Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
File:                     s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft (raw, json)
Hash identifier:          +m3F0sKFA8wpxMU0si4T8c45n+ttdtnwlcgtno1FxXY=
Subject key identifier:   2D:E4:DA:E8:07:CC:72:AE:36:92:32:01:5C:FC:0C:B2:58:D0:3B:A6
Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25
Certificate issuer:       /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
Certificate serial:       389E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
Manifest number:          3724
Signing time:             Mon 28 Sep 2026 14:25:43 +0000
Manifest this update:     Mon 28 Sep 2026 14:25:42 +0000
Manifest next update:     Mon 05 Oct 2026 14:25:42 +0000
Files and hashes:         1: s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl (hash: kZvSr9qG4ls4nRWJkyUNGLCZUsgEEzD6DX9Zb1MzBB8=)
                          2: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (hash: KFI2tWHfw3kppvCKmuDyoJI/TXZwNEgYE/dBKADg924=)
                          3: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (hash: 548W6O4jy2t4m978fP7/vkFNV7StaszXL5cUkqOrlsQ=)
                          4: 18F4FD76918111EC93DCA42AC4F9AE02.roa (hash: aZB+rnqYjRl4Uc+17dt2ByemLhQ+5bYKCdCl9y70GQM=)
                          5: 160B219870BA11E99E0F6D2DC4F9AE02.roa (hash: 6MJI5nd76wUg6mIJiXKwgcaYmVbyO2X4VHI5tQqt2gM=)
                          6: 26A143C291EB11EF8A024083C4F9AE02.roa (hash: qOuOZrrZglkih59X/Pjz7efqStftFhfdFn50wlzJXt4=)
                          7: 305A13D6C9F211F0ABA27932C4F9AE02.roa (hash: NrPp83eADET8bdfQFh9hNsWD9EoYo/UsIxIfM+Xp3F8=)
                          8: B36EA83C70B111E98CFFF710C4F9AE02.roa (hash: 2nquH/Th3aV+FpaTguBv+jy8p2aXbOfhDSjXTwmNigg=)
                          9: B6704306C9F111F08975B813C4F9AE02.roa (hash: QnDSYmh9AS+vc7/gM3qgxQlZaNKWdqAp8+Ehbtb0lnc=)
                          10: B0EB27B470B811E9B32F6726C4F9AE02.roa (hash: z4MfCyr+jDttoP5VW5Vb0l643tPHIibVvGJ7ZyGfs8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl
                          rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 14:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14494 (0x389e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625
        Validity
            Not Before: Sep 28 14:25:42 2026 GMT
            Not After : Oct  5 14:25:42 2026 GMT
        Subject: CN=6aba78e7-b4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:53:51:83:df:ef:4b:71:f7:d1:6a:9c:8c:
                    ca:e4:78:99:cc:30:fa:16:75:f7:f8:4b:ee:6c:0e:
                    08:4c:41:ce:e8:82:fd:8d:c2:48:70:6f:62:3f:cb:
                    52:dc:9d:fc:02:60:fa:7f:b4:3e:e5:2f:f8:e8:f5:
                    ab:76:a1:3d:a5:85:f7:b7:37:f2:13:d0:3c:b6:3c:
                    38:da:30:3e:55:21:4a:68:54:12:9f:07:40:73:3a:
                    74:14:25:5e:a8:95:ee:e2:b6:4a:56:ef:60:15:8c:
                    b3:32:47:b3:26:e5:35:68:c0:b7:19:b6:09:6d:07:
                    8d:72:a5:34:e1:ad:b1:a6:da:49:ca:77:a2:44:6d:
                    f8:e4:ea:3f:a6:1c:82:08:19:c2:d5:63:a0:d6:30:
                    b2:c9:f4:cf:35:69:e9:b8:6f:1f:05:b5:27:e6:61:
                    f8:f0:4f:95:e0:1a:d8:f7:7d:b2:ea:91:0f:ad:0a:
                    76:88:cc:5e:a4:82:4c:b1:f8:9a:cd:97:86:0f:f1:
                    79:17:d2:fa:92:26:ea:4f:1f:2a:8c:27:9d:76:e0:
                    13:f2:b2:9b:9e:e4:87:ca:78:f9:0a:c0:e0:27:3e:
                    f2:78:de:0f:02:79:52:29:40:ac:ad:17:d7:e0:a9:
                    ed:ba:31:0f:ce:46:10:d7:65:86:19:f1:e4:67:6d:
                    f4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E4:DA:E8:07:CC:72:AE:36:92:32:01:5C:FC:0C:B2:58:D0:3B:A6
            X509v3 Authority Key Identifier:
                keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:a9:84:2c:95:d3:37:00:94:ac:30:88:d5:41:80:14:5b:7a:
         82:49:a9:19:a9:9f:db:e8:14:6c:ee:51:95:10:f8:96:bf:1f:
         5e:36:25:8a:2f:38:de:02:fd:14:22:ad:d1:3d:33:d7:9b:c4:
         4c:9a:60:87:97:42:6b:00:7e:a0:51:ad:84:66:41:5f:5f:f1:
         78:ac:ab:59:ed:87:ef:8a:d1:04:ad:9e:22:db:f7:7d:f8:2f:
         f7:3a:d0:e3:ee:9b:d8:7e:8e:85:d8:b9:ff:96:c3:58:d5:92:
         26:69:6c:ee:dd:b4:41:d2:17:d1:51:4c:ce:3a:83:d6:b5:c8:
         6e:01:46:8f:51:a6:56:ee:02:06:72:79:b1:71:f9:aa:6d:56:
         68:98:a4:cc:0e:04:d4:fd:b0:fd:19:e8:81:3c:c4:4e:73:ca:
         4c:03:6b:ec:a8:18:d4:4e:39:a3:fc:39:1f:f5:d0:9a:3e:60:
         d6:52:02:c2:ef:bf:03:ed:c6:8a:3b:34:cc:22:89:48:55:7d:
         ff:e2:bd:69:d4:37:d4:aa:d0:b6:06:fd:40:fb:5d:4a:98:64:
         30:7e:93:c9:43:23:09:32:42:98:df:97:ab:56:46:8b:4d:b2:
         a2:76:c3:db:43:ba:cc:00:c9:d0:f1:5c:99:9b:7b:1c:f3:7b:
         bb:c6:53:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:39:15 2026 by rpki-client