Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
File:                     REhMnzpz9xlXK4vIoaH9nln6hPY.mft (raw, json)
Hash identifier:          XFn+Gg5QNt5yTku5TL2yhAh69ZKPsmvWlMxFY5LbVz8=
Subject key identifier:   4C:E4:07:BD:FC:2B:A8:A8:79:7A:F1:8F:AF:82:21:B2:27:48:1B:DE
Authority key identifier: 44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6
Certificate issuer:       /CN=A91BD73B/serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6
Certificate serial:       3585
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
Manifest number:          3585
Signing time:             Thu 08 Oct 2026 15:17:14 +0000
Manifest this update:     Thu 08 Oct 2026 15:17:13 +0000
Manifest next update:     Thu 15 Oct 2026 15:17:13 +0000
Files and hashes:         1: REhMnzpz9xlXK4vIoaH9nln6hPY.crl (hash: DvCJTFS/SrciV80jNx+yuCX075C1XYt76PPCmaJHIXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.crl
                          rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 15:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13701 (0x3585)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD73B, serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6
        Validity
            Not Before: Oct  8 15:17:13 2026 GMT
            Not After : Oct 15 15:17:13 2026 GMT
        Subject: CN=6ac7b3fa-73f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:db:13:9f:1b:f7:1d:85:3b:f2:d0:31:00:
                    7c:11:56:20:f6:13:13:40:c9:f9:49:0a:09:13:5f:
                    d8:8a:0f:e4:b1:86:d1:58:a4:d3:7e:49:8a:56:a4:
                    3a:9c:2b:b1:27:0a:52:e4:6f:64:f2:99:c5:2f:e8:
                    b2:b2:79:1c:e5:54:04:80:94:2d:0a:18:90:50:27:
                    1c:9d:9c:b8:47:56:d5:31:4f:0e:9d:ce:20:e0:68:
                    65:1e:eb:fd:72:08:a6:c2:e0:74:73:b3:99:d8:ec:
                    be:3f:66:2c:1a:66:60:bc:2b:e0:9d:0d:fb:97:00:
                    8c:d3:ca:64:04:60:e3:ff:bf:54:43:39:cc:56:3e:
                    84:72:83:5e:0f:b0:f0:04:c1:61:d3:dd:b8:ec:08:
                    77:f2:8a:41:10:fe:43:01:86:f0:e0:e0:cb:65:91:
                    9a:a8:d6:73:10:16:d9:10:53:b6:71:fe:cc:2a:56:
                    53:eb:8f:4e:df:35:6d:17:16:da:c0:75:2c:27:61:
                    b9:4e:cc:b6:29:24:79:0e:e2:e6:8d:40:0f:c7:38:
                    0e:02:63:b4:48:85:3b:1f:97:dc:7b:33:6a:03:b9:
                    6c:21:8e:b7:e5:bc:c1:1c:be:1b:37:e0:a5:27:be:
                    9d:fd:5e:d8:28:da:7e:b0:69:fa:4a:5e:86:e6:b4:
                    c8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E4:07:BD:FC:2B:A8:A8:79:7A:F1:8F:AF:82:21:B2:27:48:1B:DE
            X509v3 Authority Key Identifier:
                keyid:44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:bc:b2:b7:36:3a:9e:9c:a2:39:94:4f:a1:75:b1:74:65:9e:
         f3:2b:b6:9c:7b:ec:f8:5c:96:d6:52:3b:27:b7:9d:f0:26:d7:
         1a:80:2e:05:8a:6d:be:d5:15:d9:72:68:45:00:21:e2:df:45:
         bc:d1:b9:2e:61:38:75:f8:d2:72:a2:60:c0:ce:b6:4f:bb:cc:
         04:03:d1:83:80:57:c4:25:b5:01:92:ce:6d:90:51:a9:5b:76:
         7c:78:86:98:76:39:c1:fc:ae:c2:50:64:7c:b3:3f:2b:94:a4:
         59:a6:4f:f0:ed:a5:72:71:02:ad:80:11:d8:4b:84:61:7d:c6:
         b3:5e:60:8d:20:2c:04:41:ae:f2:fc:82:97:b7:12:51:98:7a:
         13:36:07:f7:eb:c9:4c:f8:e4:57:98:19:ab:ba:ee:81:5d:4b:
         58:99:25:c7:3e:a7:da:e9:53:21:a2:6f:44:a7:23:cd:82:37:
         ef:74:6e:d8:db:e6:64:d7:29:de:d6:6d:12:d2:fc:ea:fa:02:
         3f:4e:76:05:b1:72:7d:38:54:fd:8a:56:39:35:ab:f3:d6:5a:
         79:4b:11:11:6a:12:46:bb:f2:a2:3d:d3:1b:a7:1c:1f:c6:d4:
         a9:d1:ed:ff:fe:18:7a:b1:c5:ba:7b:06:c9:02:a2:c3:a9:a9:
         6e:4b:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:00:59 2026 by rpki-client