Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.mft
File:                     3mNivqTO3X139q98BomMu4dkxH8.mft (raw, json)
Hash identifier:          uxguOFVGblrmm5tySujy57DyJcPeJejTFG5LzJwR9Gw=
Subject key identifier:   3B:BA:AD:80:36:5E:27:FC:58:6D:55:FF:6F:6A:18:31:22:AD:5C:31
Authority key identifier: DE:63:62:BE:A4:CE:DD:7D:77:F6:AF:7C:06:89:8C:BB:87:64:C4:7F
Certificate issuer:       /CN=A917171E/serialNumber=DE6362BEA4CEDD7D77F6AF7C06898CBB8764C47F
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mNivqTO3X139q98BomMu4dkxH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.mft
Manifest number:          59
Signing time:             Tue 13 Oct 2026 08:54:47 +0000
Manifest this update:     Tue 13 Oct 2026 08:54:46 +0000
Manifest next update:     Tue 20 Oct 2026 08:54:46 +0000
Files and hashes:         1: 3mNivqTO3X139q98BomMu4dkxH8.crl (hash: Iqi/o5w/cytF3zi5769HUigWTrCKvLE3DuuKk3wKetc=)
                          2: A215F7263E2B11F19BB8FE1BB7833773.roa (hash: CG+Fkm8MRpZF2H0mCDcsrtByDJI5HEiQSaXQPyB65U0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.crl
                          rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mNivqTO3X139q98BomMu4dkxH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 08:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917171E, serialNumber=DE6362BEA4CEDD7D77F6AF7C06898CBB8764C47F
        Validity
            Not Before: Oct 13 08:54:46 2026 GMT
            Not After : Oct 20 08:54:46 2026 GMT
        Subject: CN=6acdf1d7-70f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:83:83:c7:e0:37:bc:c8:0a:d3:fe:94:11:0c:
                    2d:ee:dc:c9:66:c5:46:9a:eb:fa:3a:6f:3f:94:43:
                    0b:e5:fd:6b:a2:b4:3a:e5:09:4e:3d:e4:29:dd:ca:
                    86:93:fb:f9:b0:0f:16:19:16:58:f6:4a:b2:16:c5:
                    40:70:de:13:23:0a:08:42:eb:92:84:35:a0:14:0d:
                    7f:1a:a0:a9:85:4d:5d:b5:2f:37:78:6b:7e:d9:99:
                    0f:fd:74:7e:80:99:43:5f:b9:16:75:2f:e6:d5:9f:
                    24:3c:b1:bc:e1:71:cc:61:bc:07:03:9d:ba:b9:2f:
                    f8:81:8d:93:d5:2d:97:04:3b:ca:f3:d9:1a:7a:8f:
                    bb:34:81:3a:24:88:a6:9f:5e:1f:e5:83:ef:a8:d7:
                    cd:10:0a:1c:e9:cf:91:fd:dd:56:cc:32:b6:92:3d:
                    f9:f1:ef:a4:de:86:bb:c0:79:59:d3:5a:29:57:59:
                    ab:e9:09:20:4d:fe:1f:aa:94:a8:a7:89:a3:db:c8:
                    78:6c:c2:71:d0:35:57:76:c4:db:a3:8f:93:ed:1c:
                    2f:79:f7:74:4e:31:a8:b1:ff:bd:49:15:c8:49:c0:
                    c5:f1:9f:7e:8d:e9:c8:92:47:bd:51:2e:8d:3e:e4:
                    c8:27:bd:89:5e:a8:47:b1:7b:57:25:37:9f:26:cb:
                    e4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BA:AD:80:36:5E:27:FC:58:6D:55:FF:6F:6A:18:31:22:AD:5C:31
            X509v3 Authority Key Identifier:
                keyid:DE:63:62:BE:A4:CE:DD:7D:77:F6:AF:7C:06:89:8C:BB:87:64:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mNivqTO3X139q98BomMu4dkxH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f7:0a:e4:a3:ff:60:f2:67:da:0f:34:16:19:f8:93:40:48:
         eb:c9:51:12:dd:60:a5:63:5b:87:ea:33:3d:73:c0:83:4b:ca:
         16:5c:8a:04:b7:8a:4e:bf:aa:c7:d3:fe:79:8a:c0:b6:0c:41:
         96:4a:d7:14:73:31:53:5d:29:ad:b5:7e:20:9c:d7:3d:f5:21:
         c9:19:7e:2e:44:f5:84:42:2a:5e:89:1f:a3:c1:fc:fc:fa:25:
         07:85:37:cf:4a:0e:cf:b2:77:d8:f0:45:12:4b:66:43:84:56:
         e1:d5:a4:3f:94:e7:46:7a:01:a5:2a:cd:46:55:e4:52:ad:77:
         90:17:f3:e5:1a:9a:85:00:bc:75:11:89:58:03:f1:ae:29:37:
         2a:55:9f:01:d8:bc:8e:05:1c:07:98:94:45:e1:69:a0:3f:1a:
         70:a9:68:30:cd:9d:c6:d2:1a:c3:a9:69:54:0b:3f:1e:6c:1b:
         26:3c:10:9d:38:69:da:4e:d5:da:65:64:42:06:5a:21:9b:b4:
         87:5f:c2:03:fd:63:e9:53:dd:99:b5:e8:5c:3f:d8:e3:e4:00:
         81:aa:d1:c8:ce:30:8c:cb:99:28:17:53:f6:2a:dd:0c:72:49:
         09:d2:7c:be:6c:46:b5:42:7b:fe:32:ae:6e:65:e8:6b:b7:af:
         13:5b:6c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:03:17 2026 by rpki-client