Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
File:                     3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json)
Hash identifier:          vB++M8w7/tPqsaoZK0Vn+MrzcMglMYCHzNgY7TkMP6I=
Subject key identifier:   39:20:72:DD:81:AC:E6:D0:3B:4D:CF:FC:9C:D9:E6:1A:54:F2:21:4B
Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E
Certificate issuer:       /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
Certificate serial:       0B37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
Manifest number:          0B2A
Signing time:             Wed 14 Oct 2026 19:29:13 +0000
Manifest this update:     Wed 14 Oct 2026 19:29:12 +0000
Manifest next update:     Wed 21 Oct 2026 19:29:12 +0000
Files and hashes:         1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: mN0PI2eoaock/tjKFP1DG+rAu328FhHgkN7BgTG0PTI=)
                          2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: P/kcrXkZBOpELFUVRD4sym1i0y2tovzreFKC78AoiZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl
                          rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 19:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
        Validity
            Not Before: Oct 14 19:29:12 2026 GMT
            Not After : Oct 21 19:29:12 2026 GMT
        Subject: CN=6acfd809-55b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:84:f0:93:f3:87:6e:35:be:12:b4:ca:8b:ed:
                    79:bb:ec:73:eb:02:70:ba:b4:37:0d:05:c7:ca:7f:
                    7e:5e:eb:5d:8e:ff:e6:23:41:8c:97:7f:fb:d7:83:
                    84:20:f5:c6:e5:83:1b:08:1b:fd:29:a0:ad:28:88:
                    3d:0c:11:b2:da:c1:d7:c5:0a:cf:40:8f:a5:2d:34:
                    ee:c1:bb:f0:1d:bd:36:d7:fe:23:bd:0f:1f:7b:d9:
                    c4:c1:fb:91:12:b0:b2:0b:e0:43:88:b4:1e:01:d6:
                    d7:8e:75:b2:fe:f2:08:ad:de:a3:4e:45:97:ca:5a:
                    1c:0a:a6:48:9d:7e:4d:b1:05:9a:59:12:f2:81:17:
                    05:d6:6f:e6:47:48:91:bc:23:b1:b8:6d:dc:bc:4d:
                    30:eb:e3:37:e3:6a:8e:e2:e5:d8:35:09:18:4a:06:
                    14:12:3a:1e:10:24:26:cc:12:b3:59:f1:37:e6:38:
                    02:a6:58:b6:62:5e:e0:56:f2:fe:6f:68:41:e1:24:
                    7a:52:15:ec:1e:de:0c:9f:9d:9c:50:09:0c:37:42:
                    45:69:05:89:29:25:3d:c9:9e:88:d4:9f:75:d1:a5:
                    fe:28:7a:38:c4:f8:4a:f9:1d:68:01:bb:26:b1:aa:
                    39:d5:51:bf:2b:37:cb:10:f8:59:a4:17:ec:20:80:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:20:72:DD:81:AC:E6:D0:3B:4D:CF:FC:9C:D9:E6:1A:54:F2:21:4B
            X509v3 Authority Key Identifier:
                keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:16:94:7c:f6:bc:f8:6c:b1:f2:50:97:bf:3a:d1:00:c9:3a:
         1f:98:22:80:e9:00:22:0a:cc:7c:35:c0:c5:da:94:3f:7d:ba:
         b1:12:cd:d8:48:94:9e:cb:c4:00:af:fb:4f:7b:b6:82:39:04:
         14:fa:d3:c1:83:ca:25:99:88:bf:bb:a4:9d:00:1b:59:7a:d7:
         9e:b5:24:dc:eb:90:36:ef:52:2a:30:3b:6a:f0:28:57:69:20:
         24:8b:bb:07:2f:ec:fb:79:22:60:86:55:e1:02:7f:cc:bf:4e:
         9e:22:6f:d1:8d:db:d7:0c:fd:10:1e:ea:7d:3e:ad:09:18:54:
         81:ca:90:92:af:1c:a3:6f:a9:bf:a7:6e:98:64:a1:08:ea:cf:
         9e:25:d9:24:9a:7a:4d:6c:21:59:6f:82:17:de:5d:57:30:46:
         d6:ab:4e:93:de:3c:05:a3:98:eb:b3:e1:a0:86:b3:4e:e2:07:
         01:4f:e6:7e:4d:0b:15:bd:9a:12:69:e5:69:d2:ba:43:04:ce:
         b9:75:84:2c:58:62:6d:cb:c5:ed:37:db:03:a7:2c:30:8b:c2:
         6e:4b:90:0a:f1:ff:db:55:f2:30:bb:8a:ef:67:43:82:54:4e:
         09:8b:19:04:10:5f:37:78:4a:be:2b:21:49:6d:fc:28:44:b0:
         87:04:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:02:08 2026 by rpki-client