    29:40:55:24:b0:12:bd:32:06:73:ae:33:8b:00:9f:
                    45:19:44:d4:2f:48:69:32:29:e7:82:0d:6a:6b:a8:
                    10:02:77:09:e9:34:b4:c3:65:a1:d3:03:3d:bf:39:
                    93:92:87:97:a5:75:62:8a:8c:61:d0:df:61:80:0f:
                    1a:6f:40:ac:68:b9:04:d8:e3:43:71:64:5f:a0:c9:
                    78:63:94:15:9c:6d:4b:c4:19:96:24:90:bb:fa:c5:
                    f5:be:46:3d:74:82:4b:6d:d3:f7:4b:36:0c:59:41:
                    be:b5:52:71:88:c2:61:68:21:7f:3a:29:11:f7:d2:
                    00:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4A:D9:F8:9E:4F:C1:67:2C:F6:87:99:42:72:BC:85:4C:91:65:3D
            X509v3 Authority Key Identifier:
                keyid:37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8a:5b:c6:29:c5:68:3d:7c:df:60:ee:33:e0:5e:25:14:b4:
         c4:85:23:3e:67:18:d2:73:13:7b:ef:33:06:3f:bf:77:fc:10:
         cf:9f:58:32:7b:e7:f9:e2:32:a1:4a:f0:4d:fe:e0:a3:59:38:
         4b:ad:64:80:79:f7:88:70:3b:0f:cd:ca:27:dd:25:61:d8:f9:
         10:6b:a1:20:9d:d7:94:78:71:10:2c:06:0a:ac:81:c6:08:0a:
         92:39:24:c0:bc:58:9c:e9:47:25:30:8b:45:18:97:6f:c5:f4:
         38:7c:dd:1a:b5:c5:93:b2:ef:26:76:39:0f:d5:db:dc:2c:af:
         87:01:bd:ac:19:7f:ff:0b:f7:2a:e5:3f:88:fd:2d:63:1d:f4:
         1d:80:f3:02:2f:6b:ed:62:d4:8d:2c:69:3a:a7:1c:51:a8:35:
         fd:d6:6c:b5:3e:1e:14:89:68:a4:36:8d:f9:c9:c1:7d:9b:4d:
         0f:4d:04:b9:46:c4:be:f9:d3:9c:a8:e8:2e:b5:61:b1:0b:82:
         a8:28:a4:f5:01:8c:6f:e0:8d:f6:61:5a:16:bc:04:27:3a:86:
         18:65:37:b6:4f:84:28:46:6c:e8:08:6b:56:24:e8:d7:ff:ac:
         12:49:68:73:de:13:22:78:1e:8e:70:7e:f5:d2:24:82:5d:0d:
         14:63:58:fc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NTNBNTExMC8GA1UEBRMoMzc3NDZBODY5M0IzQjgzRjUwMUQ3MTVEMTAzMEI5NTQ3
MkJFM0FGNjAeFw0yNjEwMDkwMDM0NTVaFw0yNjEwMTYwMDM0NTVaMBgxFjAUBgNV
BAMTDTZhYzgzNmIwLTJhMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9YdNaI0NOovOWHhvquJ1jwTQDL8TxqC92QjmWysMxlPPceJR0cv348P0XVBie
yiSOelmy1a4fmKIW9d9hxzkLa7hDqKgAdLm8X26oyqAYA2HS094bZEVni/hLs3bj
8LyCZiuQidexROYhlCwJS/1mxxVNpQb61crDKl8ZRudoZy/n2OVKRClAVSSwEr0y
BnOuM4sAn0UZRNQvSGkyKeeCDWprqBACdwnpNLTDZaHTAz2/OZOSh5eldWKKjGHQ
32GADxpvQKxouQTY40NxZF+gyXhjlBWcbUvEGZYkkLv6xfW+Rj10gktt0/dLNgxZ
Qb61UnGIwmFoIX86KRH30gCLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnErZ+J5P
wWcs9oeZQnK8hUyRZT0wHwYDVR0jBBgwFoAUN3RqhpOzuD9QHXFdEDC5VHK+OvYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1M0E1LzBGQUFCQ0RDNENG
RTExRjE5ODQ5QjNCOUFGODMzNzczL04zUnFocE96dUQ5UUhYRmRFREM1VkhLLU92
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTjNScWhwT3p1RDlRSFhGZEVEQzVWSEstT3ZZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1
M0E1LzBGQUFCQ0RDNENGRTExRjE5ODQ5QjNCOUFGODMzNzczL04zUnFocE96dUQ5
UUhYRmRFREM1VkhLLU92WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBOilvGKcVoPXzfYO4z4F4lFLTEhSM+ZxjScxN77zMGP793/BDPn1gye+f54jKh
SvBN/uCjWThLrWSAefeIcDsPzcon3SVh2PkQa6EgndeUeHEQLAYKrIHGCAqSOSTA
vFic6UclMItFGJdvxfQ4fN0atcWTsu8mdjkP1dvcLK+HAb2sGX//C/cq5T+I/S1j
HfQdgPMCL2vtYtSNLGk6pxxRqDX91my1Ph4UiWikNo35ycF9m00PTQS5RsS++dOc
qOgutWGxC4KoKKT1AYxv4I32YVoWvAQnOoYYZTe2T4QoRmzoCGtWJOjX/6wSSWhz
3hMieB6OcH710iSCXQ0UY1j8
-----END CERTIFICATE-----
Generated at Fri Oct 9 12:01:16 2026 by rpki-client