Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft
File:                     3Hp9C5oBv4XomicX87lm2Z5F9-c.mft (raw, json)
Hash identifier:          B3xSP6dm8ZhTm0UCPhxFHqYQNBdL7k7Ez3KblzSnG5g=
Subject key identifier:   37:C4:07:6A:54:C8:22:67:4D:EF:BA:2C:E3:33:DC:42:8E:38:C1:30
Authority key identifier: DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7
Certificate issuer:       /CN=A9198A90/serialNumber=DC7A7D0B9A01BF85E89A2717F3B966D99E45F7E7
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft
Manifest number:          33
Signing time:             Sat 03 Oct 2026 09:27:55 +0000
Manifest this update:     Sat 03 Oct 2026 09:27:54 +0000
Manifest next update:     Sat 10 Oct 2026 09:27:54 +0000
Files and hashes:         1: 3Hp9C5oBv4XomicX87lm2Z5F9-c.crl (hash: 4GbrMGO99wziFYvFLBDBpVja089I8akbk0yT6Wc0gCs=)
                          2: 03C24D0680E611F1A15EA29461A30FBC.roa (hash: u7JbDFz3qAshRF4caNqctdr/Pu6iadoZfhpdKTIEvOY=)
                          3: 2E45B7DE80E611F1936909A061A30FBC.roa (hash: boIChwmQ8OLdUTt45ZhPNZwjS9L/s3K4KKRa2qyDCXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.crl
                          rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198A90, serialNumber=DC7A7D0B9A01BF85E89A2717F3B966D99E45F7E7
        Validity
            Not Before: Oct  3 09:27:54 2026 GMT
            Not After : Oct 10 09:27:54 2026 GMT
        Subject: CN=6ac0ca9a-f9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e1:0f:1b:2c:bf:e1:73:5e:c1:7e:a9:48:e6:
                    88:e6:10:60:40:0b:4d:c6:01:5c:0a:03:4d:6d:86:
                    68:26:44:df:3b:f9:0f:75:df:e1:06:dd:d7:1d:4a:
                    3f:35:3a:0a:85:26:35:ca:b8:d6:a4:9c:42:9c:73:
                    de:ef:56:5c:a7:93:6f:52:dd:9d:fc:96:b8:0d:57:
                    0e:14:43:2b:20:23:2b:02:95:00:50:58:f9:32:63:
                    0c:22:30:89:bc:0e:b9:7c:86:6a:60:08:5e:df:a8:
                    30:32:c3:f2:00:51:04:88:91:b3:d0:b8:51:5d:50:
                    ac:f3:1c:99:a6:b3:bc:bf:3f:60:c0:70:50:ef:27:
                    3a:6b:de:14:64:53:58:e2:e2:4b:50:76:79:a3:45:
                    6e:cb:33:a6:36:a1:3f:c6:c8:b9:5e:07:d6:47:c2:
                    6f:a2:5a:40:e3:44:7c:0d:e8:74:fe:0a:8c:f9:d8:
                    6b:b8:d8:9d:5c:fb:a0:ac:00:3d:f9:a3:cd:13:e7:
                    cf:0e:e3:27:6c:5d:58:d3:7d:c5:76:ca:04:3a:b1:
                    cb:a0:cd:73:60:90:ef:bb:24:b6:c2:8d:c6:9c:76:
                    52:4e:e0:ce:23:ce:54:40:54:3d:1c:f4:ad:40:d4:
                    ed:e4:08:f6:3c:20:47:07:c6:52:81:80:ee:8b:67:
                    f6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C4:07:6A:54:C8:22:67:4D:EF:BA:2C:E3:33:DC:42:8E:38:C1:30
            X509v3 Authority Key Identifier:
                keyid:DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6f:a4:a6:83:93:e5:14:0c:46:5c:5c:a9:e2:2c:2a:45:87:
         61:bb:1a:95:39:ae:cf:1c:03:d2:2e:d6:42:cd:57:a5:56:0b:
         33:82:b0:95:e1:d7:78:b3:53:41:be:61:73:40:ec:6c:f3:a4:
         98:7e:63:72:ca:1b:fd:4d:87:31:f9:a4:e5:c8:d9:b0:c5:5f:
         11:59:aa:57:26:68:2f:1c:7b:ce:d5:27:09:a3:f0:c0:32:db:
         d3:de:4d:af:d0:a5:5c:be:a8:e8:38:93:3b:b3:d4:2d:cf:ac:
         55:3c:6b:d8:ad:36:dc:18:3e:90:22:24:de:06:1d:19:d9:32:
         7a:2e:07:c0:d7:21:64:fb:57:3e:72:a0:54:12:9e:eb:dc:0a:
         82:a8:6e:c8:24:0e:5f:f3:b7:74:f9:11:22:0c:4d:36:0c:10:
         1a:c6:6c:54:93:fc:e9:d6:66:48:46:26:9e:a9:09:1e:16:48:
         33:0f:6a:0b:8d:06:e6:9f:50:66:63:87:44:21:d0:9b:0e:d0:
         4b:30:66:c2:41:d2:b9:38:0d:27:88:1a:36:16:24:81:f7:15:
         bf:7e:f3:ed:d2:96:fa:85:e1:ab:30:47:17:e4:0d:79:28:79:
         58:8b:b1:27:1d:e7:97:c7:e8:2d:30:9f:d3:91:8d:0d:bf:7c:
         52:84:d3:ae
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OEE5MDExMC8GA1UEBRMoREM3QTdEMEI5QTAxQkY4NUU4OUEyNzE3RjNCOTY2RDk5
RTQ1RjdFNzAeFw0yNjEwMDMwOTI3NTRaFw0yNjEwMTAwOTI3NTRaMBgxFjAUBgNV
BAMTDTZhYzBjYTlhLWY5YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJ4Q8bLL/hc17BfqlI5ojmEGBAC03GAVwKA01thmgmRN87+Q913+EG3dcdSj81
OgqFJjXKuNaknEKcc97vVlynk29S3Z38lrgNVw4UQysgIysClQBQWPkyYwwiMIm8
Drl8hmpgCF7fqDAyw/IAUQSIkbPQuFFdUKzzHJmms7y/P2DAcFDvJzpr3hRkU1ji
4ktQdnmjRW7LM6Y2oT/GyLleB9ZHwm+iWkDjRHwN6HT+Coz52Gu42J1c+6CsAD35
o80T588O4ydsXVjTfcV2ygQ6scugzXNgkO+7JLbCjcacdlJO4M4jzlRAVD0c9K1A
1O3kCPY8IEcHxlKBgO6LZ/Z3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUN8QHalTI
ImdN77os4zPcQo44wTAwHwYDVR0jBBgwFoAU3Hp9C5oBv4XomicX87lm2Z5F9+cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4QTkwLzREODM5NTRDN0I5
MzExRjFBNkU3NkQxOTZGQTMwRkJDLzNIcDlDNW9CdjRYb21pY1g4N2xtMlo1Rjkt
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvM0hwOUM1b0J2NFhvbWljWDg3bG0yWjVGOS1jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4
QTkwLzREODM5NTRDN0I5MzExRjFBNkU3NkQxOTZGQTMwRkJDLzNIcDlDNW9CdjRY
b21pY1g4N2xtMlo1RjktYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBMb6Smg5PlFAxGXFyp4iwqRYdhuxqVOa7PHAPSLtZCzVelVgszgrCV4dd4s1NB
vmFzQOxs86SYfmNyyhv9TYcx+aTlyNmwxV8RWapXJmgvHHvO1ScJo/DAMtvT3k2v
0KVcvqjoOJM7s9Qtz6xVPGvYrTbcGD6QIiTeBh0Z2TJ6LgfA1yFk+1c+cqBUEp7r
3AqCqG7IJA5f87d0+REiDE02DBAaxmxUk/zp1mZIRiaeqQkeFkgzD2oLjQbmn1Bm
Y4dEIdCbDtBLMGbCQdK5OA0niBo2FiSB9xW/fvPt0pb6heGrMEcX5A15KHlYi7En
HeeXx+gtMJ/TkY0Nv3xShNOu
-----END CERTIFICATE-----
Generated at Sun Oct 4 01:34:50 2026 by rpki-client