Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
File:                     L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json)
Hash identifier:          0JYzmjzHqaWRFee0TYA11HFNuvIJ+4VSc2pdl6LPe0U=
Subject key identifier:   44:5A:1F:69:28:4C:ED:D6:1E:2D:B3:E7:FA:32:06:83:59:25:4C:85
Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1
Certificate issuer:       /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
Certificate serial:       058F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
Manifest number:          0581
Signing time:             Sun 20 Sep 2026 23:07:16 +0000
Manifest this update:     Sun 20 Sep 2026 23:07:15 +0000
Manifest next update:     Sun 27 Sep 2026 23:07:15 +0000
Files and hashes:         1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: M5P8SxREi5c8hTSqnMF9bJhRedQapx/Ng2CBzGaDP3E=)
                          2: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: NzLjTxl1M87dajrYUnMMeCTuzc6b9MgyWvlgrea5Itk=)
                          3: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl
                          rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1423 (0x58f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1
        Validity
            Not Before: Sep 20 23:07:15 2026 GMT
            Not After : Sep 27 23:07:15 2026 GMT
        Subject: CN=6ab06724-1930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:f9:da:91:74:25:08:fe:e6:67:3a:6a:5c:
                    b0:78:73:c7:12:8e:01:c8:2e:19:fc:7b:29:c6:ab:
                    34:6c:80:59:5e:9c:94:9c:32:aa:d3:33:30:fc:87:
                    cc:56:ac:4f:2e:f2:d3:48:a4:c3:52:20:fc:d5:9d:
                    72:2c:d1:b7:1b:fa:c9:e8:39:3a:e7:22:8e:ea:a6:
                    3a:2d:76:e6:9a:28:51:c4:d2:51:e6:1c:4c:cb:62:
                    e9:27:6b:85:e4:e7:56:ad:ed:de:97:57:eb:04:1c:
                    0f:d2:c9:4a:83:9c:a3:0c:c1:df:3c:83:0d:d3:23:
                    91:8e:a0:34:84:cf:77:b5:02:78:3e:34:4e:4d:f5:
                    a4:76:70:ea:cb:87:06:ed:0b:8a:78:69:35:c4:e3:
                    20:9d:08:99:8a:a5:92:46:56:aa:73:4c:ed:df:82:
                    84:ef:d1:96:dd:7d:f2:74:14:02:7f:fd:b9:79:4f:
                    a8:4a:ee:df:26:43:1f:55:b2:1d:08:35:cd:7f:17:
                    bd:6f:8a:0d:37:46:35:44:78:d9:87:e7:be:b6:00:
                    3b:8d:f5:c4:bc:c6:12:a8:0f:c6:54:28:08:75:67:
                    79:e0:48:84:b2:1a:f5:2b:e9:08:f7:35:14:32:02:
                    bb:96:fb:12:a4:f1:a9:06:c9:87:b1:ce:1c:9a:c6:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5A:1F:69:28:4C:ED:D6:1E:2D:B3:E7:FA:32:06:83:59:25:4C:85
            X509v3 Authority Key Identifier:
                keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:71:e4:8e:f4:98:bc:5c:40:e0:c7:73:85:ed:a9:02:79:77:
         f1:52:3c:a9:4c:b9:61:c3:3d:8a:48:aa:08:d2:69:1a:33:ac:
         00:c6:06:77:7e:1d:c4:d4:cb:93:4d:3d:31:a6:90:37:a8:e2:
         b7:06:b8:c0:5d:fb:f5:b1:b7:1d:39:27:cf:2d:98:c1:61:9a:
         eb:e2:8f:df:b4:91:72:c7:69:25:1e:98:1f:e2:cc:e3:31:7a:
         df:0a:37:7d:cd:2b:a0:0e:35:de:a7:5e:51:20:a8:e4:12:d4:
         08:b3:e3:b4:d4:6c:a4:d9:80:44:17:5e:4a:06:32:5c:a9:2d:
         ec:51:22:ce:2f:fe:91:cb:b8:ab:7d:25:3a:de:47:4a:b1:68:
         e0:33:e7:a9:14:f0:0c:2b:d8:8a:21:c8:3a:d7:5a:a2:6a:3d:
         c2:78:d7:2b:f2:b5:63:5c:2a:0a:30:e1:55:2b:e1:a7:52:10:
         64:6a:fe:82:6a:a8:e9:90:ec:41:f1:27:a7:ec:3a:19:97:62:
         90:9e:fa:08:f6:05:c9:b8:6c:1d:41:c2:35:b2:b7:d8:b2:76:
         6b:20:f6:23:8c:09:6e:ec:dc:1f:c2:07:a0:be:c3:ce:ab:57:
         88:29:b8:d8:7c:a3:37:d0:e7:b2:2a:81:a6:de:32:e7:3b:7c:
         af:e7:45:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:41:27 2026 by rpki-client