Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
File:                     ixmALSASaL5h2fBX4_7zTlSUTDE.mft (raw, json)
Hash identifier:          ZN+sj02iLjHzPM1kIQOQ50JCodzl2tAUk2Tg5mgbetk=
Subject key identifier:   D2:6B:E4:BA:9D:9C:BD:2F:F0:4C:E3:94:CC:F9:B9:2C:3F:00:2B:55
Authority key identifier: 8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31
Certificate issuer:       /CN=A9143E57/serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31
Certificate serial:       3584
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
Manifest number:          3584
Signing time:             Tue 06 Oct 2026 14:51:32 +0000
Manifest this update:     Tue 06 Oct 2026 14:51:32 +0000
Manifest next update:     Tue 13 Oct 2026 14:51:32 +0000
Files and hashes:         1: ixmALSASaL5h2fBX4_7zTlSUTDE.crl (hash: jBx1GA5f7W0T36NyoJ/KO8D0mY/v9BYmH3EJFo7/n2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl
                          rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13700 (0x3584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143E57, serialNumber=8B19802D201268BE61D9F057E3FEF34E54944C31
        Validity
            Not Before: Oct  6 14:51:32 2026 GMT
            Not After : Oct 13 14:51:32 2026 GMT
        Subject: CN=6ac50af4-899a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:40:b9:9b:c3:a2:1f:7d:66:e5:ac:5b:59:5f:
                    a2:3c:ff:5c:21:97:8b:97:37:9d:04:bc:1d:02:4e:
                    96:1b:66:3c:9d:c1:cd:08:2a:c5:b2:37:62:e5:d5:
                    bd:01:6c:ec:47:8e:b3:3a:05:17:c2:9e:0b:75:bf:
                    6d:bb:35:4c:99:1b:d0:92:71:84:3f:af:05:b6:b5:
                    92:e1:ae:a9:34:31:06:98:b0:5d:33:38:12:03:aa:
                    d8:f4:f8:ac:67:de:c7:c9:62:e5:25:4d:67:66:04:
                    14:10:cd:54:44:5b:18:f4:d2:1a:4c:22:64:4b:fa:
                    d5:47:47:e5:38:c1:c7:b2:7e:97:1f:b4:25:cd:4b:
                    dc:f0:17:e1:e9:eb:16:a0:41:c2:b3:12:d5:49:ff:
                    93:a3:92:ce:e4:94:e5:31:24:59:b2:85:38:85:1e:
                    88:f2:a7:9b:ca:25:ac:f3:2f:86:98:21:31:55:a9:
                    1f:30:8b:05:da:d9:43:8d:bd:16:61:c5:29:be:e9:
                    ff:34:75:00:44:e7:5e:27:96:10:97:6b:fe:2a:58:
                    83:73:c4:87:98:4c:30:fd:06:09:f6:d9:0d:a4:47:
                    32:64:86:9e:cc:47:2a:6c:2f:ab:0c:02:e3:08:f1:
                    2b:71:9b:7b:cb:95:28:07:a9:d1:20:e1:e5:bd:f2:
                    8a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6B:E4:BA:9D:9C:BD:2F:F0:4C:E3:94:CC:F9:B9:2C:3F:00:2B:55
            X509v3 Authority Key Identifier:
                keyid:8B:19:80:2D:20:12:68:BE:61:D9:F0:57:E3:FE:F3:4E:54:94:4C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixmALSASaL5h2fBX4_7zTlSUTDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143E57/57827EDC1D9711E2B5FA848008B02CD2/ixmALSASaL5h2fBX4_7zTlSUTDE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b6:50:f1:5c:13:76:2a:f9:75:bf:dd:28:a4:f1:1d:11:64:
         36:e5:8a:e5:98:9d:49:7c:87:09:f2:0d:7e:78:86:8d:a3:61:
         77:a5:05:6c:de:59:3c:ee:08:2d:40:77:1e:0e:75:6f:72:b2:
         d2:14:12:fd:f8:79:6e:16:36:3b:02:27:4a:2f:f3:3b:77:ac:
         aa:e7:59:ac:53:09:8b:27:ee:54:d3:e1:b7:0c:88:92:4e:61:
         1a:ee:6e:a5:e6:92:68:78:8e:30:42:a2:4d:a4:5e:e9:bf:6c:
         c2:cc:e9:37:46:96:0d:c0:25:a6:63:48:c9:3a:83:16:62:2a:
         45:6e:7d:a3:ea:13:f2:07:e4:46:cc:88:6a:83:01:f4:23:64:
         af:53:07:78:09:37:c8:b6:de:35:c2:44:66:05:ad:9a:1f:bb:
         3e:a0:8e:5e:14:75:c2:66:ce:94:bc:79:48:57:ab:eb:c9:83:
         43:89:1f:44:5f:05:00:31:30:14:a5:6e:82:e8:62:df:7e:9e:
         b0:96:a2:1c:13:d0:ed:dd:80:e1:fb:fd:f3:b2:41:71:f6:5c:
         b5:ac:1b:1f:28:d3:84:9e:03:c3:52:e8:c5:df:c6:0c:22:3b:
         e5:e4:91:23:12:8e:65:a9:6b:45:ee:18:dd:1e:96:ce:52:92:
         b0:c4:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:51:49 2026 by rpki-client