Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
File:                     3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft (raw, json)
Hash identifier:          wFepRLYF+c/lQks7SEEMiyJt7IVtwHFjOxIxMyn8X58=
Subject key identifier:   D6:86:85:C2:F5:AD:83:CB:5F:2C:23:6E:D5:78:24:A3:B2:2A:33:1D
Authority key identifier: DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23
Certificate issuer:       /CN=A9173EFB/serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
Certificate serial:       046F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
Manifest number:          0460
Signing time:             Sun 11 Oct 2026 00:11:42 +0000
Manifest this update:     Sun 11 Oct 2026 00:11:42 +0000
Manifest next update:     Sun 18 Oct 2026 00:11:42 +0000
Files and hashes:         1: 3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl (hash: YXhsdeLBqvW9ZVNI1b38ipDkTqD7teWPXT589RF1uG0=)
                          2: 39F3DCDABBB711EC8B27B129C4F9AE02.roa (hash: se/xsjUYASgxoeT2qN2nZLM3PoVTK/HxE7NUHJtG9UE=)
                          3: 7618919ABBB411EC91E89B0CC4F9AE02.roa (hash: VLjWrvsBZOb5RRzfQR/ZW/9sXfOF+0yPPRv7hqUV024=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl
                          rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 00:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173EFB, serialNumber=DD8D2C83BB4A1EA9E137776FCC551104CAB2B823
        Validity
            Not Before: Oct 11 00:11:42 2026 GMT
            Not After : Oct 18 00:11:42 2026 GMT
        Subject: CN=6acad43e-8567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:f5:b4:98:7c:33:b5:5c:2c:da:73:ec:76:
                    ea:35:68:b8:e2:3f:1b:66:16:f6:f6:9a:a2:69:45:
                    e2:e7:87:41:23:14:7b:7d:1b:6b:c5:0f:38:d0:6e:
                    e7:24:02:03:d2:a8:ec:de:18:16:2e:22:22:b6:21:
                    d9:d3:cb:76:1b:6e:a5:0e:bd:d2:cb:88:8b:63:a4:
                    0b:b5:b3:ed:d8:10:61:4f:74:9e:62:d8:31:c1:39:
                    f3:69:72:65:3e:ed:63:dd:6d:c8:bc:37:f6:ad:e6:
                    84:aa:b8:8a:fc:63:ed:95:d7:6c:31:ca:4b:7a:51:
                    db:a0:2d:5a:49:09:19:bc:9b:0b:a7:89:7b:fa:6e:
                    3a:d3:c4:cf:57:bd:ee:f3:e2:ee:10:be:91:04:75:
                    ac:26:cd:9d:19:fa:8b:35:7c:f2:04:ac:c1:39:1a:
                    79:17:58:69:0f:56:aa:4f:6a:03:1c:c7:07:b3:43:
                    2a:53:07:01:15:20:30:df:82:0c:de:34:72:f0:bf:
                    8a:c6:42:c7:62:56:90:8a:74:d3:48:bf:40:2a:84:
                    b0:ef:a4:7b:7e:29:c3:54:2a:e2:1a:57:5a:2e:38:
                    1c:25:05:03:ba:b3:4b:a5:d1:ab:f5:06:bf:d4:e8:
                    40:84:a3:a1:d3:e2:fe:7d:b1:73:87:bd:95:1b:c0:
                    bf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:86:85:C2:F5:AD:83:CB:5F:2C:23:6E:D5:78:24:A3:B2:2A:33:1D
            X509v3 Authority Key Identifier:
                keyid:DD:8D:2C:83:BB:4A:1E:A9:E1:37:77:6F:CC:55:11:04:CA:B2:B8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y0sg7tKHqnhN3dvzFURBMqyuCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173EFB/738DBFFAB42411EC96728235C4F9AE02/3Y0sg7tKHqnhN3dvzFURBMqyuCM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ef:57:2e:a1:cc:2d:1a:ce:a5:da:66:40:87:e3:26:65:95:
         94:e8:aa:08:c0:56:0e:37:6d:b1:39:84:ba:82:c8:eb:84:db:
         5b:1f:78:4c:68:58:6f:29:7c:64:1e:4b:f0:61:44:56:7c:95:
         06:c0:a6:0c:dc:20:01:b1:5c:e8:5f:91:d0:ca:5f:18:c6:61:
         e9:e7:67:f9:e6:73:c3:52:1b:a1:ba:bc:ae:4d:b7:12:99:98:
         ce:98:c1:ae:23:a6:83:5c:a3:c9:9e:be:49:21:e1:36:9b:8a:
         cf:04:55:b1:17:4e:37:9a:dc:d6:bb:f9:f7:a6:6a:e1:75:d5:
         2d:b4:ba:e0:14:a5:ec:6b:68:47:17:c8:0b:4b:e6:a7:35:68:
         de:b9:a1:6a:c7:eb:b7:11:a2:0c:c0:8f:3c:62:a8:b0:18:68:
         49:29:74:d5:eb:d9:b5:a6:c4:53:74:26:d8:d8:aa:65:06:a1:
         f5:76:ad:38:9f:3a:7a:f8:29:3f:33:7f:14:93:80:38:06:5d:
         17:f9:00:4f:7f:a6:bb:88:cf:36:fd:9d:00:dc:17:88:b7:da:
         4e:87:02:8f:4b:b3:da:70:31:e4:7f:70:64:b8:38:87:a2:78:
         37:8c:08:7b:9a:a6:39:c6:30:47:4a:40:47:a1:1e:fb:8a:95:
         ea:32:ff:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:54:07 2026 by rpki-client