Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
File:                     3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json)
Hash identifier:          zZgvcWU6N+pJm/wNHUhDDfiHJkQ4n4M6cEoM6L2Tz/M=
Subject key identifier:   53:6F:E9:44:F4:A2:F2:DC:29:7E:89:70:A1:E6:89:12:E5:56:20:33
Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3
Certificate issuer:       /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
Certificate serial:       2B34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
Manifest number:          2B34
Signing time:             Sun 20 Sep 2026 15:31:39 +0000
Manifest this update:     Sun 20 Sep 2026 15:31:38 +0000
Manifest next update:     Sun 27 Sep 2026 15:31:38 +0000
Files and hashes:         1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: A4KzfrvO/i4JvmcoVFpSMhHSbxLdRt2z2JnbNSZbqBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11060 (0x2b34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3
        Validity
            Not Before: Sep 20 15:31:38 2026 GMT
            Not After : Sep 27 15:31:38 2026 GMT
        Subject: CN=6aaffc5a-b060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:35:2a:4e:60:2f:ad:28:27:17:18:f1:ab:
                    ad:8a:f4:5d:db:b4:47:74:8e:6f:1e:b5:2a:f7:ec:
                    a5:fd:f9:5e:46:0b:ea:aa:f7:88:99:e4:3e:44:f8:
                    e6:96:43:cb:e2:44:a3:13:54:60:8e:fe:34:29:8c:
                    8d:7b:bc:cd:92:9d:bd:cf:e8:66:23:cc:a0:73:b9:
                    20:6d:7a:00:e3:00:8a:0e:1d:24:43:42:56:b8:7b:
                    85:38:96:a1:05:c2:1c:a0:69:29:5a:3a:57:57:4b:
                    81:20:7e:7c:87:d7:e6:e2:76:cb:85:b0:84:22:0d:
                    74:b8:aa:9a:fb:c4:52:1b:93:81:48:3a:9a:4f:52:
                    ad:d5:2b:01:56:c4:01:12:3f:85:d3:1b:1e:ce:61:
                    95:72:a8:ca:6b:cf:78:9b:cb:3d:64:1e:49:60:2d:
                    cd:cd:3f:6f:41:53:5c:88:fe:8a:dd:ae:40:f2:56:
                    a5:c0:80:19:01:c1:3c:10:4a:1c:af:a2:62:aa:a1:
                    1c:3c:16:13:1f:22:30:73:24:d5:34:a6:73:e7:4c:
                    a6:21:6a:9a:65:f0:f2:b8:5a:29:96:6c:45:f4:8f:
                    85:84:d0:e5:9f:0f:dc:33:3f:0b:03:c3:75:02:34:
                    1d:b1:25:37:29:aa:b3:06:7d:7a:8e:8e:43:cc:05:
                    da:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6F:E9:44:F4:A2:F2:DC:29:7E:89:70:A1:E6:89:12:E5:56:20:33
            X509v3 Authority Key Identifier:
                keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a2:4b:27:b4:1c:81:29:8b:38:50:8f:29:29:b6:af:c0:e8:
         bc:67:79:ca:47:dd:e5:8c:7c:fd:0f:a6:eb:42:64:97:3a:1e:
         cd:90:b6:74:8e:0c:d8:c1:35:64:0e:15:3d:c2:5e:b6:94:47:
         9c:7c:a2:25:ed:7a:4c:17:0a:1b:3e:45:8b:c9:d2:28:57:87:
         1d:49:2d:e2:74:f6:9b:0f:f7:bf:a3:de:95:c5:33:54:64:43:
         98:b5:48:59:2d:8c:1d:99:03:f7:d1:d1:e3:af:ee:b6:3a:4c:
         9d:55:64:5c:4f:a6:a6:a3:04:37:03:8c:d0:47:46:9a:66:d8:
         04:fd:f5:27:79:77:99:7b:2d:e0:e1:fe:d6:b7:51:d4:d0:e2:
         54:95:41:cd:4a:b2:3f:41:bf:33:0f:0e:45:42:83:cc:e6:f3:
         2e:f7:56:4a:7a:0a:8a:b3:b4:7c:c9:63:11:15:e9:15:a9:2b:
         47:c0:b2:b3:37:76:1e:b3:48:af:d9:fd:93:6d:57:df:6b:1b:
         dd:39:15:91:a4:e8:ba:ba:57:d9:f0:9a:fc:aa:2e:df:d4:e6:
         a3:e3:d2:1b:0f:16:c3:c7:ad:5b:9b:14:05:cc:ec:34:6d:86:
         83:0e:3d:04:51:37:07:40:e3:5a:a6:ac:cd:3d:10:a8:88:d7:
         12:80:6a:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB
QjE1NzVCQzMwHhcNMjYwOTIwMTUzMTM4WhcNMjYwOTI3MTUzMTM4WjAYMRYwFAYD
VQQDEw02YWFmZmM1YS1iMDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwg81Kk5gL60oJxcY8autivRd27RHdI5vHrUq9+yl/fleRgvqqveImeQ+RPjm
lkPL4kSjE1Rgjv40KYyNe7zNkp29z+hmI8ygc7kgbXoA4wCKDh0kQ0JWuHuFOJah
BcIcoGkpWjpXV0uBIH58h9fm4nbLhbCEIg10uKqa+8RSG5OBSDqaT1Kt1SsBVsQB
Ej+F0xsezmGVcqjKa894m8s9ZB5JYC3NzT9vQVNciP6K3a5A8lalwIAZAcE8EEoc
r6JiqqEcPBYTHyIwcyTVNKZz50ymIWqaZfDyuFoplmxF9I+FhNDlnw/cMz8LA8N1
AjQdsSU3KaqzBn16jo5DzAXanwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNv6UT0
ovLcKX6JcKHmiRLlViAzMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX
OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q
dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwKJLJ7QcgSmLOFCPKSm2r8DovGd5ykfd5Yx8/Q+m60JklzoezZC2dI4M2ME1
ZA4VPcJetpRHnHyiJe16TBcKGz5Fi8nSKFeHHUkt4nT2mw/3v6PelcUzVGRDmLVI
WS2MHZkD99HR46/utjpMnVVkXE+mpqMENwOM0EdGmmbYBP31J3l3mXst4OH+1rdR
1NDiVJVBzUqyP0G/Mw8ORUKDzObzLvdWSnoKirO0fMljERXpFakrR8Cyszd2HrNI
r9n9k21X32sb3TkVkaTourpX2fCa/Kou39Tmo+PSGw8Ww8etW5sUBczsNG2Ggw49
BFE3B0DjWqaszT0QqIjXEoBq+A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:03:07 2026 by rpki-client