Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft
File:                     3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft (raw, json)
Hash identifier:          nSLAGp62Qgf3bAFTGiEpfU3PzvN60NyswmmT1matsew=
Subject key identifier:   52:9B:20:99:01:86:7C:40:17:D9:99:05:18:13:13:7C:05:94:47:EC
Authority key identifier: DC:FB:72:C6:F6:D0:39:5C:45:97:F3:2F:82:4B:D6:89:6D:B3:7B:57
Certificate issuer:       /CN=A91731A3/serialNumber=DCFB72C6F6D0395C4597F32F824BD6896DB37B57
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3PtyxvbQOVxFl_MvgkvWiW2ze1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft
Manifest number:          16
Signing time:             Sat 19 Sep 2026 09:03:42 +0000
Manifest this update:     Sat 19 Sep 2026 09:03:42 +0000
Manifest next update:     Sat 26 Sep 2026 09:03:42 +0000
Files and hashes:         1: 3PtyxvbQOVxFl_MvgkvWiW2ze1c.crl (hash: X0ErowshGtN6fmQmn89lvOTcneYlsa7fIsau3Lwgd2s=)
                          2: FE48721A979211F1B1FF570F5011F970.roa (hash: FMkg1uv3vBHeUlhEXwmbBwkyuLXm5T/S60PVC3PzM9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.crl
                          rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3PtyxvbQOVxFl_MvgkvWiW2ze1c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731A3, serialNumber=DCFB72C6F6D0395C4597F32F824BD6896DB37B57
        Validity
            Not Before: Sep 19 09:03:42 2026 GMT
            Not After : Sep 26 09:03:42 2026 GMT
        Subject: CN=6aae4fee-5e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:6f:2a:ce:16:31:69:65:b8:86:99:7e:65:
                    14:b5:6b:21:04:76:9a:27:3a:f1:3d:b7:b2:bd:0d:
                    6b:c6:21:9a:2e:74:88:26:27:50:f2:4f:31:c4:df:
                    30:fa:56:3d:60:23:84:c4:9e:e2:d7:9f:5e:23:2b:
                    67:d1:21:0b:10:84:b0:a1:c2:bb:7e:86:3b:3b:78:
                    cc:5d:03:72:ad:df:a7:f8:48:6c:49:1e:fe:57:68:
                    08:a1:0c:36:4f:37:2b:79:c5:10:ce:c4:2c:3d:c9:
                    4b:57:6f:93:39:49:d7:16:67:57:2f:99:11:74:2a:
                    c2:20:c7:0a:7c:ce:49:82:cd:9c:ad:f9:17:f5:07:
                    c6:99:37:98:1f:cf:f0:7d:ac:a3:20:27:e8:1c:59:
                    e5:9a:49:84:33:07:62:7c:32:53:96:b8:7d:6b:7b:
                    13:36:22:20:ac:f9:c8:c1:90:04:4c:bc:a6:de:38:
                    49:c1:c7:eb:79:35:ab:17:f4:48:a3:d0:09:c3:bf:
                    67:19:c7:fa:50:aa:48:a0:23:f2:7f:7c:70:57:95:
                    ab:ca:ec:3a:cd:78:39:d1:30:d7:47:26:cc:8e:dc:
                    9b:6d:30:f5:9d:04:2e:6c:41:7d:fd:8e:1b:69:87:
                    c5:7a:f4:4d:2f:71:7c:b2:42:39:76:2a:be:c3:9b:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9B:20:99:01:86:7C:40:17:D9:99:05:18:13:13:7C:05:94:47:EC
            X509v3 Authority Key Identifier:
                keyid:DC:FB:72:C6:F6:D0:39:5C:45:97:F3:2F:82:4B:D6:89:6D:B3:7B:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3PtyxvbQOVxFl_MvgkvWiW2ze1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731A3/965D6D2C979211F1B42547EC4F11F970/3PtyxvbQOVxFl_MvgkvWiW2ze1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3b:85:78:2f:82:c5:87:8f:49:40:f6:29:78:e6:ae:ca:a8:
         b4:2d:36:ca:21:21:b7:50:93:be:3b:61:9b:b8:92:4b:4d:5a:
         29:fc:80:49:89:51:6e:0b:a2:3d:a6:c6:7a:96:d7:74:f9:8a:
         71:21:5a:f2:23:28:d4:ef:b1:df:72:66:ae:67:10:dd:f2:40:
         5e:56:95:02:aa:64:05:64:d0:95:0b:e3:71:37:38:7a:54:95:
         2f:5e:3b:60:15:f1:70:74:0b:04:d6:61:71:0a:1b:28:9d:2c:
         64:04:3f:d9:c1:63:31:de:96:56:f1:6f:0e:f0:6e:30:8b:a0:
         a9:26:97:92:73:2e:b8:16:f2:59:74:c8:5f:29:70:04:d8:60:
         e3:68:ef:34:2e:71:7e:7a:d4:8d:09:2e:ba:9c:c6:15:c6:c0:
         95:ba:ed:9d:b8:b0:b9:90:9e:d3:2a:38:73:80:80:c5:de:65:
         69:83:d7:9d:07:5a:22:46:a2:a9:9c:45:4d:12:99:81:15:88:
         c3:4a:43:9e:a4:ac:d7:74:ab:2a:ea:04:1a:bc:e6:c5:7c:e6:
         1e:d4:18:f0:b2:ca:2c:aa:b0:1f:28:c0:49:15:9e:7d:25:7a:
         64:d0:86:e8:16:82:b7:e6:f9:6a:3b:35:42:38:07:55:46:df:
         2d:36:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:53:10 2026 by rpki-client