Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
File:                     xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json)
Hash identifier:          K1IH2N/ympD1UzDX2jdnyWxyFhNB7OvDgyxQmT1lvmE=
Subject key identifier:   EE:6D:E6:D3:57:CE:46:52:04:8D:77:B8:A2:89:B4:77:02:4E:0C:E9
Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5
Certificate issuer:       /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5
Certificate serial:       357B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
Manifest number:          3579
Signing time:             Tue 22 Sep 2026 15:05:57 +0000
Manifest this update:     Tue 22 Sep 2026 15:05:57 +0000
Manifest next update:     Tue 29 Sep 2026 15:05:57 +0000
Files and hashes:         1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: OfO0nXJqz3nKd8/z+AyYqdszDDMZuQ1OokyNn0kOHqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl
                          rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13691 (0x357b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5
        Validity
            Not Before: Sep 22 15:05:57 2026 GMT
            Not After : Sep 29 15:05:57 2026 GMT
        Subject: CN=6ab29955-fd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:32:d6:5b:20:78:f3:05:31:dd:88:26:16:
                    c6:a6:8d:d5:8d:26:fc:71:c9:54:40:42:e5:39:c2:
                    4d:96:c7:3e:8c:a1:df:83:e1:52:e5:78:20:a7:7a:
                    8e:a3:35:3d:47:39:f8:1c:c3:78:16:81:93:b9:c6:
                    29:81:5a:3c:c5:1a:47:0d:07:7a:9e:85:0d:11:c0:
                    e6:03:93:7d:3a:1d:94:42:3b:18:fe:f2:97:cd:c2:
                    a1:ee:96:b9:9d:f7:e7:74:a8:e9:ce:43:1f:73:a5:
                    29:43:d2:2b:f5:84:68:d9:17:30:cb:ee:70:98:40:
                    db:49:1f:7e:a4:73:31:bc:ae:de:49:d0:44:dc:d5:
                    72:74:91:0d:43:4c:fe:28:b6:42:6a:70:32:c6:1f:
                    d2:3b:35:bc:76:6a:0f:8b:3f:db:bc:48:8d:dd:e0:
                    55:87:92:fc:fb:a0:2e:d0:2f:d4:ed:d8:d6:8c:da:
                    c6:ab:50:ef:b0:c9:74:32:08:50:b8:5b:57:aa:d0:
                    d2:9f:4f:af:f0:d7:70:35:1e:ff:c5:23:41:de:db:
                    60:34:48:5b:e7:38:22:5d:7a:e8:fc:30:fa:b6:81:
                    fb:b0:6c:f7:eb:ac:f3:5d:0c:f7:7a:35:8b:84:f6:
                    1d:29:41:ca:14:91:0f:b8:bf:39:c3:52:64:fc:f8:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6D:E6:D3:57:CE:46:52:04:8D:77:B8:A2:89:B4:77:02:4E:0C:E9
            X509v3 Authority Key Identifier:
                keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:3b:af:32:4f:4b:47:76:ca:6c:dc:ca:9a:bf:3e:57:de:75:
         c5:67:4b:b4:67:a3:6b:2b:37:c3:1f:08:fb:9b:a4:8d:46:39:
         6b:95:9b:89:bb:74:30:30:92:6b:4a:cc:6a:fb:d5:c9:7a:27:
         fd:ba:26:2d:51:2c:36:c7:6a:40:0b:a3:ae:5b:6d:29:08:af:
         c0:12:90:56:9f:cd:99:cf:5c:f4:e4:e2:ff:2f:18:8a:dd:8b:
         43:8d:ae:6e:b7:0a:35:63:f5:b2:02:69:e1:4d:5d:cf:c1:c8:
         b8:e9:6a:24:93:dd:35:65:25:bb:de:5e:73:42:3e:43:5f:f0:
         03:e4:d6:8e:25:a8:d6:58:85:5f:84:97:6d:e4:7d:d8:f0:6b:
         d7:98:8b:e6:43:6c:f2:0d:18:05:5c:22:f3:e6:94:6c:4c:0e:
         1e:af:ac:fb:27:49:27:7e:0d:6c:69:22:3e:76:7c:13:aa:d9:
         d1:6a:8f:b8:9d:11:dc:18:7d:0e:35:0c:76:96:7a:2a:56:ba:
         bb:92:f4:f6:8b:11:40:df:46:56:ce:3f:ca:a2:4c:2b:6a:80:
         ef:8d:11:cb:0c:2e:1e:89:58:7c:ed:77:94:35:0c:a1:77:12:
         78:dc:15:6f:37:f5:0e:f6:8f:dd:99:4e:fe:77:6c:cd:06:e3:
         0d:23:0e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:31:38 2026 by rpki-client