Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
File:                     3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft (raw, json)
Hash identifier:          arwxx1GknxLSkX0+fl8cdG0jobwPoluB15sLImt0dnI=
Subject key identifier:   29:08:47:48:16:D0:E7:32:82:93:27:49:72:D5:E9:D9:DB:B6:7E:0B
Authority key identifier: DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39
Certificate issuer:       /CN=A91D2A10/serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
Manifest number:          63
Signing time:             Sun 27 Sep 2026 08:36:40 +0000
Manifest this update:     Sun 27 Sep 2026 08:36:40 +0000
Manifest next update:     Sun 04 Oct 2026 08:36:40 +0000
Files and hashes:         1: 3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl (hash: QyA/2odrJBi7gNafga8kgmqrbcrd6K6RF1aTVHpkr3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl
                          rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2A10, serialNumber=DDAEAA53402B70A94F737C1B0D5D9501F829F039
        Validity
            Not Before: Sep 27 08:36:40 2026 GMT
            Not After : Oct  4 08:36:40 2026 GMT
        Subject: CN=6ab8d598-f93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:08:8c:8c:2a:94:1c:3f:8b:48:b9:a1:5a:
                    fa:5e:35:f3:89:1e:37:0a:9a:42:0d:38:19:82:b3:
                    ec:90:38:02:f9:90:62:02:a2:2d:27:8f:77:b7:2f:
                    28:77:b3:04:aa:95:9e:cf:9c:0e:0b:e0:4a:e9:8b:
                    ec:e8:da:1e:a6:6b:ae:a4:41:27:a4:84:bd:ab:f8:
                    dd:9c:32:8a:b9:4b:57:4b:95:6f:26:3c:d3:6a:91:
                    f2:01:95:41:69:bb:4e:e9:c0:95:ad:85:d1:05:66:
                    26:33:3a:37:f1:48:bb:89:79:65:cd:27:05:19:8a:
                    8f:4e:4c:6c:b1:d8:3f:ae:84:5a:48:1e:1f:89:50:
                    fd:11:8d:3f:ee:7e:28:ef:56:a7:83:c6:20:46:b3:
                    3e:c8:51:ee:8a:fc:47:fb:4c:4a:04:59:2d:0c:a3:
                    05:f1:64:cd:f0:25:33:c3:36:b6:7f:a9:60:7f:ca:
                    8b:8e:ff:b5:01:38:11:09:27:97:b9:e2:51:fd:66:
                    72:82:03:1b:a2:df:fc:1e:0c:b6:2d:e8:09:fd:80:
                    dd:4e:4f:91:3e:66:2d:a2:dc:fb:b5:53:02:e1:41:
                    57:35:f0:c5:1f:e9:93:32:f3:7a:c4:cc:69:3c:9d:
                    24:39:7e:8e:da:16:a6:2a:53:e5:d2:5d:de:dc:db:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:08:47:48:16:D0:E7:32:82:93:27:49:72:D5:E9:D9:DB:B6:7E:0B
            X509v3 Authority Key Identifier:
                keyid:DD:AE:AA:53:40:2B:70:A9:4F:73:7C:1B:0D:5D:95:01:F8:29:F0:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A10/E83325EA232C11F193A4D832A3833773/3a6qU0ArcKlPc3wbDV2VAfgp8Dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d2:08:7b:fc:ec:ae:0e:89:78:5a:63:8f:51:8c:1b:39:8f:
         37:e0:87:e2:8d:8b:ce:48:44:ea:05:e7:30:ea:7a:6c:14:4d:
         57:41:95:7e:b9:2d:bf:71:e2:95:38:ee:da:e0:f5:91:53:8a:
         e3:be:44:55:50:a5:80:fe:57:aa:71:2d:cf:95:f1:84:85:de:
         8c:b8:db:b9:21:c7:6a:ea:2b:cf:f5:5f:39:ea:d8:aa:f9:fe:
         25:99:fc:a2:ac:9a:9b:19:d5:c6:c8:ed:65:43:7f:2b:e4:c1:
         22:2f:90:19:18:3f:c3:04:49:a7:25:5f:80:4b:f7:d3:3e:09:
         1e:47:a0:99:ff:c1:cc:45:c8:e5:40:20:85:67:e8:21:ab:09:
         00:09:53:85:74:d5:a0:a1:30:6a:aa:0e:4c:75:a6:87:44:68:
         65:82:62:96:8c:eb:1c:b2:d8:3a:bc:cd:21:5a:31:7a:b5:f6:
         d6:3d:5e:d2:60:04:43:2f:32:68:09:80:4a:61:03:d7:85:a2:
         26:b3:60:82:18:d2:80:87:3f:80:a6:8e:0f:94:b4:07:7d:ca:
         71:e9:9a:4b:28:df:17:62:1d:65:83:67:13:0e:82:43:5a:5b:
         48:1a:d4:62:14:c9:3d:bd:ea:e6:79:de:4f:cc:4e:1f:7e:49:
         1e:7a:f6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:31:03 2026 by rpki-client