Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
File:                     3HVZ7loiUGA5czj8qjgD_6pLI1c.mft (raw, json)
Hash identifier:          echg+NJlbR5gOTFGny3/HBSJvbm/Uq+ODWWujiMMpqk=
Subject key identifier:   AB:7C:38:8F:0D:62:BC:F4:31:7E:BC:DC:99:30:32:A7:DB:40:33:EE
Authority key identifier: DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57
Certificate issuer:       /CN=A91FA56C/serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
Manifest number:          018D
Signing time:             Sat 03 Oct 2026 05:09:42 +0000
Manifest this update:     Sat 03 Oct 2026 05:09:41 +0000
Manifest next update:     Sat 10 Oct 2026 05:09:41 +0000
Files and hashes:         1: 3HVZ7loiUGA5czj8qjgD_6pLI1c.crl (hash: erLtgCAhu2bGw9f2/yCIilQBTh4IgWxeIUInraeZ4z0=)
                          2: 6E16949065A011EFA4AA8E6BC4F9AE02.roa (hash: 1A3H69lIehBD2AfdLSl5FiHzZaNJ6PDNBZ1XdUVIfpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl
                          rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA56C, serialNumber=DC7559EE5A225060397338FCAA3803FFAA4B2357
        Validity
            Not Before: Oct  3 05:09:41 2026 GMT
            Not After : Oct 10 05:09:41 2026 GMT
        Subject: CN=6ac08e16-0ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:f1:d4:f4:5c:bb:bb:d8:47:f2:e4:98:25:
                    d6:7d:2f:e7:5d:bf:3e:b5:bd:ca:ed:7f:82:8d:13:
                    c4:ac:dc:2c:90:5f:80:e8:7a:47:b9:e4:58:a0:92:
                    7e:e4:a1:c4:b4:5c:a1:f0:b4:26:c0:f7:89:c6:d1:
                    75:b1:c0:33:c3:21:b9:96:f2:49:90:83:2a:94:5b:
                    12:95:50:99:ed:fb:40:48:43:6a:e5:8c:8c:cb:e8:
                    2a:d6:ad:db:55:cd:8c:04:51:f1:63:1f:a0:3f:63:
                    41:8b:05:d2:ca:39:5c:dd:f5:3a:7e:8d:99:4d:24:
                    51:7d:da:78:04:d6:8f:8a:de:25:4b:6a:89:1f:5f:
                    96:7f:74:76:61:50:bf:32:e0:28:fd:43:c0:6a:87:
                    4e:95:57:7b:c3:44:2b:58:1b:ab:3c:37:46:09:30:
                    6f:5a:75:2f:8f:b5:b0:30:fa:23:94:0e:b3:86:6c:
                    25:05:fd:2b:30:6f:74:76:0b:48:54:9f:57:ca:c9:
                    20:d3:cf:c8:16:e5:21:c1:88:b8:72:6d:77:e6:50:
                    03:5c:c2:f5:de:be:8f:28:5b:67:4e:52:8b:2d:c4:
                    45:b2:01:3c:01:f8:c8:a3:6b:8a:2e:77:58:e6:71:
                    63:bf:b8:24:de:13:be:bb:29:5a:49:a3:68:a5:a5:
                    7a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7C:38:8F:0D:62:BC:F4:31:7E:BC:DC:99:30:32:A7:DB:40:33:EE
            X509v3 Authority Key Identifier:
                keyid:DC:75:59:EE:5A:22:50:60:39:73:38:FC:AA:38:03:FF:AA:4B:23:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HVZ7loiUGA5czj8qjgD_6pLI1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA56C/DDDE8C4864FF11EFA5A81158C4F9AE02/3HVZ7loiUGA5czj8qjgD_6pLI1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:13:fe:f6:e1:25:21:7e:02:4d:f1:50:c7:cc:f2:08:97:b7:
         bb:35:a1:d1:ae:65:41:b0:fe:24:35:34:7e:d6:8a:26:f7:c2:
         3c:6e:27:80:b8:ad:de:74:18:5a:49:25:2c:32:7c:39:33:30:
         33:73:44:80:4e:ae:51:8b:e7:df:28:d1:3c:3b:89:7f:17:20:
         a9:39:52:7c:92:83:e6:78:21:fd:1c:a3:f7:16:56:5d:7a:ad:
         c9:2c:87:80:02:28:81:ba:cc:b5:bb:7b:e4:24:7d:04:b1:a0:
         21:c0:71:fc:69:30:8e:da:7e:fa:14:70:b1:03:2e:82:fe:da:
         a1:9e:66:35:50:99:d3:0a:22:63:87:a9:fb:be:72:7c:22:2e:
         ef:e8:22:ca:66:69:9f:96:27:ff:22:83:31:92:3b:a6:99:0a:
         8f:cc:90:e5:7c:d5:12:48:76:77:3a:4f:ba:f1:56:b2:a1:2a:
         21:4f:2b:bb:83:e2:f7:1f:9a:bf:2a:17:9b:1c:5d:7e:a9:e5:
         ab:e2:e8:e1:96:bb:f2:68:f2:49:85:60:17:ff:fd:0a:2e:49:
         d2:33:09:fe:19:be:8e:9c:8b:ee:b6:9d:f3:5d:a4:1e:18:44:
         05:b8:d2:17:4a:8d:4f:df:8d:ef:a1:19:98:8a:48:a3:6f:2d:
         a9:70:07:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:53:45 2026 by rpki-client