Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
File:                     5vEsD995brDfK2AuWsQsy4OyLhg.mft (raw, json)
Hash identifier:          Jjpo8Xq/ezYL0apUtMj9MPZjvwtZ/o8IvrXTm68dMm0=
Subject key identifier:   6D:15:BE:64:F2:70:48:52:DC:35:C7:D7:22:4F:18:A6:06:3B:FC:A0
Authority key identifier: E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18
Certificate issuer:       /CN=A914E3B7/serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
Certificate serial:       3586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
Manifest number:          3583
Signing time:             Tue 06 Oct 2026 15:08:19 +0000
Manifest this update:     Tue 06 Oct 2026 15:08:18 +0000
Manifest next update:     Tue 13 Oct 2026 15:08:18 +0000
Files and hashes:         1: 5vEsD995brDfK2AuWsQsy4OyLhg.crl (hash: 7eI1eFHrA2HjzB9zItwJpfwMhUzCEKfZcFIDfJobc30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl
                          rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 15:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13702 (0x3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E3B7, serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
        Validity
            Not Before: Oct  6 15:08:18 2026 GMT
            Not After : Oct 13 15:08:18 2026 GMT
        Subject: CN=6ac50ee3-149d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:3a:3e:3a:79:12:47:2b:1b:1b:3a:51:01:
                    0d:d7:58:7a:00:87:6f:33:fc:86:03:f4:0e:c2:e8:
                    0f:00:d6:86:1d:77:d6:5f:bd:ac:58:8c:3c:e1:fc:
                    af:1d:2a:b3:93:86:d9:67:72:92:ac:a1:bb:75:f9:
                    de:98:55:cc:6d:02:2a:e5:19:f7:ec:01:4b:84:ce:
                    99:a1:bf:38:73:bb:cf:09:17:60:ab:6c:c6:9e:a7:
                    a0:f4:5a:fc:82:91:ca:06:6b:02:00:cf:cd:a7:00:
                    31:fe:ca:3f:45:1e:c6:16:a1:72:7d:3e:55:85:2c:
                    82:60:f2:c5:67:ab:44:24:21:19:55:2e:9c:74:18:
                    ab:a5:02:ee:26:50:26:a2:6e:af:76:28:b2:48:53:
                    bc:e3:08:fd:4e:59:f2:e6:23:ef:e2:ea:18:c2:7f:
                    49:8f:b2:2d:53:53:ef:18:5d:96:e6:6c:0f:35:3d:
                    59:39:26:af:cd:5f:4c:40:cd:22:3c:5b:35:d5:1a:
                    17:fa:6f:8b:2e:a6:06:8a:61:74:4f:1c:41:fc:78:
                    26:7f:4d:df:24:35:7e:d2:d9:cf:53:47:67:66:52:
                    49:08:34:a7:63:33:fc:8d:98:e6:66:e4:8b:79:61:
                    8b:ff:46:4d:97:98:9b:29:76:12:4b:82:a0:58:87:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:15:BE:64:F2:70:48:52:DC:35:C7:D7:22:4F:18:A6:06:3B:FC:A0
            X509v3 Authority Key Identifier:
                keyid:E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4f:24:9e:b9:20:b6:90:bb:78:93:7e:47:f4:d0:3c:84:10:
         22:5a:02:6f:c9:9e:7c:fd:21:5e:28:24:37:82:78:cc:8f:e5:
         04:fb:72:82:88:6a:a5:88:2e:49:4c:82:40:6f:b3:24:15:82:
         2a:98:62:c5:16:b3:ca:50:56:99:14:37:28:fc:29:af:ca:1f:
         83:3d:a9:9b:af:00:f7:5d:4f:ea:a7:d5:8a:52:dd:d2:35:a6:
         1f:14:a2:a8:b0:fc:6b:3a:1f:cd:fb:eb:9d:dd:0e:d4:f6:97:
         47:82:33:d0:2e:94:02:d9:92:91:1a:25:a8:26:6e:df:d4:90:
         55:33:99:b0:04:e5:7c:2a:e6:aa:73:c0:19:a1:b4:55:16:72:
         17:21:c6:c7:c5:13:3c:3a:e2:05:a0:17:23:42:d7:c1:81:91:
         72:33:0a:5f:f8:b7:12:80:7e:47:4b:69:e0:62:46:dd:11:3e:
         72:99:cd:5c:ea:83:9b:e0:7d:80:1f:a9:0a:b0:f8:4a:e7:bd:
         8f:e5:12:2e:a2:4d:38:6c:5a:df:06:92:5f:8e:ac:7b:bd:60:
         f3:26:65:4a:11:b6:5e:57:b7:f8:7a:fd:e7:3c:5f:15:79:e3:
         ef:2f:8d:5c:d8:ce:d2:b2:8f:71:39:5c:ce:80:62:64:06:95:
         cf:fd:8c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:09:03 2026 by rpki-client