Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
File:                     MjQC2m9aUgggITsu3L_s7DrJEEU.mft (raw, json)
Hash identifier:          5Gm/ihaeJ4xKapiJ6obH7N2wyH6xNqQf+Bz/NfbgZTY=
Subject key identifier:   99:AC:D3:9A:90:C8:31:94:F3:A9:12:CA:4F:8E:BD:EF:38:86:E7:99
Authority key identifier: 32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45
Certificate issuer:       /CN=A913059E/serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
Manifest number:          A3
Signing time:             Wed 23 Sep 2026 05:21:15 +0000
Manifest this update:     Wed 23 Sep 2026 05:21:14 +0000
Manifest next update:     Wed 30 Sep 2026 05:21:14 +0000
Files and hashes:         1: MjQC2m9aUgggITsu3L_s7DrJEEU.crl (hash: p7Fv3M/XF5bu/XcbgG31xrINOz+W4PifAVC8PVB1+0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl
                          rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913059E, serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
        Validity
            Not Before: Sep 23 05:21:14 2026 GMT
            Not After : Sep 30 05:21:14 2026 GMT
        Subject: CN=6ab361ca-abbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:d2:7b:bd:91:f5:7f:9d:9c:96:a9:38:91:
                    54:a4:03:8f:43:33:ba:61:2f:5a:56:a2:5d:23:8a:
                    73:24:8c:ec:b4:91:6f:97:6d:5f:b2:a4:bc:8f:fd:
                    09:6b:1c:86:3d:ff:f7:25:a1:5c:50:18:b2:4d:b1:
                    b5:5e:fd:11:2b:38:30:1a:81:1f:eb:d8:65:8a:fe:
                    c1:db:ac:a5:d5:df:5a:5d:f0:56:f8:0d:db:9f:b9:
                    0f:6a:4c:82:03:93:02:9a:94:d4:56:a2:e4:18:f7:
                    f1:33:55:ea:2d:b7:ef:27:3c:61:ff:20:5b:52:ae:
                    10:c5:bc:da:9b:d1:7b:ce:f9:aa:85:62:53:25:25:
                    db:1a:28:98:f1:d8:39:f7:58:ee:c1:51:52:e0:12:
                    4f:46:8c:27:68:80:92:64:c6:44:5b:b1:4f:b3:8f:
                    33:9a:79:ed:27:80:28:be:06:b8:d9:cd:0c:ac:d9:
                    cf:6c:bb:7a:c3:fd:be:d6:49:c2:3c:27:f2:3f:1a:
                    67:56:59:0d:e3:a8:b3:66:2d:48:b2:ca:53:4a:c8:
                    71:d8:fc:ab:7a:f4:be:58:4e:e0:a7:9e:61:6b:7a:
                    33:0b:9b:11:21:20:fc:44:01:87:bb:66:3f:22:4d:
                    e0:99:e7:ac:23:31:f8:7a:3d:4a:fd:f5:6c:19:8b:
                    76:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AC:D3:9A:90:C8:31:94:F3:A9:12:CA:4F:8E:BD:EF:38:86:E7:99
            X509v3 Authority Key Identifier:
                keyid:32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2a:a8:51:2e:25:24:9c:95:18:1b:d2:6f:0a:df:75:a1:98:
         c5:43:5a:f1:bb:95:5d:92:14:1a:07:83:f6:f5:70:2e:34:eb:
         a4:c5:3c:66:f1:eb:db:28:1b:3f:64:8e:a3:98:8f:e2:85:e7:
         0e:bd:1e:54:64:07:51:ed:19:e2:7e:7f:f6:d4:25:71:44:d4:
         28:7f:3d:44:89:68:ea:4d:14:79:18:31:ce:b4:93:ff:20:07:
         a0:ee:ab:e9:2e:05:0d:45:95:95:6e:ff:84:9f:42:10:d6:17:
         9a:de:33:b8:82:80:32:06:d1:3d:f2:f7:67:88:b6:c4:2f:b2:
         fb:f3:02:92:e7:21:97:c8:3e:53:f9:1c:ba:bf:72:95:ed:30:
         ff:25:10:70:a6:48:3e:ea:f7:a1:81:68:b4:e8:94:34:58:f7:
         a4:d8:51:b4:35:06:ae:95:4f:f2:18:34:86:93:19:5f:bf:59:
         9f:dd:30:21:e8:5b:94:b6:d6:32:4d:62:09:23:91:9a:76:d5:
         b9:d8:8d:fa:e2:c8:e3:68:02:e5:6d:70:72:ec:40:a8:0b:a8:
         0a:c2:a4:2e:23:5a:98:d8:4b:11:d0:8d:0d:04:2d:2e:6d:a8:
         17:d6:b4:0a:fd:88:30:83:e2:2e:b2:ea:6b:ee:ee:4a:b4:51:
         9a:ee:88:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA1OUUxMTAvBgNVBAUTKDMyMzQwMkRBNkY1QTUyMDgyMDIxM0IyRURDQkZFQ0VD
M0FDOTEwNDUwHhcNMjYwOTIzMDUyMTE0WhcNMjYwOTMwMDUyMTE0WjAYMRYwFAYD
VQQDEw02YWIzNjFjYS1hYmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu1HSe72R9X+dnJapOJFUpAOPQzO6YS9aVqJdI4pzJIzstJFvl21fsqS8j/0J
axyGPf/3JaFcUBiyTbG1Xv0RKzgwGoEf69hliv7B26yl1d9aXfBW+A3bn7kPakyC
A5MCmpTUVqLkGPfxM1XqLbfvJzxh/yBbUq4Qxbzam9F7zvmqhWJTJSXbGiiY8dg5
91juwVFS4BJPRownaICSZMZEW7FPs48zmnntJ4Aovga42c0MrNnPbLt6w/2+1knC
PCfyPxpnVlkN46izZi1IsspTSshx2PyrevS+WE7gp55ha3ozC5sRISD8RAGHu2Y/
Ik3gmeesIzH4ej1K/fVsGYt2ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJms05qQ
yDGU86kSyk+Ove84hueZMB8GA1UdIwQYMBaAFDI0AtpvWlIIICE7Lty/7Ow6yRBF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU5RS9BNDY1Q0E4MEMz
NjMxMUYwOUREOUY2MzJDNEY5QUUwMi9NalFDMm05YVVnZ2dJVHN1M0xfczdEckpF
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01qUUMybTlhVWdnZ0lUc3UzTF9zN0RySkVFVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDU5RS9BNDY1Q0E4MEMzNjMxMUYwOUREOUY2MzJDNEY5QUUwMi9NalFDMm05YVVn
Z2dJVHN1M0xfczdEckpFRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaCqoUS4lJJyVGBvSbwrfdaGYxUNa8buVXZIUGgeD9vVwLjTrpMU8ZvHr2ygb
P2SOo5iP4oXnDr0eVGQHUe0Z4n5/9tQlcUTUKH89RIlo6k0UeRgxzrST/yAHoO6r
6S4FDUWVlW7/hJ9CENYXmt4zuIKAMgbRPfL3Z4i2xC+y+/MCkuchl8g+U/kcur9y
le0w/yUQcKZIPur3oYFotOiUNFj3pNhRtDUGrpVP8hg0hpMZX79Zn90wIehblLbW
Mk1iCSORmnbVudiN+uLI42gC5W1wcuxAqAuoCsKkLiNamNhLEdCNDQQtLm2oF9a0
Cv2IMIPiLrLqa+7uSrRRmu6IrA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:35:17 2026 by rpki-client