Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
File:                     n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json)
Hash identifier:          s3MPIEODujFgc2DFb4dx7z7bxVmvTZO6Sd1x1HHcFdY=
Subject key identifier:   AA:C0:3D:89:50:A1:5A:9E:BF:0E:5A:79:C9:EE:A6:F6:B2:F9:BB:F1
Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
Certificate issuer:       /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
Manifest number:          0129
Signing time:             Sat 03 Oct 2026 06:27:00 +0000
Manifest this update:     Sat 03 Oct 2026 06:27:00 +0000
Manifest next update:     Sat 10 Oct 2026 06:27:00 +0000
Files and hashes:         1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: RIGkL6rJUFU3KAEQv9MTLuv9Brc/rNanOnjN06ZgqMw=)
                          2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: YgdZkpaRGf3qZu8ORhNwjKQyDofcMXRWEr4dow0fuZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
                          rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
        Validity
            Not Before: Oct  3 06:27:00 2026 GMT
            Not After : Oct 10 06:27:00 2026 GMT
        Subject: CN=6ac0a034-a82c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:30:bf:6b:64:25:c9:8f:80:99:77:45:69:
                    e7:69:ac:ff:7e:66:0f:4c:c1:b5:9c:6b:eb:82:d1:
                    e8:f2:6d:33:c6:65:a9:6c:37:d2:1e:c1:38:99:5e:
                    28:62:74:e1:1e:99:85:94:52:a2:08:33:ea:ce:5e:
                    1e:85:8b:2d:14:80:b3:be:3b:cd:22:ff:70:49:65:
                    a7:f7:23:96:09:80:fe:e3:c3:cd:cc:25:e0:8c:53:
                    5b:f6:be:50:85:f1:ac:74:55:a0:03:55:05:71:8f:
                    95:3d:65:ff:43:df:c3:62:75:1f:11:e7:97:3d:cf:
                    0c:89:32:00:31:69:5b:73:e0:30:2a:0a:08:3c:d4:
                    71:b9:1f:97:0c:bd:b3:2b:0a:a4:93:cd:57:0c:77:
                    5d:81:2f:24:15:ee:5a:21:a4:40:5c:fd:a2:b9:2b:
                    9b:2d:03:0d:d9:ec:77:8f:6d:cf:81:3b:c2:93:91:
                    3a:f7:ea:5c:e1:a3:d9:40:9e:36:12:bc:38:2b:73:
                    a5:72:96:7b:1b:0b:05:ff:79:da:7b:50:02:63:02:
                    ac:b6:56:79:cf:f3:ae:b1:63:02:4d:af:8f:b4:08:
                    76:20:c6:af:5f:62:e1:66:4c:f7:2c:12:eb:5d:b0:
                    13:91:29:03:e3:8e:70:10:29:90:45:5e:9f:27:77:
                    30:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C0:3D:89:50:A1:5A:9E:BF:0E:5A:79:C9:EE:A6:F6:B2:F9:BB:F1
            X509v3 Authority Key Identifier:
                keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:78:83:71:6f:97:ff:03:66:ef:a4:80:49:3b:0f:db:c0:a6:
         12:03:4a:01:2d:50:64:f5:13:b5:5f:d1:15:67:52:1e:eb:2b:
         74:06:ea:28:6d:64:32:f8:93:16:ea:67:28:80:bd:bd:56:eb:
         0b:02:45:e3:0f:11:ad:83:99:21:db:be:49:51:03:39:bb:2b:
         6f:b1:34:6f:8b:77:a5:e3:ab:a9:8e:d3:7d:01:4a:75:82:b9:
         10:e1:f0:8f:7a:e2:6b:4b:c8:59:b6:b2:97:d6:b4:e6:c5:53:
         66:89:61:97:03:f1:cf:75:89:37:15:1c:e8:75:e2:89:c1:10:
         7a:ab:76:da:11:bd:a1:62:f2:69:ce:30:e5:5f:1d:94:80:1d:
         79:14:e1:3b:75:fc:f0:05:2f:52:f0:f4:c2:c2:73:5b:e8:80:
         3b:d5:56:57:18:ad:c2:ac:4c:26:ec:37:de:d4:1d:8d:ff:15:
         48:7b:4e:9d:82:15:a7:d7:e9:3c:bd:0c:b7:63:2c:21:65:93:
         0b:8d:be:0d:2d:b4:1e:ae:f3:b1:7c:cd:73:24:e3:98:69:d2:
         91:0c:ad:1f:57:24:ea:ed:fd:71:f4:39:f6:0f:a6:70:0a:3c:
         51:e4:43:ba:e7:64:1b:f5:9d:a9:83:d0:60:67:d4:06:78:94:
         00:e7:e2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:22:12 2026 by rpki-client