Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
File:                     PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json)
Hash identifier:          0vhIRDGOas+9tzc8Qx7BcAv17/4BIoGFQ7EMPxhMM0c=
Subject key identifier:   5B:A1:16:7A:AD:22:FC:74:60:AD:C3:FC:E3:8B:46:07:89:5C:0E:52
Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE
Certificate issuer:       /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
Manifest number:          F5
Signing time:             Wed 07 Oct 2026 06:48:47 +0000
Manifest this update:     Wed 07 Oct 2026 06:48:46 +0000
Manifest next update:     Wed 14 Oct 2026 06:48:46 +0000
Files and hashes:         1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: 35x0mAws/EvH5rp5fVOUN/RCgIPKwbbayCKnBqYay/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl
                          rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE
        Validity
            Not Before: Oct  7 06:48:46 2026 GMT
            Not After : Oct 14 06:48:46 2026 GMT
        Subject: CN=6ac5eb4e-c796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:48:c9:ab:f6:16:ad:d3:28:d3:a7:76:1f:
                    ed:6f:61:d0:a6:e6:b6:0a:a7:65:0f:76:1e:4c:1a:
                    89:b6:d5:30:10:1b:2c:38:04:7a:12:02:2c:e7:67:
                    ce:3d:a1:85:ca:e0:a5:c9:ac:d7:d1:c6:19:5a:56:
                    e8:71:a5:48:03:c2:68:cb:b1:33:7f:0a:07:54:83:
                    26:59:d0:60:cb:7a:8d:fb:88:f7:d1:eb:05:fe:bf:
                    92:98:f1:bb:fd:05:35:b8:76:4a:ba:fc:8f:1b:cd:
                    c2:fd:93:2d:c2:ae:52:c8:6d:eb:9e:00:1c:1f:c7:
                    aa:24:0a:10:8a:e9:44:bc:50:da:0a:d9:42:4a:1b:
                    be:2d:6b:58:ea:26:41:f1:45:5a:35:b4:22:9c:b2:
                    a6:0a:90:4f:89:54:84:f3:a5:f0:68:ce:8e:ee:9d:
                    92:8a:bc:99:27:88:f9:3b:53:30:80:64:56:57:c7:
                    bf:f5:5c:c5:0d:4f:d7:96:ca:2f:41:8f:91:29:d7:
                    58:e4:b9:83:1c:84:18:99:49:d1:bc:02:7e:54:3c:
                    45:b0:16:2f:6c:1e:66:fc:01:f0:03:d2:cf:7f:65:
                    16:cd:00:9c:41:7b:59:a6:0b:7d:4a:61:42:a8:b9:
                    68:e3:4f:dd:38:2c:1c:57:b3:28:2f:db:18:7a:4c:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A1:16:7A:AD:22:FC:74:60:AD:C3:FC:E3:8B:46:07:89:5C:0E:52
            X509v3 Authority Key Identifier:
                keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:af:ec:90:ec:eb:58:f4:c1:8d:46:9c:fd:e5:7a:fb:fe:44:
         c8:57:ee:a0:67:ac:e7:f6:84:7a:a7:da:62:5a:3b:94:43:2e:
         4f:16:74:e6:58:74:d3:40:fc:5c:fa:d7:5b:c0:61:09:72:90:
         a4:ed:c3:a5:c4:16:89:ff:2e:5a:84:7e:14:41:a4:82:a1:c7:
         16:7c:cb:b5:cc:2d:f7:31:72:a7:a2:20:2c:69:35:48:b0:f2:
         23:b4:f7:16:23:3f:c9:98:f5:fb:4f:1c:d8:ab:78:4f:2e:9d:
         5e:32:9e:3f:2b:7e:c4:16:54:0d:f2:e2:4b:d9:f6:9a:86:61:
         54:62:75:63:f7:87:8c:43:d8:17:19:cf:cc:cc:f6:94:82:c1:
         87:fa:4c:a3:67:86:be:32:db:57:01:db:3f:c2:39:33:8d:a1:
         bf:ee:ce:9e:af:53:22:15:00:a6:70:d0:53:ad:8e:63:f6:b5:
         97:61:38:55:74:e9:80:c7:b2:95:72:48:08:a2:f4:9a:0a:af:
         fe:fb:5b:ab:83:e1:93:2a:52:c4:a6:a5:7a:26:09:fa:e1:42:
         8a:e4:c4:46:e0:80:f0:69:f5:7b:da:46:cb:7a:5e:27:08:18:
         c7:51:8f:87:ad:e2:a6:23:d6:f6:08:8e:9a:90:dc:da:6d:72:
         b0:e6:49:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg5RTcxMTAvBgNVBAUTKDNGMDk5NzlEODg4QTNEQTc3MTYwQjNDODA3MzdDQzM2
MDBDNkI4REUwHhcNMjYxMDA3MDY0ODQ2WhcNMjYxMDE0MDY0ODQ2WjAYMRYwFAYD
VQQDEw02YWM1ZWI0ZS1jNzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnMhIyav2Fq3TKNOndh/tb2HQpua2CqdlD3YeTBqJttUwEBssOAR6EgIs52fO
PaGFyuClyazX0cYZWlbocaVIA8Joy7EzfwoHVIMmWdBgy3qN+4j30esF/r+SmPG7
/QU1uHZKuvyPG83C/ZMtwq5SyG3rngAcH8eqJAoQiulEvFDaCtlCShu+LWtY6iZB
8UVaNbQinLKmCpBPiVSE86XwaM6O7p2SiryZJ4j5O1MwgGRWV8e/9VzFDU/Xlsov
QY+RKddY5LmDHIQYmUnRvAJ+VDxFsBYvbB5m/AHwA9LPf2UWzQCcQXtZpgt9SmFC
qLlo40/dOCwcV7MoL9sYekz7SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuhFnqt
Ivx0YK3D/OOLRgeJXA5SMB8GA1UdIwQYMBaAFD8Jl52Iij2ncWCzyAc3zDYAxrje
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODlFNy9BMjdGRTZEQzRD
MDkxMUYwOUYzOEI2MjhDNEY5QUUwMi9Qd21YbllpS1BhZHhZTFBJQnpmTU5nREd1
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B3bVhuWWlLUGFkeFlMUElCemZNTmdER3VONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODlFNy9BMjdGRTZEQzRDMDkxMUYwOUYzOEI2MjhDNEY5QUUwMi9Qd21YbllpS1Bh
ZHhZTFBJQnpmTU5nREd1TjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvq/skOzrWPTBjUac/eV6+/5EyFfuoGes5/aEeqfaYlo7lEMuTxZ05lh000D8
XPrXW8BhCXKQpO3DpcQWif8uWoR+FEGkgqHHFnzLtcwt9zFyp6IgLGk1SLDyI7T3
FiM/yZj1+08c2Kt4Ty6dXjKePyt+xBZUDfLiS9n2moZhVGJ1Y/eHjEPYFxnPzMz2
lILBh/pMo2eGvjLbVwHbP8I5M42hv+7Onq9TIhUApnDQU62OY/a1l2E4VXTpgMey
lXJICKL0mgqv/vtbq4PhkypSxKaleiYJ+uFCiuTERuCA8Gn1e9pGy3peJwgYx1GP
h63ipiPW9giOmpDc2m1ysOZJkw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:18:09 2026 by rpki-client