Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
File:                     X3A2SNc_YGlFARjbom-WaC1a5so.mft (raw, json)
Hash identifier:          N/bNzoNN9gZd2Dg6skh0cI90fhposgneInF0yVU5wFc=
Subject key identifier:   BB:47:4A:66:61:0F:94:73:F4:AC:04:9D:D7:6E:55:34:99:E9:56:87
Authority key identifier: 5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA
Certificate issuer:       /CN=A91508BB/serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
Certificate serial:       3584
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
Manifest number:          3584
Signing time:             Sun 04 Oct 2026 14:37:38 +0000
Manifest this update:     Sun 04 Oct 2026 14:37:37 +0000
Manifest next update:     Sun 11 Oct 2026 14:37:37 +0000
Files and hashes:         1: X3A2SNc_YGlFARjbom-WaC1a5so.crl (hash: H/AjivWPNDcTtBnYPIyhkGM0HzU8D/GvBDF/FESgoz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl
                          rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13700 (0x3584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91508BB, serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
        Validity
            Not Before: Oct  4 14:37:37 2026 GMT
            Not After : Oct 11 14:37:37 2026 GMT
        Subject: CN=6ac264b2-09dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ea:bc:63:5a:8e:ba:ff:2b:04:55:9c:72:d7:
                    3c:a9:60:c8:8e:03:1e:47:de:35:ce:28:81:51:f9:
                    67:02:a6:5c:1d:2c:af:67:b8:6a:60:b3:80:59:2c:
                    1a:9e:3d:35:78:52:25:ff:08:72:6c:7e:83:9c:2b:
                    29:dd:cf:2b:10:8d:2a:0d:9a:7b:d6:b6:ee:a0:d2:
                    7f:c7:34:35:c8:2c:1e:ba:bc:3c:6b:29:c4:00:29:
                    b6:b3:a3:6e:88:24:f9:4f:99:bb:fc:56:e1:72:d0:
                    c6:33:cf:0c:45:a8:11:82:88:f7:4d:87:a8:9b:a4:
                    5f:86:21:20:ac:fc:5a:ce:8a:22:83:6d:96:16:16:
                    fa:33:95:61:37:06:83:b9:a8:de:8c:a7:5b:dc:4f:
                    df:4d:15:26:e2:fe:6a:87:23:e1:82:69:cf:13:57:
                    3b:0f:10:39:19:7d:eb:4f:c4:8a:d3:44:4a:dd:8b:
                    53:44:3a:53:ed:eb:4d:e0:f5:ac:0b:cf:68:45:98:
                    b9:fc:f3:c0:8e:17:16:95:cc:14:73:c5:44:93:77:
                    c3:66:5c:0a:1e:58:bd:ee:87:c1:23:61:a5:8a:1b:
                    80:af:4a:e9:5d:e5:ab:5d:b9:9d:8d:21:14:e6:ca:
                    06:3f:ed:5a:c2:7c:68:f0:87:14:72:18:5d:c5:ae:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:47:4A:66:61:0F:94:73:F4:AC:04:9D:D7:6E:55:34:99:E9:56:87
            X509v3 Authority Key Identifier:
                keyid:5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:74:1b:ab:e8:93:bc:c6:92:a3:49:f2:d4:df:04:4e:2f:72:
         76:b9:c3:b2:bf:b7:67:71:f9:9c:fe:6b:3f:59:05:5d:0b:93:
         d0:22:f4:ba:27:4c:e8:9d:a5:ea:14:e9:59:46:24:a1:a6:df:
         43:2e:dc:c9:c9:19:55:70:0e:d5:9d:50:d4:61:a9:fb:50:c2:
         a5:36:fc:94:ae:8b:41:a3:d3:8a:ff:95:ab:9d:81:30:ce:81:
         75:72:69:e9:4e:6d:e9:58:a9:74:d3:2d:fc:a8:3b:6d:a0:80:
         ee:8d:c9:c9:8b:66:76:e8:53:89:d0:b6:3b:4c:8f:cc:df:c5:
         90:63:68:8a:28:5d:c8:ba:8a:7b:0f:9d:80:2e:53:f9:a6:6e:
         f8:18:32:a6:e6:b8:77:48:cf:7a:88:e2:a5:b3:92:6e:a9:7b:
         05:bb:bf:cd:bf:ac:b6:d0:10:d2:0b:46:91:74:83:cc:dd:0e:
         a5:05:a8:ea:dd:5d:a4:4a:19:06:b2:b5:45:99:af:8b:95:80:
         5f:2d:d2:39:cb:8a:95:6b:6a:6c:86:b1:9c:43:0f:12:ee:87:
         db:34:fa:a3:4c:80:56:c2:b8:41:f6:14:8b:e0:bc:e5:54:9a:
         2f:47:75:b6:b3:09:1c:87:3d:e3:10:60:38:98:67:3e:fe:a1:
         3d:cc:6e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:58:51 2026 by rpki-client