Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft
File:                     3g51A-ABhslzWN1dtBsa6o1bt98.mft (raw, json)
Hash identifier:          UCHMqhLNuWnrRSpm9dBAf2AmktnmEXnIxaW480BCznE=
Subject key identifier:   CC:F8:4B:C3:D7:7C:59:AB:80:A5:6A:C3:A7:2D:E8:51:53:EE:FD:C1
Authority key identifier: DE:0E:75:03:E0:01:86:C9:73:58:DD:5D:B4:1B:1A:EA:8D:5B:B7:DF
Certificate issuer:       /CN=A91DEF3E/serialNumber=DE0E7503E00186C97358DD5DB41B1AEA8D5BB7DF
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3g51A-ABhslzWN1dtBsa6o1bt98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft
Manifest number:          05
Signing time:             Sun 27 Sep 2026 09:51:44 +0000
Manifest this update:     Sun 27 Sep 2026 09:51:43 +0000
Manifest next update:     Sun 04 Oct 2026 09:51:43 +0000
Files and hashes:         1: 3g51A-ABhslzWN1dtBsa6o1bt98.crl (hash: bhx3kbT0l7iNlb5RcRcnRwSqYrOvff1k+HupWInIo8g=)
                          2: 16F2E8B4B5D311F18B3897F34511F970.roa (hash: aPzgvPWBiEMb+aOplX7bKEWIyKEhhVZj+xQvU3c5hig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.crl
                          rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3g51A-ABhslzWN1dtBsa6o1bt98.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEF3E, serialNumber=DE0E7503E00186C97358DD5DB41B1AEA8D5BB7DF
        Validity
            Not Before: Sep 27 09:51:43 2026 GMT
            Not After : Oct  4 09:51:43 2026 GMT
        Subject: CN=6ab8e730-c3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:11:82:7c:10:cc:ee:f4:2d:5e:b0:15:5d:
                    a7:1c:be:54:bc:6c:5d:dd:53:e5:2a:8b:05:1b:9d:
                    18:29:b3:a4:5e:2b:db:82:7f:72:e5:90:6b:de:a8:
                    e7:5c:31:fa:31:a5:35:97:2b:59:c7:fa:37:64:62:
                    ee:c7:6f:77:38:33:e5:87:61:a4:2a:65:69:69:00:
                    6a:85:2e:2d:ea:95:c2:d9:0b:95:68:6d:86:5c:3b:
                    f1:f1:48:1f:3d:8e:7a:5a:1d:1b:2f:c4:1e:f2:2e:
                    5d:03:38:2c:8c:bf:f4:92:d4:99:e1:17:80:30:c6:
                    31:ad:02:6e:2e:58:ba:eb:a6:0b:35:47:bd:30:23:
                    f6:4a:da:8d:e7:c9:60:2d:c5:9c:f0:73:1c:75:82:
                    4c:23:e7:d5:3b:46:de:05:81:58:a9:fb:06:29:a2:
                    5d:d9:61:e2:5c:a6:a9:78:f7:f9:62:e8:a9:8b:80:
                    56:9a:e4:b4:b8:4e:9e:be:dc:85:16:b0:7b:7e:75:
                    d9:83:ac:27:3e:11:ea:b3:b8:31:68:37:4e:a1:40:
                    ad:1d:30:fb:8b:1e:ca:6b:11:a3:46:0a:f5:21:7e:
                    98:ff:61:e0:68:c9:f6:83:c5:14:aa:24:da:db:60:
                    7c:ea:23:35:43:5e:b4:b7:74:ff:89:42:58:74:bc:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F8:4B:C3:D7:7C:59:AB:80:A5:6A:C3:A7:2D:E8:51:53:EE:FD:C1
            X509v3 Authority Key Identifier:
                keyid:DE:0E:75:03:E0:01:86:C9:73:58:DD:5D:B4:1B:1A:EA:8D:5B:B7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3g51A-ABhslzWN1dtBsa6o1bt98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF3E/CEC0352EB5D211F1AF9982E44511F970/3g51A-ABhslzWN1dtBsa6o1bt98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5f:af:9e:a2:1e:aa:f0:47:4d:1d:d3:d8:7e:1e:c8:57:a4:
         49:61:12:c1:70:71:5d:7e:4b:66:b4:37:ca:90:a8:2f:c3:19:
         c1:a9:1c:4d:62:77:79:df:b1:c7:00:18:7e:69:9f:f3:0b:e1:
         24:af:e1:68:6f:8c:be:27:57:a0:d2:3a:f1:fa:68:c0:9b:5b:
         0f:43:fd:43:97:e3:96:d2:5b:f3:72:80:67:5a:9f:ac:6c:f9:
         0e:1a:0c:b4:c3:bd:03:a3:23:9f:53:42:46:6c:50:08:ad:c1:
         48:e6:16:74:3f:8e:18:bb:91:38:ac:00:76:18:26:6c:40:a6:
         9a:cb:94:2f:5c:dd:22:56:89:e7:05:40:a8:97:d3:b8:dc:41:
         0c:9e:9e:a3:e5:28:a6:9f:41:99:f9:4e:72:46:52:88:c6:62:
         c3:9e:7e:55:d3:63:36:20:3a:98:a7:43:8e:3d:d7:ae:dd:bb:
         c2:ce:36:e2:c1:0a:80:14:63:bb:93:ed:2a:79:cb:c2:34:3a:
         70:aa:b2:89:a5:8c:2f:fa:b7:3b:fb:a2:54:39:98:0d:db:3f:
         0f:1b:34:61:fd:7e:13:68:18:ad:5c:bb:26:75:89:52:ee:83:
         85:ea:43:1c:d1:b7:a3:e0:e0:86:fe:d0:cf:24:6a:af:90:8b:
         b4:ae:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:07:50 2026 by rpki-client