Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
File:                     A3iO4rrk2AXrzcpmGOLsGhilxOI.mft (raw, json)
Hash identifier:          lg3VgNbd54J9WV00FO6MBoHAYrurF4YBGqFwjTy+zgc=
Subject key identifier:   C3:7A:65:EC:82:C5:AD:09:6A:DA:AA:F1:A9:D8:34:7D:C1:8A:8D:FF
Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
Certificate issuer:       /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
Manifest number:          0148
Signing time:             Sun 27 Sep 2026 05:57:55 +0000
Manifest this update:     Sun 27 Sep 2026 05:57:55 +0000
Manifest next update:     Sun 04 Oct 2026 05:57:55 +0000
Files and hashes:         1: A3iO4rrk2AXrzcpmGOLsGhilxOI.crl (hash: uLMxeUbgtkwv76vDmDTVhl66lPrSJ2dfpNs9Ky+dKOo=)
                          2: 279A9510AB7811F09488DF65C4F9AE02.roa (hash: a66FJVblEQHdrFJ6maL/blKyTJ7uVgdnmuKz3wA+9Uc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl
                          rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
        Validity
            Not Before: Sep 27 05:57:55 2026 GMT
            Not After : Oct  4 05:57:55 2026 GMT
        Subject: CN=6ab8b063-f14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:76:5a:43:f2:3e:ca:da:74:09:4e:21:9d:
                    18:1b:83:f3:70:ca:db:24:66:2a:e7:bd:19:4d:78:
                    1a:2e:9c:d1:0f:78:e6:f7:3d:93:db:4c:09:cd:36:
                    b3:d2:cf:56:12:97:d6:59:3d:1e:39:36:44:d8:e0:
                    79:4d:3e:f7:ec:ff:86:1a:d5:66:d7:50:7f:ce:99:
                    be:59:04:31:de:67:ca:12:d2:c0:aa:3f:5a:66:55:
                    a5:97:35:07:19:48:91:22:0d:8a:1d:ad:c0:76:58:
                    56:1a:5d:86:a1:0b:71:89:50:8e:fb:32:88:2e:45:
                    c3:49:a4:d9:de:18:64:f2:a9:52:fc:ed:e4:54:1d:
                    67:9d:2d:53:28:03:e6:8c:88:a4:b9:a0:09:30:74:
                    d7:04:1e:ca:77:bc:e5:cf:54:f6:9b:75:79:1b:21:
                    f5:38:56:10:c9:2a:67:67:f6:b7:7c:77:a0:e7:45:
                    5b:8d:02:49:d3:23:0d:d3:be:36:74:03:29:f1:6b:
                    b1:06:2e:7f:9a:ec:b1:05:e3:f1:60:8d:b1:b4:28:
                    70:d4:8c:a1:6d:e7:26:ab:be:ad:9a:74:fe:43:8f:
                    d1:c8:dd:86:a2:a9:3c:59:aa:c2:ed:6b:1d:e5:68:
                    c0:16:9e:10:3e:01:84:db:52:25:8a:01:d3:d0:87:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7A:65:EC:82:C5:AD:09:6A:DA:AA:F1:A9:D8:34:7D:C1:8A:8D:FF
            X509v3 Authority Key Identifier:
                keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d0:1d:e9:69:24:cd:0d:90:0a:96:76:d3:da:f6:c5:5b:69:
         8e:03:20:a2:1b:29:0f:f3:26:ac:e8:3b:20:08:ee:20:b8:9f:
         c5:8a:05:68:b5:df:13:e3:84:64:5f:35:45:3c:36:91:d6:cc:
         1b:fb:76:95:57:bb:35:14:6c:67:ac:94:0e:3e:d2:99:b5:16:
         cf:1c:70:f3:96:28:2e:ef:b0:3a:c7:17:61:66:a6:60:39:8c:
         60:d3:7e:db:30:dc:51:3a:0e:38:dc:77:87:8c:d3:7c:50:c7:
         b7:92:a7:55:ac:de:d4:ba:dd:06:9a:66:c2:8d:45:5c:a0:5b:
         f7:69:cc:04:a3:a4:5f:9e:81:18:2a:67:a7:51:d5:ab:b8:4e:
         5d:b8:8e:33:7c:e3:06:0d:1c:dc:92:b5:0c:c3:c7:dd:28:74:
         07:4f:8d:eb:d9:63:26:9b:70:5a:94:00:75:ca:76:f9:c2:98:
         be:66:8d:3a:f6:35:64:61:2f:7d:5c:76:0c:10:0b:c8:a5:f3:
         a0:b9:ed:d9:20:a8:b2:bd:82:13:5f:88:e6:c0:2d:6a:91:31:
         67:bb:6c:29:d7:ef:8f:4f:99:d8:1e:3b:64:e2:f4:d3:ee:1b:
         99:71:3d:a8:b4:9e:32:61:a2:ec:19:ef:16:02:eb:b8:89:3f:
         64:e3:d2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:59:04 2026 by rpki-client