Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
File:                     5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json)
Hash identifier:          5f41L2U3uoGSMk+yeJmx27g6JrfqJDbYL8DKa/mQhGQ=
Subject key identifier:   CD:9D:8F:60:01:95:82:A9:A3:29:55:F2:F0:15:C2:93:C0:01:32:16
Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
Certificate issuer:       /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Certificate serial:       3581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
Manifest number:          3581
Signing time:             Sat 26 Sep 2026 14:42:11 +0000
Manifest this update:     Sat 26 Sep 2026 14:42:10 +0000
Manifest next update:     Sat 03 Oct 2026 14:42:10 +0000
Files and hashes:         1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: UYg5jTQCF7b2ZLpIHSNA1KCTUp1iTp/evpQo0laKxes=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
                          rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 14:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13697 (0x3581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
        Validity
            Not Before: Sep 26 14:42:10 2026 GMT
            Not After : Oct  3 14:42:10 2026 GMT
        Subject: CN=6ab7d9c3-6864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:50:81:04:76:3f:0e:dd:38:08:ef:52:44:e5:
                    2c:f4:36:b4:0a:94:a0:f0:08:da:2a:23:d6:a2:65:
                    a8:82:10:15:e9:55:a6:4e:c3:8d:33:e8:8d:04:71:
                    43:5a:6b:65:4b:94:98:81:24:e3:02:73:db:87:a3:
                    92:45:a8:e8:20:d3:5e:71:c6:b0:74:15:ab:78:05:
                    8a:78:85:69:dd:f9:23:ad:c2:b6:c3:d5:86:b8:85:
                    39:22:19:3a:f0:32:f3:50:d1:72:00:bb:5e:fb:d6:
                    30:99:f5:26:5c:7a:b0:9c:45:eb:89:c5:0c:c1:b9:
                    36:dc:b7:41:55:80:4e:74:17:5c:65:24:aa:46:ba:
                    8a:be:08:9b:8b:d9:0b:9a:87:c4:b9:ae:aa:7b:7a:
                    4d:f0:99:ce:c6:65:72:6b:2b:1e:52:2d:cc:7e:f0:
                    af:70:91:ae:e5:7a:e2:80:85:1e:07:28:55:d0:d0:
                    4b:94:7f:e6:56:3b:36:d4:d5:b2:39:3d:7a:23:15:
                    5a:db:2e:8b:48:3c:e1:cb:4b:7b:7c:69:3f:09:a7:
                    a4:b0:28:d9:57:9f:da:d6:f5:c0:ef:e1:ec:be:ab:
                    eb:93:5a:c7:98:bb:cc:c7:99:8a:26:0b:4b:47:4e:
                    75:70:89:51:6d:b4:ac:43:8f:92:e0:4d:0b:82:0f:
                    49:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9D:8F:60:01:95:82:A9:A3:29:55:F2:F0:15:C2:93:C0:01:32:16
            X509v3 Authority Key Identifier:
                keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0a:51:df:ce:a8:ea:57:e3:eb:4f:03:f0:02:02:bb:9b:94:
         f0:4c:8d:6f:bf:bf:5b:b9:46:bd:2d:75:b0:6f:74:06:42:bf:
         e2:36:2b:8d:cf:88:bd:7b:60:db:46:bf:66:6a:59:a5:12:c5:
         64:f6:4a:a7:20:eb:1e:e8:72:b1:e5:95:cb:3e:d3:02:36:76:
         66:ff:ad:48:09:c5:8c:28:a0:77:af:84:57:54:d1:21:44:d8:
         8c:d4:76:ff:3d:fa:fb:1b:af:13:12:3f:b9:61:90:9c:51:5a:
         71:b8:e3:14:4e:13:ef:47:8d:10:56:ee:2e:33:75:57:7a:d7:
         3d:b4:da:25:69:3d:87:17:e1:9f:98:22:23:14:d4:95:a8:4f:
         63:40:3d:d9:1e:f6:d5:e4:e3:11:64:82:04:ce:dc:c8:48:c0:
         dd:80:e8:da:6a:c7:8a:65:14:3a:49:b8:fe:69:aa:69:d1:3d:
         67:9a:b6:58:11:8d:3e:fb:be:42:82:f4:e0:b9:cf:38:6f:6f:
         c4:bc:f2:a4:a9:b5:e0:65:f8:3b:a3:46:7c:50:41:da:39:de:
         30:e5:a1:30:2b:97:9e:d3:91:f8:70:fb:07:6f:85:04:e7:b5:
         f9:52:03:fd:fc:15:e5:3b:4d:bf:76:bb:31:23:8f:7c:31:b1:
         1c:a4:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:50:49 2026 by rpki-client