Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft
File:                     MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft (raw, json)
Hash identifier:          jVC1Va20TTEDkwzvR0avJbv/7pOk7i1ddxa3sp6ukLs=
Subject key identifier:   0C:00:CC:A6:AE:0F:57:5B:38:95:8D:90:7A:CD:DC:1F:85:FA:8C:C9
Authority key identifier: 32:70:F3:AC:D9:71:EE:DF:84:61:75:48:F7:2E:51:E2:2A:50:3C:F8
Certificate issuer:       /CN=A91DA023/serialNumber=3270F3ACD971EEDF84617548F72E51E22A503CF8
Certificate serial:       3582
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft
Manifest number:          3582
Signing time:             Thu 08 Oct 2026 15:03:58 +0000
Manifest this update:     Thu 08 Oct 2026 15:03:57 +0000
Manifest next update:     Thu 15 Oct 2026 15:03:57 +0000
Files and hashes:         1: MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl (hash: 5GAZiL47jzrP9cLi5BlRy1vJ8EHi7PCsmamLmP2GOdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl
                          rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 15:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13698 (0x3582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA023, serialNumber=3270F3ACD971EEDF84617548F72E51E22A503CF8
        Validity
            Not Before: Oct  8 15:03:57 2026 GMT
            Not After : Oct 15 15:03:57 2026 GMT
        Subject: CN=6ac7b0dd-3ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:d2:58:f3:d1:ea:d2:99:7b:e5:db:23:fb:
                    30:d9:07:de:86:3b:3c:e7:82:af:95:0b:f2:a8:21:
                    53:15:5e:df:7f:dd:c1:98:e6:74:e6:8d:18:dc:6b:
                    96:82:58:80:52:fd:f1:40:4e:55:d9:38:c1:a1:32:
                    45:10:dd:b8:15:0e:75:ba:44:ee:8b:f8:81:38:4d:
                    fb:2e:20:80:2b:2d:83:3e:af:8a:07:63:21:ec:9f:
                    b8:ae:f7:24:51:dc:80:61:ed:7b:5a:30:a9:98:9a:
                    c0:66:0b:3c:13:44:73:82:40:34:c3:2d:ff:2a:1e:
                    d2:10:17:a7:c1:df:bb:a3:fd:80:f0:15:f9:1d:aa:
                    b9:5f:7e:b2:13:9c:fd:82:96:6a:8a:50:40:16:65:
                    99:87:cf:d9:cc:75:a0:2c:4b:a5:89:f2:54:d1:d3:
                    66:cd:59:ee:4e:f6:b7:bc:31:58:df:ed:01:b6:1a:
                    70:c5:92:9d:77:cb:4a:1d:80:ab:4d:f6:2b:b6:05:
                    1d:a5:31:a4:38:b9:ba:26:ae:32:74:9a:8b:41:41:
                    1c:a3:dd:0a:aa:5a:02:94:ec:00:33:59:53:d6:51:
                    e5:8d:83:57:72:d2:f4:15:2e:13:80:69:61:be:32:
                    cb:0d:a5:73:68:d1:f7:ad:b7:de:51:94:98:9e:51:
                    57:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:00:CC:A6:AE:0F:57:5B:38:95:8D:90:7A:CD:DC:1F:85:FA:8C:C9
            X509v3 Authority Key Identifier:
                keyid:32:70:F3:AC:D9:71:EE:DF:84:61:75:48:F7:2E:51:E2:2A:50:3C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA023/6F172DF01DA011E2A1C3A69108B02CD2/MnDzrNlx7t-EYXVI9y5R4ipQPPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:40:f1:62:87:7c:27:a8:99:bc:66:46:f8:7a:49:6a:e1:1f:
         11:17:d8:d9:de:8e:12:82:c4:4d:85:46:87:94:90:bb:0a:38:
         18:50:4e:58:15:8a:86:f8:cb:a4:9d:36:f4:cd:69:58:82:49:
         cc:a2:d6:c3:cf:9f:f9:95:31:1b:26:17:f5:f0:5d:06:04:17:
         72:8b:c1:a7:e2:7a:fc:95:58:ac:3b:97:8f:e2:cd:fc:b9:7c:
         4c:8a:29:72:62:48:05:a6:85:96:fe:e4:24:17:b7:bc:76:49:
         e3:99:24:f8:a1:61:7a:c3:ed:95:a5:10:ba:74:da:07:8c:78:
         6b:3c:91:40:09:16:cb:eb:ca:86:d8:17:8d:14:26:1c:53:f1:
         af:51:ee:b8:b2:cd:83:ae:7a:17:0e:80:d9:0a:81:00:04:ae:
         a0:59:86:d7:1b:42:c2:da:f4:d4:cf:42:d3:8a:40:8a:e6:6a:
         2d:e3:2d:46:3f:79:14:29:7e:4a:4e:0f:9a:e2:2a:d0:b8:98:
         e6:9e:cd:10:0c:aa:bf:65:ed:1c:0c:78:fa:3d:de:dd:3c:27:
         55:c5:42:44:bc:52:d1:12:35:98:8b:36:a3:24:c4:8e:af:c9:
         a7:19:0b:99:29:a8:96:74:37:6c:ce:44:bd:ad:09:79:39:bc:
         57:04:ae:cd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REEwMjMxMTAvBgNVBAUTKDMyNzBGM0FDRDk3MUVFREY4NDYxNzU0OEY3MkU1MUUy
MkE1MDNDRjgwHhcNMjYxMDA4MTUwMzU3WhcNMjYxMDE1MTUwMzU3WjAYMRYwFAYD
VQQDEw02YWM3YjBkZC0zY2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq0PSWPPR6tKZe+XbI/sw2Qfehjs854KvlQvyqCFTFV7ff93BmOZ05o0Y3GuW
gliAUv3xQE5V2TjBoTJFEN24FQ51ukTui/iBOE37LiCAKy2DPq+KB2Mh7J+4rvck
UdyAYe17WjCpmJrAZgs8E0RzgkA0wy3/Kh7SEBenwd+7o/2A8BX5Haq5X36yE5z9
gpZqilBAFmWZh8/ZzHWgLEulifJU0dNmzVnuTva3vDFY3+0BthpwxZKdd8tKHYCr
TfYrtgUdpTGkOLm6Jq4ydJqLQUEco90KqloClOwAM1lT1lHljYNXctL0FS4TgGlh
vjLLDaVzaNH3rbfeUZSYnlFXEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwAzKau
D1dbOJWNkHrN3B+F+ozJMB8GA1UdIwQYMBaAFDJw86zZce7fhGF1SPcuUeIqUDz4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMy82RjE3MkRGMDFE
QTAxMUUyQTFDM0E2OTEwOEIwMkNEMi9NbkR6ck5seDd0LUVZWFZJOXk1UjRpcFFQ
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01uRHpyTmx4N3QtRVlYVkk5eTVSNGlwUVBQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTAyMy82RjE3MkRGMDFEQTAxMUUyQTFDM0E2OTEwOEIwMkNEMi9NbkR6ck5seDd0
LUVZWFZJOXk1UjRpcFFQUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABkDxYod8J6iZvGZG+HpJauEfERfY2d6OEoLETYVGh5SQuwo4GFBOWBWKhvjL
pJ029M1pWIJJzKLWw8+f+ZUxGyYX9fBdBgQXcovBp+J6/JVYrDuXj+LN/Ll8TIop
cmJIBaaFlv7kJBe3vHZJ45kk+KFhesPtlaUQunTaB4x4azyRQAkWy+vKhtgXjRQm
HFPxr1HuuLLNg656Fw6A2QqBAASuoFmG1xtCwtr01M9C04pAiuZqLeMtRj95FCl+
Sk4PmuIq0LiY5p7NEAyqv2XtHAx4+j3e3TwnVcVCRLxS0RI1mIs2oyTEjq/JpxkL
mSmolnQ3bM5Eva0JeTm8VwSuzQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 04:15:28 2026 by rpki-client