Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
File:                     8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json)
Hash identifier:          UWfVnwj1uu+lsTP8qJYVoeTqi908z/dWp0mhVQNHMY4=
Subject key identifier:   6E:9A:15:FD:82:69:E8:5B:92:ED:A2:60:10:2A:F7:EC:42:30:6D:03
Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2
Certificate issuer:       /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
Certificate serial:       3604
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
Manifest number:          3596
Signing time:             Sun 20 Sep 2026 14:19:03 +0000
Manifest this update:     Sun 20 Sep 2026 14:19:03 +0000
Manifest next update:     Sun 27 Sep 2026 14:19:03 +0000
Files and hashes:         1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: O4H9c7JF/irobue8aOf3r+b33xuPPyJmmMymVxORZcg=)
                          2: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: lHpCFsLt7U2o1M0PHQpZCnb+hTvR9R+79jjvxvZZVc8=)
                          3: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: iAjJeW7mv0SQMiUZA706Y7e5Dpr+uJ1EKTAhmx1r1Ho=)
                          4: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: gLPTWrm2PPekN94x5WPKoFXaMR9NBRCv5mD6xWQxTlQ=)
                          5: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: pziarfpXcmZshK5aRJXPQK28eVft/dtml9oMxHa7rpY=)
                          6: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: oYQNkpcQFkrJq7hNKWTpwJS+ixdzI6MgGMC3Udqv1Uw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl
                          rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 14:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13828 (0x3604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91474C3, serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2
        Validity
            Not Before: Sep 20 14:19:03 2026 GMT
            Not After : Sep 27 14:19:03 2026 GMT
        Subject: CN=6aafeb57-aeee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:52:75:b6:ca:54:ba:0a:46:0d:20:c7:4f:ce:
                    3d:7f:14:bf:31:d0:c2:85:9f:c6:fd:6f:60:6d:67:
                    1b:91:26:dc:15:5a:3f:87:9f:f9:8c:48:75:94:5b:
                    28:ca:80:ac:ea:c9:89:4f:6e:36:59:52:96:bb:ff:
                    f0:3d:91:be:22:c2:e4:ec:a9:0f:49:d2:21:f7:56:
                    cb:d7:49:10:4a:d5:23:c1:a8:4b:f4:a8:7c:16:44:
                    73:87:52:96:72:47:52:59:8f:76:a7:90:50:3b:f5:
                    41:2e:d6:9b:ff:9d:57:17:17:75:dd:9c:66:45:00:
                    5b:09:b9:46:61:8f:f0:c4:ad:b4:9b:93:5e:f0:ba:
                    41:f1:ed:c6:e1:a8:66:48:85:f6:fb:43:d4:cf:86:
                    65:23:0b:be:7d:67:6d:94:97:83:89:4d:38:e1:20:
                    75:8d:73:8b:d9:dd:53:55:3f:f6:07:30:4d:7c:6e:
                    d4:fe:9a:05:2a:12:aa:2b:d1:41:00:e2:e9:8f:50:
                    40:ee:5b:dc:29:6b:9d:cc:87:e9:80:75:f1:e1:af:
                    43:a7:2a:be:ef:86:8c:f2:45:93:7f:73:99:79:2e:
                    3c:b7:c6:db:50:08:e3:1c:fc:82:0d:92:19:c0:ad:
                    65:85:de:b7:0f:db:23:cb:da:8d:e3:2b:a4:20:5e:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9A:15:FD:82:69:E8:5B:92:ED:A2:60:10:2A:F7:EC:42:30:6D:03
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:8e:9e:70:ec:16:12:bf:cb:e7:af:8d:eb:13:6a:77:ff:f8:
         1c:10:38:76:d7:80:d1:bc:98:da:c3:67:bf:41:c6:d5:61:cb:
         b3:14:c9:4c:f1:ec:00:45:7c:b9:2b:ab:8a:55:71:84:31:ac:
         b6:4d:24:8c:f7:09:f1:70:89:d4:0b:ce:d0:81:2e:9e:f7:81:
         a4:53:4b:49:f4:14:41:7a:f5:78:41:e6:4c:51:7e:2b:83:2f:
         47:eb:56:10:42:48:7d:bf:b4:30:79:3d:d4:d1:ac:a2:20:f4:
         98:08:4f:62:78:30:23:ab:40:4f:9b:92:04:6e:84:f5:f5:21:
         b3:7b:d9:e6:bb:b7:3e:68:f2:5c:b2:92:bb:d9:d6:82:b8:06:
         27:d2:ad:38:61:44:8c:d9:b3:9d:b9:58:60:c7:e3:b7:20:fd:
         47:8e:1a:be:ad:63:1e:2b:ae:3c:2b:d6:17:c9:84:42:12:c2:
         a4:19:4c:b4:1e:99:ec:7e:c5:f6:be:af:25:cf:9b:7a:e5:2e:
         99:2d:e8:3d:d5:ce:8e:d5:47:e6:ec:29:0c:66:91:93:5a:64:
         5a:80:cf:fc:34:6c:cc:09:80:85:74:2e:81:36:7b:98:ae:52:
         12:ff:1b:3b:eb:c7:0b:98:77:85:6d:f5:a1:0f:b8:bd:f0:a6:
         2e:4e:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:04:09 2026 by rpki-client