Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
File:                     u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft (raw, json)
Hash identifier:          RmchrmnTthyB+weO84xwkW6Z8583hqH2VhN3aAzS3jk=
Subject key identifier:   19:A4:7E:70:4A:5B:2D:F3:09:60:E2:BA:B5:D5:EB:9A:87:48:37:1B
Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0
Certificate issuer:       /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0
Certificate serial:       01B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
Manifest number:          01A3
Signing time:             Sun 27 Sep 2026 04:42:14 +0000
Manifest this update:     Sun 27 Sep 2026 04:42:14 +0000
Manifest next update:     Sun 04 Oct 2026 04:42:14 +0000
Files and hashes:         1: u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl (hash: 9lrMqZIW7kKLO7XXRCxQVPWrwNztudUHaV19Rv+SGGc=)
                          2: 4D189DD4728311EFA9CECE43C4F9AE02.roa (hash: m3Jo8FCeaELT1I3nJBgJYkzF+itVMTxAlpjgG+4EtAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl
                          rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:42:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEE85, serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0
        Validity
            Not Before: Sep 27 04:42:14 2026 GMT
            Not After : Oct  4 04:42:14 2026 GMT
        Subject: CN=6ab89ea6-46d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dc:0a:81:b1:d1:84:fe:34:e7:3f:d4:91:cb:
                    3e:60:83:ac:dc:61:77:ae:a1:1b:e0:bc:58:e2:38:
                    5a:46:bb:16:52:0a:c9:54:3f:aa:b3:67:b3:ae:fd:
                    b4:51:3a:87:bf:21:2c:dd:0c:2a:1a:dc:39:87:0e:
                    35:4e:6c:01:58:75:13:f9:23:88:ec:a1:bc:57:f6:
                    2b:11:9a:56:d7:13:85:17:db:7d:be:9b:6c:15:85:
                    bb:86:c5:e7:16:8f:71:97:b9:eb:a2:3b:23:e4:11:
                    25:02:02:0f:aa:bc:ea:38:e9:66:7f:c3:fb:37:9e:
                    ee:4c:1e:a6:bc:14:0d:dc:ce:54:59:84:f7:a7:17:
                    dd:f7:85:f1:d2:9f:07:f3:50:4d:d5:6c:69:ae:89:
                    ca:71:ae:97:ef:9d:4b:23:31:72:6b:23:53:85:e6:
                    e3:b0:45:47:b2:24:e9:b4:a7:d5:34:4d:57:ed:3a:
                    98:9d:e0:b6:c9:bd:f9:44:a0:e4:b2:7b:63:fe:07:
                    9c:c3:b9:b0:f6:25:23:50:bc:2e:40:1c:34:26:2b:
                    b5:a0:9a:c8:99:b6:ee:cb:be:98:33:a9:b2:47:b1:
                    24:10:5b:20:a3:b3:50:a3:73:ec:8e:30:c1:a9:88:
                    13:33:eb:1b:e0:f7:be:8e:aa:17:04:71:d9:ad:ab:
                    67:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A4:7E:70:4A:5B:2D:F3:09:60:E2:BA:B5:D5:EB:9A:87:48:37:1B
            X509v3 Authority Key Identifier:
                keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b3:f7:37:f1:a9:b2:ca:bb:38:9e:21:7e:68:38:60:b3:1b:
         84:fa:1f:3e:ad:e7:24:bd:c8:ca:67:e9:f9:37:da:bd:41:04:
         4d:e1:45:77:bb:00:01:d7:ff:dc:ba:b9:ea:69:1f:98:6a:d3:
         14:65:a1:7c:41:c3:ea:10:2c:e0:76:e4:b4:12:89:4a:f0:35:
         46:6a:18:47:01:9b:ba:fb:f8:b6:7a:8b:ba:80:c4:a1:f6:65:
         8f:71:59:e7:dd:53:6d:a0:32:44:80:8c:f5:4a:a2:44:ed:a8:
         d9:73:30:1b:15:86:cf:4b:5f:55:27:33:f0:ce:19:4b:d0:44:
         c6:a7:0d:f7:ec:e4:eb:e7:bc:1c:c4:8f:d3:73:fe:29:84:76:
         69:aa:4f:73:da:98:cf:51:7b:70:06:2b:be:e3:7b:96:e7:3c:
         f4:ad:c6:6b:d0:5b:7a:a6:6a:a7:a7:86:17:c1:0e:07:31:89:
         2c:59:18:16:d2:be:f1:72:82:36:d0:65:b5:6f:e8:e9:89:04:
         77:3b:fc:3e:2a:f8:ed:ae:8b:e1:ac:ea:99:74:53:52:de:48:
         57:83:48:83:b5:14:06:6e:3e:ad:1b:7a:bb:f2:78:df:71:5e:
         09:ee:a1:2f:29:52:7f:11:ac:bb:27:74:d3:95:a4:e3:ac:f4:
         68:d7:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:50:53 2026 by rpki-client