Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
File:                     PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json)
Hash identifier:          PJPT6U+DJvFxgyPDQtoaxutHWz4mXvJqCPf2lo4Dcx4=
Subject key identifier:   CA:B3:9D:A6:EF:4A:1D:70:C2:65:71:DE:4D:24:63:AB:89:D4:CD:D2
Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E
Certificate issuer:       /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
Certificate serial:       3583
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
Manifest number:          3583
Signing time:             Fri 02 Oct 2026 14:42:20 +0000
Manifest this update:     Fri 02 Oct 2026 14:42:19 +0000
Manifest next update:     Fri 09 Oct 2026 14:42:19 +0000
Files and hashes:         1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: u0Wj/DsqyXiAGZHxJB+C1b7rZP7B7FC2KR9rUv4+R44=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl
                          rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 14:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13699 (0x3583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
        Validity
            Not Before: Oct  2 14:42:19 2026 GMT
            Not After : Oct  9 14:42:19 2026 GMT
        Subject: CN=6abfc2cc-80e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:27:67:8f:e1:83:54:bf:b8:24:53:07:76:
                    cb:cd:52:74:56:bf:a4:2b:c2:e2:ad:80:6e:08:e2:
                    eb:f8:ef:c5:99:49:08:ac:83:80:06:a7:4b:a4:e5:
                    68:ee:63:01:93:a1:b1:8f:26:86:07:43:10:ec:6a:
                    29:c7:cc:f4:b7:65:1a:f0:93:42:94:13:57:dd:0c:
                    ed:73:d9:68:66:46:22:7d:fa:3e:c7:17:28:f9:2e:
                    a5:61:47:b2:c3:4f:6d:b6:0f:d9:8d:41:91:06:86:
                    fe:44:86:57:52:23:1a:90:69:7f:00:d6:2f:b9:a6:
                    22:3d:99:a6:06:95:64:5d:48:b9:20:a8:1c:38:95:
                    ac:41:7b:34:2d:65:cd:e8:7d:54:d7:bb:e0:10:0a:
                    3e:2f:e1:09:2e:5f:1c:35:b8:f6:20:24:4f:bb:79:
                    a1:8a:4c:91:82:d6:1c:5b:2c:ff:a4:bf:4a:47:bd:
                    3c:e2:e8:f9:17:0d:80:f7:b0:f3:83:06:75:92:dc:
                    d0:e6:61:ca:fa:63:02:29:6a:5b:d6:3f:d8:ca:4a:
                    f2:e7:9b:05:61:07:c1:ee:9f:69:50:45:ff:3c:ba:
                    39:9a:39:5d:33:dc:06:2c:4c:f7:f9:6c:3e:83:24:
                    90:e0:ed:95:17:a4:4e:bf:8e:e3:be:79:aa:a6:40:
                    68:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B3:9D:A6:EF:4A:1D:70:C2:65:71:DE:4D:24:63:AB:89:D4:CD:D2
            X509v3 Authority Key Identifier:
                keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c3:69:b4:ec:c8:4e:cf:7a:04:5d:04:56:1a:62:5d:87:57:
         e8:69:f8:08:3b:be:91:b5:54:ef:81:b0:8f:0f:1a:ce:42:ab:
         c7:62:4f:f2:e0:96:e2:98:ab:39:6b:c3:76:93:b9:23:4d:ed:
         e8:a0:8e:cd:ab:e9:04:78:61:17:70:b7:d1:51:6f:35:42:63:
         b4:58:03:4c:a7:24:d0:fe:e4:7d:6e:85:7a:7d:0d:36:28:44:
         4a:59:13:3d:f8:eb:8e:b1:49:3c:9a:e3:c1:12:f0:0e:3a:ce:
         b6:aa:a9:c8:f0:fb:47:7c:c2:8b:0c:e8:8a:50:10:b1:65:47:
         0d:3b:88:dc:90:6a:9a:d7:0b:73:79:31:fd:8c:c8:bf:a9:07:
         b0:5c:a3:13:00:80:fc:e9:57:6f:6d:7b:d6:b4:67:ee:4d:2d:
         55:d6:e0:11:b2:fd:3f:32:45:2c:77:dd:54:91:f8:04:ad:8d:
         99:74:61:89:73:b8:1f:cc:cb:30:cd:db:bf:a3:d0:1b:50:ff:
         81:97:72:ee:2a:aa:1b:cb:28:45:6b:41:45:7c:d1:ea:ff:e6:
         af:01:25:45:90:b3:ab:9d:06:ca:9d:c0:31:2d:1a:24:e6:20:
         a8:de:7e:a7:32:b7:23:36:b8:66:f5:f8:9c:fe:4d:cc:eb:64:
         99:e2:0e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:17:15 2026 by rpki-client