Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
File:                     3rAzsBIsJfawCvHCFkKTMuDSAe4.mft (raw, json)
Hash identifier:          ZLkV/PffzrS4zaGcw4hWyC+3jo1Gu7S3zRaJeCfEgA4=
Subject key identifier:   C3:FB:A5:47:C4:C0:39:BF:64:C6:23:23:95:D7:EB:D8:A3:45:18:D2
Authority key identifier: DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE
Certificate issuer:       /CN=A9181D2A/serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
Manifest number:          AB
Signing time:             Mon 21 Sep 2026 07:07:12 +0000
Manifest this update:     Mon 21 Sep 2026 07:07:12 +0000
Manifest next update:     Mon 28 Sep 2026 07:07:12 +0000
Files and hashes:         1: 3rAzsBIsJfawCvHCFkKTMuDSAe4.crl (hash: omKjNjJw8uDtDM6GxQzBJAEpLSI/b479Eew6VmC8YNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl
                          rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181D2A, serialNumber=DEB033B0122C25F6B00AF1C216429332E0D201EE
        Validity
            Not Before: Sep 21 07:07:12 2026 GMT
            Not After : Sep 28 07:07:12 2026 GMT
        Subject: CN=6ab0d7a0-71ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:85:63:da:71:15:97:cc:ad:b3:eb:e1:00:e0:
                    26:0e:65:51:8f:4f:3f:4a:be:3b:ed:0a:45:8f:ca:
                    1c:11:ed:7a:4c:88:f9:9d:63:69:31:9e:fa:9f:21:
                    43:fa:71:86:92:6a:31:ab:52:bf:a2:5d:ab:c7:36:
                    5d:25:58:58:02:af:8a:e4:9f:2a:ec:ce:44:bb:68:
                    02:25:9f:fe:3d:b7:9f:12:f3:5b:c2:4e:8c:6f:51:
                    0b:de:3c:82:94:f2:b7:b6:0b:7c:24:a9:59:2c:47:
                    a4:66:5c:01:3a:62:55:8e:b5:91:0d:93:6d:96:01:
                    13:7c:07:cf:e2:43:23:f4:71:46:ac:b5:bc:09:a6:
                    78:94:22:f6:e0:36:58:97:da:1d:46:a0:97:71:a7:
                    42:63:08:45:c2:f4:f6:de:16:31:2b:c4:00:c3:42:
                    87:cc:e2:4c:c9:2a:71:31:c7:76:1e:f5:5c:51:ad:
                    7e:00:e4:92:3a:34:68:8a:da:20:75:ca:97:17:a4:
                    e5:28:56:ba:79:9a:27:a1:0c:85:39:59:80:8c:3b:
                    c2:47:b4:82:99:94:7f:bd:8d:7f:33:54:87:86:96:
                    95:25:0e:db:fa:2b:ac:b7:c0:a6:18:cb:ae:87:ea:
                    e4:10:93:b4:d1:c3:b4:bd:01:88:24:36:34:5b:fd:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FB:A5:47:C4:C0:39:BF:64:C6:23:23:95:D7:EB:D8:A3:45:18:D2
            X509v3 Authority Key Identifier:
                keyid:DE:B0:33:B0:12:2C:25:F6:B0:0A:F1:C2:16:42:93:32:E0:D2:01:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3rAzsBIsJfawCvHCFkKTMuDSAe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181D2A/25A4A6B6B31F11F09D8A264DC4F9AE02/3rAzsBIsJfawCvHCFkKTMuDSAe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f5:2f:57:cc:dd:a8:09:39:19:15:38:5a:40:c8:6d:c0:c0:
         2a:01:6e:ac:85:6e:59:5f:bc:5a:34:a7:49:61:26:35:23:54:
         c5:5f:e4:a9:5d:b8:31:08:ec:7a:ea:56:79:ac:6c:54:9f:51:
         e4:7b:38:7d:d9:7d:c3:24:9d:a4:d2:93:ca:7a:e3:94:8f:b9:
         05:13:3d:78:96:1c:0e:f8:c0:f6:d6:06:8d:eb:35:5f:92:ae:
         9c:44:23:5e:f2:f5:3e:2c:4c:64:f8:d4:75:9f:d5:06:51:12:
         5c:82:19:67:b8:ab:e7:5d:ca:79:d0:be:11:6c:a6:78:a7:22:
         77:ef:91:67:4d:20:fd:c4:2e:b6:32:82:d7:67:62:a6:37:db:
         a9:95:ff:3a:ba:15:fb:bb:0a:c4:9b:d0:e1:fd:dc:44:f4:fb:
         e3:d5:65:ce:08:f9:34:85:06:7d:0c:4f:6e:a7:ee:d0:b9:3c:
         fe:58:67:c7:61:86:f7:c0:90:d7:c9:9d:6f:20:b2:f6:ee:ee:
         15:8e:66:03:12:9a:18:28:ca:80:06:26:ba:2a:47:89:26:72:
         02:a0:be:82:f1:0b:fb:62:17:94:15:08:db:1c:26:73:e3:17:
         8b:1e:bf:60:41:72:e2:f1:4e:37:0b:7e:21:3f:ae:ae:2b:e5:
         d3:02:39:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:42:37 2026 by rpki-client