Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft
File:                     S3IqOmeTvzLJvPUuTncuCm86Yxk.mft (raw, json)
Hash identifier:          3HtD25eL6wwJp0VhDDVhbU964QXreWpn31oWYyOGu5M=
Subject key identifier:   8E:00:3E:72:3F:2F:40:FA:83:3C:8B:4F:4F:2A:72:0E:C3:5A:2E:5A
Authority key identifier: 4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19
Certificate issuer:       /CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319
Certificate serial:       027F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft
Manifest number:          026C
Signing time:             Tue 13 Oct 2026 02:36:38 +0000
Manifest this update:     Tue 13 Oct 2026 02:36:38 +0000
Manifest next update:     Tue 20 Oct 2026 02:36:38 +0000
Files and hashes:         1: S3IqOmeTvzLJvPUuTncuCm86Yxk.crl (hash: 7i5dS2hPHoPjfSMYOTukgME94KttWa2MUWkOQrUERZk=)
                          2: E3901F981BD711EEB9597921C4F9AE02.roa (hash: 59D9zQ+RBL5Fvi3gvp0OtvuM1QHSjOAbItynN8Kr7yQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl
                          rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 02:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A67E, serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319
        Validity
            Not Before: Oct 13 02:36:38 2026 GMT
            Not After : Oct 20 02:36:38 2026 GMT
        Subject: CN=6acd9936-24dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fe:cd:33:4f:df:83:91:60:d3:33:de:30:24:
                    ae:e9:9f:0e:d7:0b:e2:c7:d3:58:46:2f:b0:99:d4:
                    4b:67:fc:58:7e:ab:63:d6:7a:dc:ad:7b:07:5b:16:
                    56:7a:c4:ba:bd:d4:05:c8:76:53:a7:ea:ba:57:74:
                    2a:6c:04:26:f5:77:fd:d7:25:67:ff:2f:0d:7c:f8:
                    a6:a7:be:60:36:81:c6:60:f2:77:7a:d0:6a:d0:9b:
                    c5:c7:20:4b:1c:1d:46:27:87:f0:d6:4e:67:5b:eb:
                    22:84:98:f6:e9:86:03:6c:25:4a:e9:dc:a5:f3:80:
                    08:b6:9b:65:b8:62:8b:f6:57:b8:b6:e4:9c:2a:15:
                    62:62:0b:f0:dc:e4:ad:2c:b4:58:77:5b:53:66:97:
                    dc:1d:aa:a1:b7:21:57:ec:76:7c:9a:d6:f6:4a:bf:
                    78:b4:08:6d:70:14:f7:e1:e8:49:00:f5:2f:07:d6:
                    09:2e:75:84:60:dc:b7:f5:43:ae:90:3f:bb:db:fb:
                    97:4f:5b:f8:41:a5:08:bd:13:d1:db:7d:5b:26:b2:
                    72:c8:6e:7b:22:1a:a2:b5:46:77:70:dd:46:4a:7a:
                    da:88:e4:10:d6:ca:1a:cb:da:ba:7d:e9:58:d6:0c:
                    da:34:44:f3:16:30:ef:fe:d6:c7:d1:2d:c2:38:be:
                    c7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:00:3E:72:3F:2F:40:FA:83:3C:8B:4F:4F:2A:72:0E:C3:5A:2E:5A
            X509v3 Authority Key Identifier:
                keyid:4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e1:c3:d9:a8:57:d4:49:06:d7:c1:f8:2f:d6:fd:b4:6f:1c:
         d4:2e:20:59:8e:c9:ba:07:e2:54:03:26:ea:52:35:ab:61:a5:
         e4:75:27:33:da:0f:45:c0:50:44:16:3f:fd:f8:9a:05:39:6a:
         a4:f8:74:87:c7:c1:60:cc:d4:fb:16:1d:e8:54:54:1f:eb:4c:
         97:00:52:24:f6:1e:ea:14:bd:89:cb:6b:41:b0:b3:e4:19:e3:
         c3:34:1c:ac:4b:65:1b:7e:c9:ea:71:22:c0:56:85:83:03:33:
         a8:6a:b6:b5:bf:2e:6f:55:c1:fd:ec:d8:5c:25:19:86:2b:84:
         6a:6c:76:37:cc:2d:aa:a8:55:b0:dc:59:94:fd:97:07:b9:ac:
         21:9f:4a:0a:27:4a:72:86:c5:dd:59:30:3b:c1:1b:5a:c3:0a:
         11:28:7d:1b:d9:3d:4f:0a:98:c5:d2:3a:cf:3c:3d:e0:1b:21:
         c4:5a:eb:4d:d1:ed:ed:4c:4d:c4:79:a5:a0:6f:2c:47:d4:e0:
         56:76:2c:e8:dc:95:61:50:07:72:2d:44:b3:f9:8b:b1:2f:0f:
         b1:21:a8:e9:2b:06:f0:a6:cd:30:e9:d1:12:9d:0f:42:5e:df:
         31:78:4f:a5:83:ba:59:0a:60:1b:73:a9:40:c6:40:6c:94:83:
         03:aa:e4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:55:08 2026 by rpki-client