Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
File:                     rDKuLAwq1FPHzruPsoyhI5ov5aU.mft (raw, json)
Hash identifier:          9nFsn8DyRbO60X2PLxqYxGwQ9oTLIjlbD4h/2Maf8WU=
Subject key identifier:   61:63:48:01:D2:FF:0E:53:0A:35:C7:AF:01:6F:6B:04:C5:BE:46:8C
Authority key identifier: AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5
Certificate issuer:       /CN=A91FDC31/serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
Manifest number:          3F
Signing time:             Thu 03 Sep 2026 08:45:16 +0000
Manifest this update:     Thu 03 Sep 2026 08:45:15 +0000
Manifest next update:     Thu 10 Sep 2026 08:45:15 +0000
Files and hashes:         1: rDKuLAwq1FPHzruPsoyhI5ov5aU.crl (hash: 3Iy4UALtLnP8BoVp3AYg+6HKyBfBH58QbTZG6VOomY0=)
                          2: C2E7AA224A3211F1BD5DF90392833773.roa (hash: GcwDkPymz7zW7+vsuIsz6xXHjXAVw/W3Kds1cjW9Iiw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC31, serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5
        Validity
            Not Before: Sep  3 08:45:15 2026 GMT
            Not After : Sep 10 08:45:15 2026 GMT
        Subject: CN=6a99339c-ffa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:db:4f:63:12:ec:5f:06:9e:34:62:3d:dc:
                    99:93:09:c6:b4:e8:2c:eb:53:7a:8d:c0:f1:4d:5a:
                    c4:38:ff:fc:a4:b9:52:fd:14:0e:6a:cc:47:b7:b9:
                    70:f9:84:d3:40:aa:10:39:a8:ac:3f:e3:bc:7c:1e:
                    a8:e8:47:a5:c6:c6:00:01:97:c2:57:ab:6e:20:5a:
                    12:7b:91:2a:3c:a9:c7:e1:55:ed:f1:90:df:62:ce:
                    1e:75:e4:14:0b:e5:b9:de:01:c2:0e:4c:07:eb:ff:
                    f3:77:d2:b8:5b:8d:bf:a8:6e:f0:82:16:95:2a:9a:
                    05:a2:1d:e3:fe:bb:24:9f:e5:62:eb:91:20:8f:81:
                    34:28:f9:16:17:47:a8:00:81:de:29:d2:2c:6e:c3:
                    7d:82:4b:ae:3e:3b:c0:9e:93:98:50:c2:01:07:a3:
                    34:fa:db:08:3e:02:15:1a:ab:71:a6:74:d3:36:49:
                    23:d7:5a:d4:b5:ef:09:6f:32:5c:1b:ce:cd:8a:f0:
                    21:0e:95:29:b3:9d:a1:ed:41:ac:86:85:61:9a:a4:
                    42:24:81:7b:4f:28:96:d2:52:70:3a:d8:03:7a:7b:
                    a7:f6:bb:69:4e:89:11:bb:34:64:5d:fb:56:31:56:
                    6c:b0:f2:14:52:66:e3:b6:e2:41:86:cf:26:d2:d6:
                    e0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:63:48:01:D2:FF:0E:53:0A:35:C7:AF:01:6F:6B:04:C5:BE:46:8C
            X509v3 Authority Key Identifier:
                keyid:AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c9:61:41:4d:13:bb:8f:c1:89:fe:2d:5d:77:c2:9b:dc:79:
         a4:e4:e5:f7:cd:6c:59:1b:7d:8b:58:89:ec:9f:d2:99:6d:0b:
         3e:79:d0:06:74:9c:bc:4f:3d:f9:86:df:a5:7a:b2:2d:19:44:
         f7:5d:cc:38:57:74:26:ba:38:d4:74:c3:68:67:95:39:37:9d:
         83:02:6f:12:bb:f0:23:c5:c8:fe:45:99:b6:25:d7:59:a0:3f:
         9a:d8:33:9b:fd:2e:f2:21:2e:d4:16:32:24:71:7e:9b:a0:c1:
         b7:59:22:d5:22:8f:20:ac:3b:f6:d4:cc:9b:48:cd:01:85:37:
         51:65:bb:87:92:24:68:4e:49:f0:2f:75:45:47:c8:d6:0a:03:
         aa:4b:5a:a4:2d:1e:75:00:15:fa:15:b2:c7:90:78:90:38:39:
         b8:12:9b:81:19:7a:3b:ae:33:04:82:85:91:b4:38:3d:26:a6:
         12:4c:15:1a:f2:06:1e:8a:14:1c:85:d2:9b:61:8a:51:af:13:
         c7:bc:4f:1f:40:ef:5e:a1:7a:4c:15:76:e0:e7:8a:0f:aa:cb:
         2b:0b:73:8f:3d:1f:77:e5:a8:27:8b:06:77:24:de:12:ed:96:
         dc:db:d2:08:31:3a:0d:b0:d4:f6:f9:b2:c8:6c:8c:1e:8b:30:
         89:15:8a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:12:19 2026 by rpki-client