Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
File:                     3vCat-atSADQZ9cCq_MCJincVuA.mft (raw, json)
Hash identifier:          rPATAvbb/XwI+WyEEBMGo5QonmrR6+6yQq9bd6ujPsw=
Subject key identifier:   87:74:D8:8C:62:81:E2:74:D9:8F:FF:61:53:81:41:2E:40:D1:E2:F0
Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0
Certificate issuer:       /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
Manifest number:          01E7
Signing time:             Sun 19 Apr 2026 03:04:07 +0000
Manifest this update:     Sun 19 Apr 2026 03:04:07 +0000
Manifest next update:     Sun 26 Apr 2026 03:04:07 +0000
Files and hashes:         1: 3vCat-atSADQZ9cCq_MCJincVuA.crl (hash: eyBkjdx0FJU17WtIV+EfTCu4vIHNEYDcfek4nqyKn7M=)
                          2: 2B7210D251F211EEA079D567C4F9AE02.roa (hash: 3OfQkZDecj37kpIJDpaiVFI+t0R7obLrmLE1YM1JJH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 03:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
        Validity
            Not Before: Apr 19 03:04:07 2026 GMT
            Not After : Apr 26 03:04:07 2026 GMT
        Subject: CN=69e44627-36c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:ab:dd:66:f3:a1:5c:09:7e:63:82:4f:2b:
                    da:51:00:98:92:c7:34:3f:cb:46:6c:89:3a:3f:79:
                    e3:6c:0c:b0:b1:6a:77:f9:fd:73:a4:f8:3f:c1:e9:
                    85:8d:73:34:94:37:b8:b6:aa:12:b6:2a:23:91:a9:
                    01:a5:b8:85:a3:59:e1:29:47:bd:1e:7a:2e:4c:75:
                    e6:b9:54:52:1e:f8:7b:96:79:16:9e:6f:fd:42:56:
                    a8:d5:90:70:1a:4d:4f:b0:35:52:ab:79:66:a2:8d:
                    85:4c:7d:db:46:ed:93:7a:de:1d:3c:4b:a2:2a:98:
                    aa:08:68:35:92:10:7a:5f:87:bc:8b:93:f9:3c:eb:
                    20:1f:f2:80:63:69:0b:1e:d7:a5:a5:79:26:ee:48:
                    a5:26:14:61:c5:60:b3:c4:0f:b2:e2:23:de:12:96:
                    f5:b0:3a:79:f8:d3:0c:54:43:31:e2:3a:2c:c7:80:
                    77:a2:97:ef:70:7c:27:63:cf:13:b1:f5:ba:e3:3e:
                    b9:c0:a1:e8:f8:1a:fb:f1:8e:bf:3e:25:8b:c4:35:
                    11:a8:ae:84:a4:85:63:50:88:89:cb:7b:c8:1e:09:
                    b0:6b:57:d5:0f:b9:b0:74:19:05:e0:6f:b9:09:5b:
                    b4:09:bf:87:de:dd:a9:53:2b:bb:a6:f2:af:7a:2e:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:74:D8:8C:62:81:E2:74:D9:8F:FF:61:53:81:41:2E:40:D1:E2:F0
            X509v3 Authority Key Identifier:
                keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d1:fc:4b:48:66:96:80:99:69:47:32:51:76:76:39:83:a6:
         9e:8b:10:d5:97:57:3a:d7:a3:1b:03:eb:23:55:31:67:2a:a4:
         ff:4b:71:ee:68:1f:56:8f:02:2a:77:df:81:c8:59:01:18:34:
         4a:3b:fa:60:28:b3:8d:4a:ac:0b:29:73:fd:4a:2b:c1:41:d5:
         2f:33:0f:f2:bd:52:b0:33:0e:b3:8e:de:f7:f8:ed:b3:4f:1b:
         01:c5:eb:0a:af:64:94:8c:cb:6d:af:9d:7b:98:74:c6:d5:7a:
         31:d4:34:27:dc:3d:21:e2:59:b9:88:9d:29:dc:76:55:b8:a7:
         a9:cc:73:48:3c:3e:94:80:c2:c1:55:6f:00:d8:b5:36:18:78:
         d5:a7:c4:cf:a3:55:28:1e:db:b2:cb:52:d4:a0:9e:3d:a1:73:
         38:82:58:15:09:d2:0e:f4:68:f3:88:a1:ed:11:13:a0:7a:f6:
         16:ba:e3:2e:59:a6:a8:e9:c0:44:be:26:ae:e6:d5:81:a8:0e:
         e6:62:5f:b2:6d:03:6a:1a:87:a3:a5:9f:a6:f2:bf:4b:38:3d:
         32:e4:09:bb:e0:a1:57:e1:dc:a6:3c:c5:5d:84:66:5b:1e:c0:
         91:3b:97:c0:26:3e:f9:7a:a7:dd:be:73:34:2c:b7:0c:c9:d8:
         38:0e:8c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:01:42 2026 by rpki-client